top of page

Privacy Policy

Data Protection Policy

1. About This Policy

Warminster Community Green Association is committed to protecting the privacy and security of the personal information we hold. This policy explains how we collect, store, and use personal data in compliance with the UK GDPR and the Data Protection Act.
 

2. The Data We Collect

We only collect the personal data necessary to carry out our non-profit activities. This may include:

  • Contact details: Names, addresses, email addresses, and phone numbers.

  • Financial details: Bank details (held in our bank and not on site) or payment information processed for donations or membership fees.
     

3. Lawful Basis for Processing

We will only process personal data when the law allows us to. Our lawful bases include:

  • Consent: You have given clear consent for us to process your data for a specific purpose.

  • Contract: The processing is necessary for a contract or agreement you have with us.

  • Legal Obligation: The processing is necessary for us to comply with the law (e.g., maintaining financial records, safeguarding checks).

  • Legitimate Interests: Processing is necessary for our legitimate interests as a non-profit organization, provided your fundamental rights do not override those interests.
     

4. Data Protection Principles

We ensure that all personal data is:

  • Processed lawfully, fairly, and in a transparent manner.

  • Collected only for specified, explicit, and legitimate purposes.

  • Adequate, relevant, and limited to what is strictly necessary (Data Minimization).

  • Accurate and kept up to date.

  • Kept for no longer than is necessary for the purposes it was collected.

  • Kept secure and protected against unauthorized or unlawful processing, loss, or destruction.
     

5. Your Individual Rights

Under the UK GDPR, you have the following rights regarding your personal data:

  • The right to be informed: You have the right to know how we use your data.

  • The right of access: You can request a copy of the information we hold about you.

  • The right to rectification: You can ask us to correct inaccurate or incomplete data.

  • The right to erasure ("right to be forgotten"): You can request that we delete or remove your personal data.

  • The right to restrict processing: You can ask us to limit how we use your data.

  • The right to object: You can object to the processing of your data (e.g., for direct marketing).

​

6. Data Security and Sharing

We do not sell, trade, or rent personal data to third parties. We may share your data with trusted third parties only when it is necessary to fulfil our services (e.g., mailing services, payment processors), or when we are legally required to do so. We employ strict technical and organizational measures to keep your data secure.
 

7. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes for which we collected it, including satisfying any legal, accounting, or reporting requirements.
 

8. Contact Us

If you have any questions about this policy, wish to exercise your rights, or want to make a complaint about how we handle your data, please contact us at:

If you feel your issue is not resolved, you have the right to contact the supervisory authority for data protection in the UK, the Information Commissioner's Office (ICO).

 

 

Extra note: If anyone attending any of our events does not want to be included in a publicity shot which might end up on social media, please inform us on the day.

bottom of page