Sandyholme – Supplementary Privacy Notice

At Sandyholme, part of YMCA Bournemouth, we are committed to protecting and respecting your privacy. Whenever you provide personal information to us, we will treat your information in accordance with this privacy notice and in accordance with the Data Protection Act 2018 (as supplemented by the General Data Protection Regulations). This privacy notice explains how we use any personal information we collect about you.

If you have any questions regarding this process, please contact our Data Protection Officer at jonathan.chadd@ymcabournemouth.org.uk or on 01202 290451.

What information do we collect about you?

We collect information about you including your name, age/gender (where necessary for safeguarding or other legitimate purposes), address, telephone number, email address and debit/credit card or direct debit details (where necessary for transactions). This information is collected when you purchase or use our products or services, donate to us, take part in our projects or sponsored events or request information about our work. Anonymous website usage information is collected using cookies.

How will we use the information about you?

We collect information about you to: process and deliver the products or services requested; adhere to legal, accounting or safeguarding requirements; enable us to coordinate events or projects you have agreed to take part in; process a donation you have made; respond to correspondence you have sent us, and – where we have a lawful basis for doing so – send you further information about our work and how you can help support it. We will not use your information for any other purposes.

Unless required for specific lawful purposes described data will be retained for a maximum of two years unless you indicate otherwise prior to that period ending or where we need to keep a record of you having given consent for a specific use of your data during that period, such as permissions for the use of your name or image in our publicity. Please also note that due to the nature of the internet, the deletion of information you permit us to publish online is limited to that within our own control.

Lawful basis for Processing

YMCA Bournemouth respects your privacy and we are committed to complying with data protection regulations including that we process all personal data lawfully, fairly and in a transparent manner. Part of this transparency requires that we inform you about our lawful basis of processing your data.

There are six available lawful bases for processing: CONSENT, CONTRACTUAL, LEGAL OBLIGATION, VITAL INTERESTS, PUBLIC TASK and LEGITIMATE INTERESTS. For further details of these please visit the Information Commissioner’s Office.

We have reviewed the purposes of our activity and selected the most appropriate basis for each. Where none has been found in the case of existing data, we have deleted – or are in the process of deleting – the data and no further contact will be attempted.

To offer Sandyholme’s services to you we have a CONTRACTUAL requirement to process your data.

Disclosure of personal information
We will keep your personal information confidential and will not disclose it to any third party without your express consent, unless we are obliged to do so by law.

We limit access to your data to a small group of essential data processors and ensure that it remains secure at all times. Digital data is retained on secure, password-protected systems and physical data is stored in locked areas or cabinets when not in use. Audits are undertaken to ensure our data processes are regularly checked and updated.

When destroyed, digital data will be deleted securely and physical data will be cross-shredded and/or removed by licensed data disposal professionals.