Chesham Connect Privacy Promise
How we use your information
At Chesham Connect we will only collect the minimum personal information from you. This will be at the point you either apply for a grant, ask to be included on a newsletter, ask for further information, apply to be a volunteer or require our help with banking services. This could include your name, address, telephone numbers, email address and payment details. We need this information for legitimate, organisational purposes to provide you with the services that you have requested.
Additional information could be requested if you feature in our blog or news pages, but this is optional, and you do not have to provide this unless you want to.
We need this information to process your requests and we do not regard it as excessive. Other details that you provide may be added to your data, but anything not required to either give you more information, provide you with a grant or banking services will be deleted immediately. We will not ask for any irrelevant information. If your contact details change, please advise Chesham Connect and we will update our records accordingly.
Your data maybe used by the Chesham Connect team but at no point will this be passed on to any other third parties without your prior consent depending on the request. This could be putting you in touch with our advisory team for example.
We use MailChimp to process data to process data on our behalf to send newsletters and promotional emails. MailChimp applies appropriate data protection and security controls. MailChimp is based in the USA and its Privacy Shield certificate means that we can safely transfer your personal data (name and email address) outside of the EU to MailChimp.
Retaining your data
We will process your data in a fair and lawful way, considering current laws and practices that may dictate how long we keep the data, which is outside of our control. We will keep your information accurate and secure. For grant scheme administration and any other instances where financial transactions are involved, we will retain your details for seven years. In all other circumstances, if you have had no communication with us for at least five years, we will delete all your personal information.
If you apply for a grant or ask for our help we will need to use your personal data to help fulfil your request. In order to process this data, we will need your consent, or for you to opt in. Please ensure that you tick the opt in box on your application form or enquiry form. It should be as easy to opt out as to opt in so if you no longer want is to process your data please contact us at: Chesham Connect, c/o Chesham Town Hall, Chesham, Bucks. HP5 1DS or firstname.lastname@example.org
If you email us directly we will need to respond to you so we will regard that as a legitimate business interest. After answering your query we will delete your information after one year, If you would like us to delete it immediately, please advise the person who answered you or contact: Chesham Connect, c/o Chesham Town Hall, Chesham, Bucks. HP5 1DS or email@example.com
You have a right to see what information that we hold about you and you can get in contact with our Data Protection Officer at the following address: Chesham Connect, c/o Chesham Town Hall, Chesham, Bucks. HP5 1DS.
Under the GDPR you have the right to request a copy of the personal information Chesham Connect holds about you and to have any inaccuracies corrected or information deleted. You will need to prove your identity with 2 pieces of approved identification which can be a: passport, driving licence, birth certificate, utility bill (from last 3 months), current vehicle registration document, bank statement (from last 3 months) or a rent book (from last 3 months). We will verify your identity, noting how we verified it, then we will immediately delete that data.
If you can advise of the specific information that you require, we can process your request more quickly. We will respond to your request within one month of you providing information that confirms your identity.
We will then give you a copy of your data, why we have it, who it could be disclosed to and it will be in a format that you can access easily. You have the right to clarify and correct the information as necessary. It can be deleted providing that it is not required for legal or public interest reasons. We will not transfer your personal information outside of the EU, unless it is via MailChimp which has been previously addressed.
Cookies and your online activity
We use WordPress and Google Analytics. We use third party cookies from Google to enable us to use Google Analytics. Google acts as a data processor for us and may store the information collected by the cookie on servers in the United States. Google is certified under the EU – U.S. framework, which is a legal mechanism to enable the transfer of personal data from the EEA to the US, where certified organisations guarantee to provide a level of protection in line with EU data protection law. By using the web site, you consent to the processing of data about you by Google in the manner and for the purposes set out above.If you wish to make a comment on our website you may be asked for your email address so that we can respond to you.
If you have any concerns about how your data is being used or processed and we have not been able to help you, then you can contact the ICO. Ways to report concerns are detailed on their website: https://ico.org.uk/concerns/ .
If you have any questions, comments or ways we can improve please get in touch.