WBCT Privacy Statement
The privacy and security of your information is very important to us. We want you to trust that the information that you have provided to us is being properly managed and protected. We have prepared this Privacy Statement to explain more about how we collect and manage your information.
We are committed to collecting and using your information in accordance with applicable data protection laws. We will only collect, use and share your information where we are satisfied that we have an appropriate legal basis to do this. This may be because:
- you have provided your consent to us using the personal information;
- our use of your information is necessary to perform our contract with you, for example, taking out or renewing membership or making a purchase online;
- our use of your information is necessary to meet responsibilities we have to our regulators, tax officials, law enforcement, or otherwise meet our legal responsibilities;
- our use of your information is in our legitimate interest as a commercial organisation, for example, to operate and improve our services and to keep people informed about Trust activities and news. In these cases we will look after your information at all times in a way that is proportionate and respects your privacy rights.
SECTION 1 - WHAT WE DO WITH YOUR INFORMATION
When you take out membership or purchase something from our store, as part of the process, we collect the personal information you give us such as your name, address and email address. When you browse our store, we also automatically receive your computer’s internet protocol (IP) address together with information that helps us learn about your browser and operating system. With your permission, we may send you emails about our news, our store, new products and other updates.
SECTION 2 - CONSENT
When you provide us with personal information to take out membership, complete a transaction, place an order, arrange for a delivery or return a purchase, we imply that you consent to our collecting it and using it for that specific reason only.
If we ask for your personal information for a secondary reason, like marketing, we will ask you directly for your expressed consent.
If after you opt-in, you change your mind, you may withdraw your consent for us to contact you, for the continued collection, use or disclosure of your information, at any time, on the website at https://www.wbct.org.uk/gdpr or by emailing us at info@wbct.org.uk or writing to us at the Wilts & Berks Canal Trust Dauntsey Lock Canal Centre, Dauntsey Lock, Chippenham SN15 4HD
SECTION 3 - DISCLOSURE
We may disclose your personal information only if we are required by law to do so or if you violate our Terms & Conditions.
SECTION 4 - PAYMENTS
The Wilts & Berks Canal Trust does not keep records of your credit or debit card information. We use online payment companies to process your payments on our behalf using a 'payment gateway' which is a direct connection to a payment service provided by one of these payment companies. This means that when you provide details of your credit or debit card, or give your bank account details, you are communicating directly with the company concerned, which then passes your payment to us. This means that your card information and bank account details are handled by the company concerned and not processed or held by us.
Currently the Wilts & Berks Canal Trust uses these companies for processing payments:
- GoCardless Ltd. 338-346 Goswell Road, London, EC1V 7LQ for processing Direct Debits online
- PayPal and Braintree (a Division of PayPal) for processing credit and debit card payments linked to PayPal accounts
We only store bank details for paper direct debits, for people who claim expenses and for any other person or organisation where we pay a bill through BACS.
SECTION 5 - THIRD-PARTY SERVICES
In general, the third-party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us.
However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions. For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers.
In particular, remember that certain providers may be located in or have facilities that are located in a different jurisdiction than either you or us. So if you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located. As an example, if you are located in Canada and your transaction is processed by a payment gateway located in the United States, then your personal information used in completing that transaction may be subject to disclosure under United States legislation, including the Patriot Act.
Once you leave our site or are redirected to a third-party site or application, you are no longer governed by this Privacy policy nor our Terms & Conditions.
When you click on links on our store, they may direct you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.
SECTION 6 - SECURITY
We are committed to protecting the confidentiality and security of the information that you provide to us. To do this, technical, physical and organisational security measures are put in place to protect against any unauthorised access, disclosure, damage or loss of your information. The collection, transmission and storage of information can never be guaranteed to be completely secure, however, we take steps to ensure that appropriate security safeguards are in place to protect your information.
Cookies
A cookie is a simple text file that is stored on your computer or mobile device by the Wilts & Berks Canal Trust’s server. Each cookie is unique to your web browser. It will contain some anonymous information such as a unique identifier and the site name and some digits and numbers. It allows the Trust’s site to remember things like who you are, your preferences or what’s in your shopping basket.
All major browsers allow you to change your cookie settings. You can delete cookies that are already on your device and prevent them from being placed. If you do this, however, you may have to adjust some preferences manually every time you visit the Trust’s site, and some services and functionalities may not work.
To learn more about cookies and how they are used, please visit: http://www.allaboutcookies.org/.
SECTION 7 – DATA RETENTION
We generally only keep your information for as long as is reasonably required for the reasons explained in this privacy statement. In some cases we keep transactional records (which may include your information) for longer periods if necessary to meet legal, regulatory, tax or accounting needs. We will also retain information if we reasonably believe there is a prospect of litigation.
We maintain a data retention policy which we apply to the records we hold.
SECTION 8 - AGE OF CONSENT
Our site is not intended for children and we do not intentionally solicit or collect personal information from individuals under the age of 18. If we are notified or otherwise discover that a minor’s personal information has been improperly collected, we will take all reasonable steps to delete that information.
SECTION 9 – SOCIAL MEDIA
We may use various social media features such as the Facebook “Like” button on our site and mobile applications. Certain information may be shared or otherwise provided to us through your use of these features in conjunction with our services. Subject to your account and privacy settings, we may also be able to see information that you post when using these social media platforms whether or not you are using one of our services. In some instances, depending on the circumstances, we may contact you on these social media platforms. The information you post on social media sites as well as the controls surrounding these disclosures are governed by the respective policies of these third parties.
SECTION 10 - CHANGES TO THIS PRIVACY POLICY
We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the site. If we make material changes to this policy, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it.
Questions & Contact Information
If you would like to submit a Subject Access Request (SAR), correct, amend or delete any personal information we have about you, register a complaint, or simply want more information then please contact us at info@wbct.org.ukor by mail at the Wilts & Berks Canal Trust Office, Dauntsey Lock Canal Centre, Dauntsey Lock, Chippenham SN15 4HD.
May 2018