Kingston Beats C.I.C.'s privacy statement
Kingston Beats Community Interest Company (“KBCIC”) needs to keep certain information about you to carry out its day-to-day operations, meet its objectives and comply with legal obligations. This privacy statement describes why and how we collect and use personal data and provides information about individuals’ rights.
We may use the personal data provided for the purposes described in this privacy statement or as otherwise stated during collection.
How we get the personal data & why we have it
Most of the personal data we process is provided directly by you for event registration. Additionally, we may also receive personal data in the following circumstances:
Specific requests for information concerning specific events
For volunteers and managing committee members, when we run certain background checks
We ensure that the personal data we collect is adequate, relevant, and limited to what is necessary and fit for purpose.
We use the information that you have given us to:
Plan and organise specific events
Contact you about the events
Understand the profile of event participants
Keep our volunteer records up to date
The lawful basis under the UK GDPR that we rely on for processing your information are:
Your consent, which you can revoke at any time
Our compliant with legal obligations
Our legitimate interest
We aim to ensure that all information we hold about you is accurate and, where necessary, kept up-to-date. We will update the inaccurate information promptly either by your advice or until we realise it.
If you wish to advise us of a change or revoke your consent, you can request us by email at firstname.lastname@example.org.
How we store your data
We store your data securely in a protected Google form and a protected Microsoft Excel spreadsheet. We keep your data for the duration of your enrolment in a specific event or activity organised by KBCIC. We will also keep your data for legal obligations and event administration.
We will securely dispose of your data when we no longer need them.
We will not use your data for marketing if you have asked us not to, and where permitted by law, to delete any data about you upon request.
Your rights as the data subject
Under the UK GDPR, you have the right to know what data we store about you. These include the right to:
know how we use your data
access your data
have incorrect data updated
have data erased
stop or restrict the processing of your data
data portability (allowing you to get and reuse your data for different services)
object to how we process your data in certain circumstances
Any individual wishing to exercise these rights can request us by email at email@example.com. We will respond to you within one month.
Data sharing & disclosure
We will not share your data with any third party without your consent except for the reasons expanded on below:
We are required to do so by law enforcement or regulatory bodies where this is required or allowed under the relevant legislation
We may use a third-party company from time to time to carry out data processing operations on our behalf
We may disclose your data to third parties if required by law; to enable us to enforce or apply our terms and conditions or the rights under an agreement; or to protect us from suspected fraud or defamation.
Use of third parties
We will use third-party companies as trusted partner organisations that work with us in connection with our purposes as a Community Interest Company. We will work with organisations that support our campaigns, conduct research surveys or store your data on our behalf. We also use third-party companies to manage events you have registered and, for this purpose, to share your data with them.
We will ensure appropriate contracts and controls are in place and regularly monitor all our partners to ensure their compliance. We actively screen these companies to maximise the protection of your privacy and security. They are only permitted to use the data by the UK GDPR.
How to complain
If you have any concerns about our use of your data, you can make a complaint to us by email at firstname.lastname@example.org.
You can also complain to the Information Commissioner’s Office (“ICO”) if you are unhappy with how we have used your data. Please visit the ICO website for further information.