This policy was last updated on 30.01.21. From time to time, we make changes and will notify you of these where appropriate. Please refer to this policy frequently to see any updates or changes.
Introduction & Who We Are
- the Data Protection Act 2018 (as amended) (“DPA”) and
- the Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 No. 419 as amended by the Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2020 (“UK GDPR”), or
- any legislation that amends or replaces it.
For the purpose of the UK GDPR, we are the data controller.
This policy explains how, why and when we collect and process your personal data, and provides you with the necessary information regarding your rights.
If you wish to contact Middle Marches CLT, please email firstname.lastname@example.org.
Your privacy is important to us and we are committed to protecting your personal information.
The Personal Information We Collect & Use
For communication purposes, we collect the following personal information when you provide it to us:
- Your full name, email address postal address and telephone number. Your IP address is also recorded by our mailing list provider, MailChimp.
The information we process for the purposes listed above is restricted to what is necessary. We take your privacy very seriously and will never disclose, share or sell your data without your consent, unless required to do so by law.
Information collected on the website via Comments
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
Information collected via SoGoSurvey
In collaboration with Marches Grow Local, we are using ‘SoGoSurvey’ to collect data on the interest in developing a local food network in the Shropshire Hills that is similar to Tamar Grow Local in Devon. More information on Marches Grow Local can be found here.
You are not required to submit any personal data when completing the surveys, but you can provide your email address if you would like to receive updates from Marches Grow Local, and your postcode if you are interested in a service being available in your area.
Your email address will be added to Mailchimp and your postcode will be stored in Excel on password-protected devices. The survey results will be analysed as aggregate data.
How We Use Your Personal Information
We use the personal information you provide to us to:
- Send you emails about our latest news and upcoming events
- To contact you about other ways to get involved with Middle Marches
Reasons We Can Collect & Use Your Personal Information
We rely on Consent (that you have given clear consent for us to process your personal data for a specific purpose) or Legitimate Interests as the lawful bases on which we collect and use your personal data.
For example, if you sign up to one of our events on Eventbrite, we will assume you would like to be kept up to date with Middle Marches news and add you to our mailing list.
You can unsubscribe from our communication at any time by either following the “unsubscribe” link at the bottom of our emails or contacting us directly at email@example.com.
You have the right to access any personal information that Middle Marches CLT processes about you and to request information about:
- What personal data we hold about you
- The purposes of the processing
- The categories of personal data concerned
- The recipients to whom the personal data has/will be disclosed
- How long we intend to store your personal data for
- If we did not collect the data directly from you, information about the source
If you believe that we hold any incomplete or inaccurate data about you, you have the right to ask us to correct and/or complete the information and we will strive to update/correct it as quickly as possible; unless there is a valid reason for not doing so, at which point you will be notified.
You also have the right to request erasure of your personal data or to restrict processing in accordance with data protection laws.
If we receive a request from you to exercise any of the above rights, we will ask you to verify your identity before acting on the relevant request; this is to ensure that your data is protected and kept secure.
If you exercise your right to be forgotten and request for the data we hold on you to be deleted, we will anonymise your information so that it does not personally identify you. This action can only be taken once we are no longer legally required to store the information i.e. tax purposes for processing Gift Aid or other legal obligations relating to financial accounting.
Sharing Your Information
We use MailChimp, a US-based email service, to store your details and send you our newsletter. In the process of working with Mailchimp your data may be transferred outside the EEA, to the US. Mailchimp is self-certified under Privacy Shield and lawfully transfers EU/EEA personal data to the US according to its Privacy Shield Certification.
Give WP, Stripe and PayPal
We use Give WP as our donation portal with Stripe and PayPal as the payment gateways and processors, to process and maintain all financial transactions. To learn more about security measures from these organisations, please click on the links below:
In collaboration with Marches Grow Local, we are using ‘SoGoSurvey’ to collect data on the interest in developing a local food network in the Shropshire Hills that is similar to Tamar Grow Local in Devon. The survey was sent out in June 2020 and will close at the end of July 2020. More information on Marches Grow Local can be found here.
We will only contact you about the survey if you opted- in to hearing from us when you submitted your response.
Our website uses Google Analytics, a web analysis service of Google, Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, www.google.com (“Google Analytics” or “Google”). Google Analytics employs cookies that are stored to your computer in order to facilitate an analysis of your use of the site. The information generated by these cookies, such as time, place and frequency of your visits to our site, including your IP address, is transmitted to Google’s location in the US and stored there.
Google Analytics is connected to our website using the plugin Monster Insights. Within this plugin, we have enabled the option to anonymise IP addresses. Your IP address is therefore anonymised before it is transferred from EU/EEA member states. Google uses this information to analyze your use of our site, to compile reports for us on internet activity and to provide other services relating to our website.
Google may also transfer this information to third parties where required to do so by law or where such third parties process this data on Google’s behalf. Google states that it will never associate your IP address with other data held by Google. You can prevent cookies from being installed by adjusting the settings on your browser software accordingly. You should be aware, however, that by doing so you may not be able to make full use of all the functions of our website. Please see the section on ‘Cookies & Embedded Content’ for more information on this.
Google Analytics also uses electronic images known as web beacons (sometimes called single pixel gifs) and are used along with cookies to compile aggregated statistics to analyze how our site is used.
You can find additional information on how to install the browser add-on referenced above at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
For the cases in which personal data is transferred to the US, Google has self-certified pursuant to the EU-US Privacy Shield (https://www.privacyshield.gov/EU-US-Framework).
The third party service providers Middle Marches CLT uses may be updated from time to time as our business needs and legal requirements change.
Visitor comments may be checked through an automated spam detection service.
Keeping Your Personal Information Secure
We have appropriate security measures in place to prevent personal information from being accidentally lost, or used or accessed in an unauthorised way. We limit access to your personal information to those who have a genuine business need to know it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.
If there is a need to dispose of your information, hard copies are shredded and soft copies are permanently deleted.
Cookies & Embedded Content
When you visit our website, the following categories of cookies will be set in your browser:
Strictly necessary cookies
These cookies are essential in order to enable you to move around a site and use its features. Without these cookies, services you have asked for cannot be provided.
Registered Visitor Cookie – A unique identifier given to each registered user, used to recognize you anonymously through your visit and when you return to the site.
These cookies collect information so that we can analyse how our visitors use our site. These cookies do not collect information that identifies you. All information these cookies collect is anonymous and is only used to improve how our site works.
These cookies allow websites and applications to remember choices you make (e.g., such as your name if you leave a comment on the website) and provide enhanced, more personal features.
These cookies cannot track your browsing activity on other websites. They do not gather any information about you that could be used for advertising or to record where you’ve been on the Internet outside of our site.
In order to keep our website services relevant, easy to use and up-to-date, we use web analytics services to help us understand how people use the site.
Cookies allow web analytics services to recognise your browser or device and, for example, identify whether you have visited our website before, what you have previously viewed or clicked on, and how you found us. The information is anonymous and only used for statistical purposes, and it helps us to analyse patterns of user activity and to develop a better user experience.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
How Long We Keep Your Data
We retain your information in line with our Data Retention Policy. For more information, please get in touch at firstname.lastname@example.org.
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.
Lodging A Complaint
Information Commissioner’s Office (ICO)
For more information on lodging a complaint with the ICO, please visit https://ico.org.uk/make-a-complaint/.