We, Brysocréma Ltd. are committed to respecting and protecting the privacy of anyone using our site and the confidentiality of any information that you provide us with.  The purpose of this statement is to set out how we use any personal information that we may obtain from you.

Our full privacy policy is explained below, but the main points to note are:

·         We will only ever ask for what we really need to know.

·         We will collect and use the personal data that you share with us transparently, honestly and fairly.

·         We will always respect your choices around the data that you share with us and the communication channels that you ask us to use.

·         We will put appropriate security measures in place to protect the personal data that you share.

We will never sell your data.
 

General Data Protection Regulation

We are registered under the General Data Protection Regulation (GDPR) and comply with this regulation in all our dealings with your personal data.

Use and collection of personal information

In general you can visit our website without telling us who you are and without revealing any information about yourself.  If, however, you use our site you will need to register and you will be asked to provide certain information such as your contact details.  We will store this data and hold it on computer or otherwise.

The type and amount of information we collect depends on why you are providing it.

We will usually ask you for your name, email address and information about your organisation, including name of organisation and region.

However, we may request other information where it is appropriate and relevant, for example if we are processing an order that you have submitted. This additional information might include:

(1) Details of why you have decided to contact us, or
• Your physical address
• Your bank details or debit/credit card details; 

(2) information about your computer and about your visits to and use of this website including your IP address, geographical location, browser type, referral source, length of visit and number of page views;

(3) information about the services you use, services and products of interest to you or any marketing and/or communication preferences you give; and/or

(4) any other information shared with us in relation to the different purposes set out at clause 1
 

Communication and Marketing

Where you have provided us with your physical address, we may contact you by post; and where you have provided appropriate consent, also by telephone and e-mail, with targeted communications to let you know about our events and/or activities that we consider may be of particular interest

Other Disclosures

We will disclose your Personal Information where required to do so by law or in accordance with an order of a court of competent jurisdiction, or if we believe that such action is necessary to comply with the law and the reasonable requests of law enforcement or to protect the security or integrity of our Service.

Cookies

We collect information directly from you in a number of ways.  One way is through our use of ‘cookies’.  Most websites use cookies in order to make them work, or to work more efficiently, as well as to provide information to the owners of the website.  They help us to understand how our customers and potential customers use our website so we can develop and improve the design, layout, content and function of the site.  Cookies are small text files that are placed on your computer’s hard drive by websites that you visit.  They save and retrieve pieces of information about your visit to the website – for example, how you entered the site, how you navigated through the site and what information and documentation was of interest to you.  This means that when you go back to a website, it can give you tailored options based on the information it has stored about you on your last visit.

Some of our cookies are used to simply collect information about how visitors use our website and these types of cookies collect the information in an anonymous form.

Where there is a login process relating to buying products or services from us we also use cookies to store personal registration information so that you do not have to provide it to us again on subsequent visits.

The rules about cookies on websites have recently changed.  If you are uncomfortable with the use of cookies, you can disable cookies on your computer by changing the settings in the preferences or options menu in your browser.  You can set your browser to reject or block cookies or to tell you when a website tries to put a cookie on your computer.  You can also delete any cookies that are already stored on your computer’s hard drive.  However, please be aware that if you do delete and block all cookies from our website, parts of the site will not then work.  This is because some of the cookies we use are essential for parts of our website to operate.  Likewise, you may not be able to use some products and services on other websites without cookies.

To find out more about cookies, including seeing what cookies have been set and how to manage and delete them, visit www.allaboutcookies.org.

If you do not wish to accept cookies from our website, please leave this site immediately and then delete and block all cookies from this site.  Alternatively, you may opt out of receiving information from us by e-mail, telephone, fax or post.  Our phone number is 07961 550 195, or you can e-mail us on enquiries@brysocrema.org.

Security

We endeavour to ensure that there are appropriate and proportionate technical and organisational measures to prevent the loss, destruction, misuse, alteration, unauthorised disclosure or of access to your personal information.

