Introduction

The protection of personal data is paramount to us. This policy outlines our commitment to ensuring that data is collected, stored, processed, transferred and used in compliance with the UK GDPR and the amended version of the DPA 2018.

This policy applies to all members, volunteers and staff. It encompasses all personal data processed, regardless of the data medium or where the data is stored. Our practices are anchored on transparency, fairness and lawful reasons for data processing.

Principles of Data Protection

We adhere to the principles relating to the processing of personal data as outlined in the UK GDPR, including:

Lawfulness, Fairness, and Transparency: Data is processed lawfully, fairly, and transparently.

Purpose Limitation: Data is collected for specified, explicit, and legitimate purposes.

Data Minimisation: Only necessary data for the specified purpose is processed.

Accuracy: Data kept is accurate and up-to-date.

Storage Limitation: Data is kept only as long as necessary for its purpose.

Integrity and Confidentiality: Data is processed in a manner that ensures its security.

Data Subject Rights

All individuals have specific rights concerning their personal data, including:

• The right to be informed
• The right to access
• The right to rectification
• The right to erasure
• The right to restrict processing
• The right to data portability
• The right to object