Overview
The General Data Protection Regulations (GDPR) regulates how data must be held to ensure data security and protect against unauthorised use of your personal data. GDPR are directly applicable to all organisations holding or processing personal data – this includes the North West Highlands Geopark (NWHG). NWHG is a data controller in terms of the regulations, registered with the Information Commissioner’s Office (ICO), and as such must comply with GDPR in how it processes and manages members’ personal data.
NWHG will process and share your data only in accordance with GDPR and where there is a legal basis and a clear purpose for us to do so. We are committed to protecting the personal data and respecting the privacy of our members and customers.
NWHG will only access your personal data:
- With your consent
- For our own legitimate interest and the interest of our customers
- To comply with a legal obligation
In this Privacy Policy you can find out:
- What types of personal data we collect
- How we collect your personal data
- How we use your personal data
- How long we keep personal data for
- The rights and choices you have with regards to your personal data
What types of personal data do we collect?
The NWHG website stores details of all customers with a NWHG network account. This data will fall into three categories:
- Customers who have purchased goods via the online shop
- ‘Friends of the Geopark’ membership scheme
- ‘Members of the Geopark’ membership scheme
The information stored is dependant on the category and may include:
- Name
- Address
- Email address
- Phone number (shop customers only)
- Details regarding the nature of your membership such as date registered and type of membership
No credit card information is stored as all our transactions are directed to PayPal.
For subscribers to the mailing list (Mailchimp), the only data stored is name and email address.
How do we collect your personal data?
We collect your personal data when you:
- Join the mailing list
- Take part in one of our membership schemes
- Make a purchase from our online shop
How do we use your personal data?
NWHG stores (online) contact details of its customers for the purposes of sharing information, advertising events and raising funds. Specifically customers are contacted in connection with:
- Up and coming events & learning courses
- Fundraising and membership schemes
- Distribution of the Geopark newsletters and bulletins
- Postal delivery of online purchases or membership gifts
The name and address of each customer is required to enable goods or membership cards to be dispatched. In addition, it is a requirement for claiming Gift Aid when the customer gives their permission.
What is our legal reason for holding personal data?
We will hold and process personal data where it is necessary to serve the legitimate interests of NWHG and the interest of our customers and members and only for so long as is necessary. The legitimate interests of NWHG are:
- To sell and supply NWHG goods to our customers
- To communicate news, events and activities of the NWHG to those who have given their consent and joined our mailing list or one of our membership schemes
We will hold personal data lawfully, fairly and transparently. We will obtain member’s consent to store and use their personal data and we will delete data which is excessive, inaccurate or out of date or where you ask us to.
What are your rights?
As a member of NWHG you have the following rights under the data protection laws. You have the:
- Right to access your data
- Right to have your data rectified if it is incorrect or incomplete
- Right to have your data erased
- Right to data portability (to obtain and reuse your data for your own purpose across different services)
- Right to be informed about our processing of your data
- Right to restrict processing of your personal data
- Right to object processing of your personal data
How long do we keep your personal data?
We hold data for each membership scheme until the participant no longer wishes to subscribe. Anyone with a NWHG website login can access their personal information and view or change their details at any time. Specifically:
- Ambassadors, Supporters and Members of the Geopark: if you no longer wish to participate in these schemes you can contact us and we will remove your details.
- Friends of the Geopark: you can login to your account on the NWHG website and change your details or remove your subscription at anytime.
- Login IDs created for shop purchases: you can login to your account on the NWHG website and change your details at anytime.
- Subscribers to the mailing list (Mailchimp): Mailchimp functionality ensures that any customers who no longer wish to be included on the mailing list can automatically unsubscribe. Mailchimp also notifies us when customer email addresses are no longer available so that that individual contact details can be removed.
Who do we share your personal data with?
We will not pass your data onto third parties unless they have a legitimate interest and we are satisfied that the third party are NWHG compliant.
How do we protect your personal data?
All personal data is kept confidential and secure with password protection and only accessible by authorized personnel. We are obliged to notify the ICO of any breach of data regulation within 72 hours.