YOUR PERSONAL DATA
Your data is your data. The Shark Trust is committed to keeping your data secure and being transparent about how we use it.
If you have any concerns about your data, you can contact us at any time at email@example.com
UPDATES AND CHANGES TO THIS POLICY
WHAT WE NEED
The Shark Trust acts as the ‘Controller’ of the personal data you provide to us – that means we decide how and why it’s used. We only collect the basic personal data that we need to fulfil your needs – no more than is necessary.
In some cases we’ll use a ‘Processor’ to help us collect your data and process your request. We work closely with trusted processors to ensure they share our commitment to your security.
If you’ve paid us for something, the data we hold is restricted to contact details (name, address, phone and email) along with details of your donation/purchase/subscription. Where there’s a financial transaction, we’re obliged to hold your information on record for 6 years.
If you’ve only consented to join our mailing list we’ll hold your name and email only. You can unsubscribe from the list at any time by clicking on the link at the bottom of any email that we send. Alternatively, you can ask us to remove your details.
WHY, WHO AND HOW LONG?
It depends on what you’ve asked us to do:
|If you’ve…||We need your data to…||Your data is processed by…||And shared with…||We’ll keep it until…|
|Pledged your support to the Big Shark Pledge||Email you with campaign notifications||Shark Trust||Amazon Web Services
|Indefinitely until you withdraw consent (unsubscribe)|
Your data may also be available to our website provider to enable us and them to deliver their service to us, carry out analysis and research on demographics, interests, wealth screening and behaviour of our users and supporters to help us gain a better understanding of them to enable us to improve our services. This may include connecting data we receive from you on the website to data available from other sources in the public domain, such as Companies House, Press Articles and Linkdin.
Your personally identifiable data will only be used where it’s necessary for the analysis required, and where your interests for privacy are not deemed to outweigh their legitimate interests in developing new services for us. In the case of this activity the following will apply:
- Your data will be made available to our website provider (WP Engine)
- Our website provider will not transfer your data to any other third party, or transfer your data outside of the EEA.
- They will store your data for a maximum of 7 years.
WHERE WE KEEP YOUR DATA
We keep a copy of your personal data on secure software managed from our office in the UK. The system is held on a server in the UK. We have a Data Protection policy in place to oversee the effective and secure processing of your personal data. Any third party that has access to your data has a processing contract with us which binds them to manage your data securely and only under our instruction. Where these third-parties are outside the EU, we take steps to ensure they meet the standards of the GDPR (The EU’s General Data Protection Regulation).
WHAT ARE YOUR RIGHTS?
If at any point you believe the information we process is incorrect you may request to see this and have it corrected or deleted – please send an email with the heading “Subject Access Request” to firstname.lastname@example.org
If you wish to raise a complaint on how we’ve handled your personal data, you can contact us and we’ll investigate the matter.
If you’re not satisfied with our response or believe we’re processing your personal data not in accordance with the law you can complain to the Information Commissioner’s Office (ICO).
Because of our size and the nature of the data held, we haven’t appointed a Data Protection Officer. The person responsible for Data Protection is Glenys Heafield who can be contacted at email@example.com or 01752 672020.
The Shark Trust
4 Creykes Court
PL1 3JB, UK
4 Creykes Court