Your privacy is important to us. This Privacy Notice explains how we collect and use your personal information, how you can control the way in which we use that information and what actions you can take if you would like to change the way in which your information is being used. We will only use your information for the purpose for which you provided it or have given us prior consent for.
Who we are
In this policy whenever you see the terms ‘We’, ‘Us’ or ‘Our’ it refers to The William Morris Society.
The William Morris Society is a Charitable Incorporated Organisation, Registered Charity No. 1159382.
Information we collect
We only collect information about you that we need:
- to provide the service you have requested. This may include: membership, event bookings, online purchases, e-newsletter sign-up
- to contact you regarding a service you provide to us eg, event delivery, educational services, technical assistance.
The personal information we collect may include:
- Your name including title
- Age range
- Postal address, email address and phone number
- Gift Aid information
- Employment details
- A record of any correspondence you send us
- Details of any transactions you carry out via our website
- Your contact preferences
- Records of donations
- Records of volunteering
When we ask for your personal information we will explain why we need it and direct you to this policy.
How we use the information we collect
We may use your information for a number of purposes, including:
- To fulfil your membership contract
- To process your booking
- To process your online purchase
- To process your donation
- To send you information about The William Morris Society and its events
- To send you surveys about our performance
- To send you information about our fundraising activities
- To send you other information you may be interested in
- To contact you about employment or volunteering opportunities with us
How we share your information
We do not share your personal information with any third party or external organisations for any purpose other than those detailed below, unless we are legally required to do so. Where we do share information we only share what is absolutely necessary to fulfil that contract.
We work with carefully selected service providers who carry out some functions on our behalf. These service providers will act on our instructions and adhere to the EU GDPR (General Data Protection Regulation). They include:
- We use PayPal for processing donations and purchases made through this website, and a card payment processor, GoCardless, to process online payment of membership subscriptions by direct debit. The information received by us is only that needed to process your order and does not include any personal financial information such as credit card numbers or bank account details. Purchases are processed securely by PayPal or GoCardless and information submitted during checkout conforms to their own Privacy Policies, available to read here:
We ensure that any transfer of data is done securely, in accordance with best practice and in accordance with GDPR (General Data Protection Regulation).
We may occasionally share anonymised data with our partners to fulfil contracts and for benchmarking, eg The Arts Council. If we do share anonymised data it would not be possible to identify any individual person from the data we share.
We will never sell or pass your personal data to a third party for marketing, market research or commercial purposes. We will only use your data ourselves for marketing if you have given us permission.
Although we do not currently do this, we may in future use your data to group together people who have similar interests. For example, we might find that people who had been to certain events were likely to come to similar events. If this was the case then we might “tag” your record to remind us to include you in invitations to similar events or to assess the likelihood that you might come to another type of event. We might carry out similar processes to help us organise our fundraising.
Access to your information and correction
You have a number of rights about the way we process your data. These are as follows:
- Where our use of your data requires consent, you may withdraw this consent at any time.
- Where we rely on our legitimate interest to process data, you may ask us to stop doing so.
- You may request a copy of the data we hold about you.
- If we are carrying out profiling, you may ask us not to do so.
- You may change or stop the way in which we communicate with you or process data about you, and if it is not required for the purpose you provided it, then we will do so. Activities like processing Gift Aid donations, or holding a collection item that you have loaned or given us may mean we cannot entirely stop processing your data, but we will always endeavour to comply with such a request.
- You also have the right to make a complaint direct to the UK’s data protection authority, the Information Commissioner’s Office (ICO). The ICO can be contacted at: https://ico.org.uk/global/contact-us/
If you would like a copy of some or all of your personal information please contact the Society Administrator by emailing firstname.lastname@example.org.
Before we can supply this information you will need to provide adequate proof of your identity. We will endeavour to provide the information to you within 1 month of the request for information.
We try to ensure all information we store is correct. If however you find that we hold incorrect information please let us know and we will correct it.
How we store your data and keep it secure
We take all reasonable steps to ensure your data is kept secure. We hold personal data in electronic and paper form.
We will keep your information only for as long as we need it to provide you with the goods, services or information you have requested, to administer your contract with us, or are required to for legal / financial reasons.
Electronic information is stored on an encrypted server, which is password protected. Emails are run from UK Based data centre, using Microsoft Exchange’s latest Server. These connections are secured using SSL. No third party can access any data on the server or email server without our permission. All areas that contain any data are password protected.
Staff and volunteers are contractually required to keep personal data safe and are given training in Data Protection.
We may gather information about your general internet use by using cookies. Where used, these cookies are downloaded to your computer and stored on the computer’s hard drive. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.
You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.
To learn more about cookies and how to manage them, visit AboutCookies.org.
Changes to our Privacy Notice
We regularly review this Privacy Notice. The latest version will be available on our website www.williammorrissociety.org.uk. This notice was last updated on 17 May 2018.