Website PRIVACY POLICY

Introduction

This website privacy policy describes how Northwick Park Community Garden (NPCG) uses the information you provide when using this website. You may be booking a ticket to one of our events and completing the registration form or registering your interest to get involved in our volunteering opportunities; your personal data will only be used in the ways outlined in this privacy policy.

The NPCG website privacy policy will be reviewed regularly and updated. It was first created on 6th February 2019.

Policy

NPCG collects your personal data to keep you updated on news and events relating to the community garden project. The information is considered confidential and will not be shared with third parties.

NPCG recognises the need to treat your data in an appropriate and lawful manner, in accordance with the General Data Protection Regulation (GDPR) principles which state that personal data must be:

“Processed lawfully, fairly and in a transparent manner in relation to individuals (‘lawfulness, fairness and transparency’);
Collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall not be considered to be incompatible with the initial purposes (‘purpose limitation’);
Adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (‘data minimisation’);
Accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay (‘accuracy’);
Kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes subject to implementation of the appropriate technical and organisational measures required by the GDPR in order to safeguard the rights and freedoms of individuals (‘storage limitation’);
Processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures (‘integrity and confidentiality’).
The controller shall be responsible for, and be able to demonstrate compliance with, paragraph 1 (‘accountability’).”

In other words, personal data refers to any information that NPCG holds about you and from which you can be identified by people. It may include your contact details, personal information such as social media profile names, photographs from NPCG events, and any feedback you provide about the community project.

If you do not wish to be included in photos taken during events, please clearly state this in the form when you register for a particular event. You may also wish to raise this on the day with the Charity’s Trustees (Rishil Parekh, Eleri Kyffin, Jo Harris or Iris Fenn).

NPCG collects website analytics for a better understanding of user patterns and accordingly, tailors the website design with the aim to improve user experience and provide timely, accurate and relevant information.

Your Rights

To ask NPCG to provide a record of the information that is kept on file about you.
To ask NPCG not to use your information for certain purposes.
To ask NPCG to rectify your information if inaccurate.
To ask NPCG to delete your information from the charity’s data records.

It is important that you specify any of the above points in writing for audit purposes. Please contact the NPCG Data Controller [Rishil Parekh] about this and any general queries you may have by writing to northwickcommunitygarden@gmail.com

Reference

For this policy, NPCG sourced the GDPR principles from the website of the Information Commissioner’s Office (ICO) and further guidelines can be found on the ICO website.

Policy v1 approved by the Trustees on 06/02/2019