Data Protection You Understand:
Straightforward and Secure

1. Introduction
Wall Heath Community Centre (“the Centre”) is committed to protecting the privacy and security of your personal data. This policy outlines how we collect, use, store, and disclose your information in accordance with the UK General Data Protection Regulation (GDPR) and the Data Protection Act 2018.

2. Data Controller
Wall Heath Community Centre, Enville Road, Wall Heath, Kingswinford, West Midlands, DY6 0JT is the data controller responsible for your personal data.

3. Principles of Data Protection – We adhere to the following data protection principles:

• Lawfulness, fairness, and transparency: We process data lawfully, fairly, and transparently.
• Purpose limitation: We collect data for specified, explicit, and legitimate purposes.
• Data minimisation: We collect only the data necessary for our purposes.
• Accuracy: We keep data accurate and up to date.
• Storage limitation: We retain data only for as long as necessary.
• Integrity and confidentiality: We protect data from unauthorised access, loss, or damage.

4. Types of Data We Collect – We may collect the following types of personal data:

• Contact information: Name, address, phone number, email address.
• Membership details: Membership status, payment information.
• Booking information: Details of room bookings, event attendance.
• Volunteer information: Contact details, skills, availability.
• Participant information: Details of participation in activities and events.
• CCTV footage: Images captured by our CCTV system for security purposes.
• Website data: IP addresses, browsing activity (collected via cookies, if applicable).
• Donation information: name, address, payment information.
• Health Information: in certain circumstances, such as for specific activities, we may collect health related information, but only with explicit consent.

5. How We Use Your Data – We use your data for the following purposes:

• To manage memberships and bookings.
• To communicate with you about events and activities.
• To process payments and donations.
• To manage volunteers.
• To ensure the safety and security of the Centre.
• To comply with legal obligations.
• To improve our services.
• To send newsletters and promotional material (only with consent).

6. Legal Basis for Processing – We process your data on the following legal bases:

• Contractual necessity: To fulfil our obligations under a contract (e.g., membership agreement).
• Legal obligation: To comply with legal requirements.
• Legitimate interests: For our legitimate interests (e.g., security, administration).
• Consent: When you have given us your explicit consent.

7. Data Sharing and Disclosure – We may share your data with:

• Third-party service providers (e.g., payment processors, IT support).
• Law enforcement agencies (when required by law).
• Our insurers.
• Relevant governing bodies.
• We will not sell or rent your personal data to third parties.

8. Data Security – We implement appropriate technical and organisational measures to protect your data from unauthorised access, loss, or damage. These measures include:

• Secure storage of data.
• Access controls.
• Regular security assessments.
• CCTV systems.
• Staff training.

9. Data Retention – We retain your data only for as long as necessary for the purposes for which it was collected, or as required by law.

• Membership data is kept for the duration of membership and a reasonable period thereafter.
• Booking information is kept for a set period of time after the booking has completed.
• CCTV footage is typically retained for [??????] days.
• Financial records are retained as required by law.

10. Your Rights – You have the following rights regarding your personal data:

• Right to access: You can request a copy of your data.
• Right to rectification: You can request correction of inaccurate data.
• Right to erasure: You can request deletion of your data (in certain circumstances).
• Right to restriction of processing: You can request restriction of processing.
• Right to data portability: You can request transfer of your data to another controller.
• Right to object: You can object to processing of your data.
• Right to withdraw consent: You can withdraw your consent at any time.
• Right to complain: You can complain to the Information Commissioner’s Office (ICO).

11. Cookies (If applicable) – Our website may use cookies to improve your browsing experience. You can manage your cookie preferences through your browser settings.

12. Changes to This Policy – We may update this policy from time to time. We will notify you of any significant changes.

13. Contact Us – If you have any questions or concerns about this policy or our data processing practices, please contact us at:

Wall Heath Community Centre, Enville Road, Wall Heath, Kingswinford, West Midlands, DY6 0JT Phone Number: 01384 273744, Email: info@wallheathcommunitycentre.co.uk

14. Information Commissioner’s Office (ICO) – You can find more information about your rights and data protection on the ICO website: www.ico.org.uk

Review Date: [??/??/??] Next Review Date: [??/??/??]