Your information is only accessible by appropriately trained staff.

The security of your Personal Information is important to us but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Information, we cannot guarantee its absolute security. As such we make no warranties as to the level of security afforded to your data, except that we will always act in accordance with the relevant UK and EU legislation.

Otherwise than as set out in this Privacy Policy, we will only ever share your data with your informed consent.

Your rights

You have a choice about whether or not you wish to receive information from us. If you do not want to receive communications from us about the vital work we do and our exciting products and services, then you can select your choices by ticking the relevant boxes situated on the form on which we collect your information.

Where we rely on your consent to use your personal information, you have the right to withdraw that consent at any time. This includes the right to ask us to stop using your personal information for direct marketing purposes or to be unsubscribed from our email list at any time. You also have the following rights:

(1) Right to be informed – you have the right to be told how your personal information will be used. This Policy and other policies and statements used on our website and in our communications are intended to provide you with a clear and transparent description of how your personal information may be used. 
(2) Right of access – you can write to us to ask for confirmation of what information we hold on you and to request a copy of that information. Provided we are satisfied that you are entitled to see the information requested and we have successfully confirmed your identity, we have 40 days to comply. As from 25 May 2018, we will have 30 days to comply. 
(3) Right of erasure – as from 25 May 2018, you can ask us for your personal information to be deleted from our records. In many cases we would propose to suppress further communications with you, rather than delete it. 

(4) Right of rectification – if you believe our records of your personal information are inaccurate, you have the right to ask for those records to be updated. 
(5) Right to restrict processing – you have the right to ask for processing of your personal data to be restricted if there is disagreement about its accuracy or legitimate usage. 
(6) Right to data portability – to the extent required by the General Data Protection Regulations (“GDPR”) where we are processing your personal information (i) under your consent, (ii) because such processing is necessary for the performance of a contract to which you are party or to take steps at your request prior to entering into a contact or (iii) by automated means, you may ask us to provide it to you – or another service provider – in a machine-readable format.

To exercise these rights, please send a description of the personal information in question using the contact details in section 14 below. 
Where we consider that the information with which you have provided us does not enable us to identify the personal information in question, we may ask you for (i) personal identification and/or (ii) further information.

Please note that some of these rights only apply in limited circumstances. For more information, we suggest that you consult ICO guidance – https://ico.org.uk/for-organisations/guide-to-the-general-data-protectio...
You are further entitled to make a complaint about us or the way we have processed your data to the Information Commissioner’s Office (“ICO”). For further information on how to exercise this right, please see the guidance at https://ico.org.uk/for-the-public/personal-information. The contact details of the ICO can be found here: https://ico.org.uk/global/contact-us. 

Lawful processing

We are required to have one or more lawful grounds to process your personal information. Only 4 of these are relevant to us: 

(1) Consent
We will ask for your consent to use your information to send you electronic communications such as newsletters and marketing and fundraising emails, for targeted advertising, and if you ever share sensitive personal information with us. 
(2) Contractual relationships
Most of our interactions with subscribers and website users are voluntary and not contractual. However, sometimes it will be necessary to process personal information so that we can enter contractual relationships with people. For example, if you apply for employment or to volunteer with us, or if you purchase something via our online shop. 
(3) Legal obligations
Sometimes we will be obliged to process your personal information due to legal obligations which are binding on us. We will only ever do so when strictly necessary. 
(4) Legitimate interests
Applicable law allows personal information to be collected and used if it is reasonably necessary for our legitimate activities (as long as its use is fair, balanced and does not unduly impact individuals’ rights).

Third Party Websites

We link our website directly to other sites. This Privacy Policy does not cover external websites and we are not responsible for the privacy practices or content of those sites. We encourage you to read the privacy policies of any external websites you visit via links on our website.

Please let us know if you have any queries or concerns whatsoever about the way in which your data is being processed by either emailing us at enquiries@brysocrema.org