The Cheltenham Trust – Privacy Policy – July 2o24
The Cheltenham Trust – Privacy Policy
The Cheltenham Trust is a registered charity focused on developing Cheltenham’s culture and sports, which are offered through community engagement, sustainable investment, and social enterprise. The Trust engages audiences through the arts, heritage, performance, tourism, sport, play and wellbeing opportunities.
The Cheltenham Trust is registered with the Charity Commission (number 1158606) and with the Information Commissioner’s Office as a data controller. Our Data Protection Officer can be contacted via email at [email protected].
This Privacy Policy sets out the basis for processing any personal data we collect from you or that you provide. Please read this Privacy Policy carefully to understand our views and practices regarding your data and how we will treat it.
The privacy policy covers The Cheltenham Trust, Cheltenham Town Hall, Leisure at Cheltenham, Pittville Pump Room and The Wilson.
Why do we need your information, and how do we use it?
Most of the personal data we process is provided directly by you. Under the UK General Data Protection Regulation (UK GDPR), we must have a lawful basis for processing this information. We process your data for the following purposes:
- To send you newsletters to which you have subscribed.
- To send you a survey seeking your feedback on our services or events.
- To process your membership/account and create or terminate your account.
- To process your booking for a show and issue you with the tickets.
- To process your booking(s) for leisure classes/activities.
- To process your venue booking request and support you with managing the event.
- To process your donation or sponsorship and any associated gift aid.
- To send you an invoice and to chase any outstanding debt.
- To process your continuous membership fee.
- To process your refund request.
- To process your booking request for a market stall at one of our artisans or festival markets.
- To process your application to become a volunteer.
- To respond to your enquiries.
- To respond and investigate any complaints made.
- To analyse your interactions with our website(s).
- To manage our relationship with you.
- To comply with legal and regulatory requirements.
We will use your personal data in the following circumstances:
- When we need to perform the contract we are about to enter into or have entered into with you, e.g., when you hire our venue for your wedding.
- Where we need to comply with a legal obligation.
- Where you have provided your consent, e.g., to send you an email newsletter.
- Where it is in our legitimate interests as a charity, e.g., to seek your feedback on an event or show to improve it.
What Type of Information is collected from you?
Depending on how you use our services or interact with our websites, we collect, store, and transfer some or all the following data:
- Identity data: name, title, birthday (for membership)
- Contact data: address, email address(es), telephone number, mobile phone number.
- Financial data: payment or credit card details, bank account (for direct debits) information.
- Transaction data: purchase history and your payments (including donations).
- Business data: business name, job title, profession
- Profile data: preferences and interests, user and account information, passwords, login history, and photo(s).
- Technical data: (read our Cookie Policy) IP address, browser type and version, operating system.
Who do we share your data with?
We work with service providers to improve your experience. They help with website hosting, ticket booking, leisure bookings, event hire, accounting software, and web analytics.
We make sure that all parties respect the security of your data and handle it responsibly. Our service providers are only permitted to use your data for the specific purposes outlined in our agreement with them.
Do we transfer your personal data outside the UK?
No, we will only store your personal data on systems located in the UK.
How long will we retain your data?
We will only hold onto your personal data for as long as we really need it to serve the purposes for which we collected it. This may include meeting legal, regulatory, tax, accounting, or reporting requirements. In case of a complaint or potential legal dispute with you, we may have to keep your personal data for a bit longer.
When your data is no longer required, we will delete it according to our retention and disposal policies.
How do we protect your information?
We’ve taken steps to make sure your personal data is always safe and secure. We limit access to your information to only those who really need it, like our employees and trusted partners. They will only use your data as instructed and are obligated to keep it confidential.
If your data is ever at risk, we have procedures in place to address it, and we’ll let you know and inform the appropriate authorities if necessary.
Your Rights
Under data protection law, you have rights, including:
- The Right of Access. You have the right to ask us for copies of your personal information.
- The Right to Rectification. You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
- The Right to be Forgotten. You can ask us to erase your personal information in certain circumstances.
- The Right to Restrict of Processing. You have the right to ask us to restrict the processing of your personal data in certain circumstances.
- The Right to Object. In certain circumstances, you have the right to object to the processing of your personal data.
- The Right to Withdraw Consent. If we rely on consent to process your personal data, you can withdraw that consent at any time.
- The Right to Portability. You have the right to ask that we transfer the personal data you gave us to another organisation or you in certain circumstances.
If you make a request, we have one month to respond. If you have any questions, please contact us at [email protected]. Please note that not all the above rights are absolute, and requests may be refused where exceptions apply.
How to Complain
If you have any concerns about our use of your personal information, you can complain to us at [email protected]. If you are unhappy with how we have used your data, you can also complain to the Information Commissioner’s Office (ICO). The ICO’s address is the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Alternatively, you can phone their helpline at 0303 123 1113 or complete an online form via the ICO website (https://www.ico.org.uk).