Privacy Policy

The privacy and security of your personal information is extremely important to us. This privacy policy explains how and why we use your personal data, to make sure you stay informed and can be confident about giving us your information.

Who are ‘we’?

‘We’ refers to the charitable organisation Chailey Heritage Foundation (CHF). For the purposes of the General Data Protection Regulation (GDPR) CHF is the data controller.

The Data Protection Officer can be contacted via email on dpo@chf.org.uk

We are grateful for your support and interest in our charity. We promise to always endeavour to store your personal data securely. We will use it to provide the information you have requested and communicate with you in the way(s) that you have agreed to and only for that specific purpose.

You can always change your mind at any time by contacting us through the contact form on our website at www.chf.org.uk/contact-us or telephone us on 01825 724444.

What personal data do we collect?

Your personal data is any information which identifies you, or which can be identified as relating to you personally - for example your name, address, phone number, email address.

We will only collect the personal data from contact forms that we need to fulfil your request. You will not be contacted for marketing purposes unless you specifically opted into this. This data is stored in a secure area on our website for a maximum of 60 days. After 60 days this data is then automatically deleted.

To enable you to use the functionality of this site, user accounts are retained for a period of two years after the last interaction of the site. Your details will be kept indefinitely if you continue to login. You can request for the account to be removed at any time by contacting us here. You will not be contacted for marketing purposes unless you specifically opted into this. Your data is never resold or passed to any third parties.

How we use your personal data

We will only use your personal data on relevant lawful grounds as permitted by the EU General Data Protection Regulation (from 25 May 2018)/UK Data Protection Act 1998 and Privacy of Electronic Communication Regulation.

The lawful basis for processing your personal data can be contractual, legal obligation, vital interest or legitimate interest.

The period for which the data is stored is determined by the nature of the data and any legal or regulatory responsibilities associated with the length of time we are required to hold it. For further detail please refer to our Retention Policy. If the provision of personal data is on a legal or contractual basis then you are obliged to provide the personal data.

Cookie usage information

What is a cookie?

Cookies are small text files that are placed on your computer by websites that you visit. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site.

How we use cookies

We do not use any cookies that would be deemed as being in breach of any regulations.

We use an essential cookie called an ‘alert cookie’ on the site for a normal user.

We use analytical cookies to help us see which content is popular and how our site is being used.

Where Facebook Messenger is used, their cookies will apply, details of which can be found on the Facebook Privacy Policy.

Where CAF Donate is used, their cookies will apply, details of which can be found on the CAF Privacy Policy.

Where YouTube content is used, their cookies will apply, details of which can be found on the YouTube Privacy Policy.

Where Vimeo content is used, their cookies will apply, details of which can be found on the Vimeo Privacy Policy.

Security of information

Chailey Heritage Foundation is committed to ensuring the security of your personal data. We have put in place appropriate physical and electronic, controls and procedures to ensure the security of the personal data we collect.

Consent

We want you to remain in control of your personal data. If, at any time, you want to update or amend your personal data or marketing preferences please contact us. You also have the right to erasure (remove any data we hold), to rectification (correct any inaccuracies in the data we hold) ,to restriction (of any data we hold) and the right to object (to us holding any data) .

You also have the right to lodge a complaint with the supervisory authority – the Information Commissions Office (ICO) in the UK at www.ico.org.uk

Contact Us

You can contact us in one of the following ways:

Call us: 01825 724444 Open 8:30am - 4:30pm weekdays

Write to us:

Chailey Heritage Foundation
Haywards Heath Road
North Chailey
East Sussex
BN8 4EF

Email us : Data Protection Officer on dpo@chf.org.uk

Subject access rights

If you would like to request a ‘subject access request’ (SAR) please write to the Data Protection Officer at the address above or email on dpo@chf.org.uk. You will be asked to provide the following details:

• The personal information you want to access;
• Where it is likely to be held;
• The date range of the information you wish to access

We will also need you to provide information that will help us confirm your identity. If we hold personal information about you, we will give you a copy of the information in an understandable format together with an explanation of why we hold and use it. Once we have all the information necessary to respond to your request we’ll provide your information to you within one month. This timeframe may be extended by up to two months if your request is particularly complex.

Payment card Security

CHF is PCI-DSS compliant.This is the international standard for safe card payment processes. As part of our compliance to this very stringent standard, we ensure that our IT systems do not directly collect or store payment card information.

Links to Other Sites

Chailey Heritage Foundation website (www.chf.org.uk) contains links to other sites. Chailey Heritage Foundation is not responsible for the privacy practices or the content of linked web sites.

Changes to this privacy policy

We will amend this privacy policy from time to time to ensure it remains up to date and reflects how and why we use your personal data and new legal requirements. Please visit our website to keep up to date with any changes. The current version will always be posted on our website.

Last updated: 25/05/2018