WDCS Privacy Notice

WEST DOWN COMMUNITY SHOP LIMITED

–ooOoo –

PRIVACY NOTICE

 

Processing of personal data

    1. “Personal data” means data relating to an individual who can be directly or indirectly identified.
    2. The “processing” of personal data includes collecting, storing or using the data.
    3. This policy applies both to automated personal data and to manual filing systems where personal data are accessible according to specific criteria.

Processing of personal data by WDCSL

West Down Community Shop Limited (WDCSL) may store shareholders’ and officers’ personal data on a register of members and officers where the retention of such data in the register is required by law. Contact details of members may be inspected by other members but not details of their shareholdings.

WDCSL may use shareholders’ contact details stored on the register for the purpose of communications relating to their shareholdings where that is necessary to achieve the legitimate interests of WDCSL (eg inviting shareholders to Annual Members Meetings).

WDCSL may store and use personal data relating to volunteers where that is necessary to achieve the legitimate interests of WDCSL.

WDCSL may store and use personal data relating to shop account holders where that is necessary for the performance of the contracts between those persons and WDCSL.

WDCSL may store and use personal data relating to customers’ credit and debit cards where that is necessary for the performance of the contracts between those persons and WDCSL.

Consent

WDCSL is allowed to use personal data of shareholders for the purpose of sending them newsletters and other promotional material only if they have explicitly consented to the data being so used.

Where a shareholder has given consent for this purpose WDCSL will enable the shareholder to withdraw or modify this consent without delay.

Data security

WDCSL will keep personal data stored by it safe and secure.

 

Disclosure of data

WDCSL will not sell any personal data stored by it to anyone or allow third parties to have access to any such data unless they have a legal right to do so or the person to whom the personal data relates (the “data subject”) consents.

Subject access

If the data subject exercises their right to see the personal data, WDCSL will respond to the request with the minimum delay, provided that evidence of identity is provided.

WDCSL may decline to comply with such a request in certain circumstances permitted by law.

Rectification

A data subject may request WDCSL to rectify any inaccurate personal data or to complete any incomplete personal data.

Erasure

A data subject may request WDCSL to erase personal data stored by WDCSL. WDCSL will comply with the request unless there is a lawful ground for retaining it.

 

Adoption and review of this notice

This notice was adopted by WDCSL’s management committee on 9 May 2018.

It will be reviewed by that committee at least once every 12 months.

Date of last review………………………………