1. Purpose of This Policy
This policy sets out how the Charity collects, uses, stores, and protects personal data in accordance with the UK GDPR and Data Protection Act 2018.
2. Principles
The Charity adheres to the following data protection principles:
• Lawfulness, fairness, transparency
• Purpose limitation
• Data minimisation
• Accuracy
• Storage limitation
• Integrity and confidentiality
• Accountability
3. Personal Data Collected
The Charity may collect:
• Contact details for governance enquiries
• Trustee information required by law
• Records relating to regulatory correspondence
• Information submitted via the website contact form The Charity does not collect unnecessary or excessive personal data.
4. How Data Is Used
Personal data is used only for:
• Governance administration
• Responding to enquiries
• Regulatory compliance
• Trustee management Data is never sold or used for marketing.
5. Data Storage and Security
• Data is stored securely with restricted access
• Electronic records are password protected
• Paper records are kept in secure storage
• CCTV recordings (where applicable) are stored securely and retained only for the minimum period required
6. Sharing of Data
Data may be shared only with:
• The Charity Commission
• Law enforcement where legally required
• Professional advisers (e.g., legal counsel) The Charity does not share data with commercial organisations.
7. Rights of Individuals
Individuals may request:
• Access to their data
• Correction of inaccurate data
• Deletion where appropriate Requests must be made in writing to the trustees.
8. Retention
Data is retained only for as long as necessary for governance, legal, or regulatory purposes.
9. Review
This policy is reviewed annually.
CCTV & SURVEILLANCE POLICY
1. Purpose
This policy explains how the Charity uses CCTV for safety, security, and asset protection.
2. Lawful Basis
CCTV is operated under:
• Legitimate interest (protecting charitable property)
• Compliance with legal obligations
• Safety of trustees, visitors, and contractors
3. Use of CCTV
CCTV may be used to:
• Deter and detect unauthorised access
• Protect charitable assets
• Support investigations into incidents CCTV is not used for monitoring staff, trustees, or visitors for behavioural purposes.
4. Signage and Notification
Clear signage is displayed where CCTV is in operation.
5. Access to Footage
Access is strictly limited to authorised trustees or security personnel. Footage may be shared with law enforcement when required.
6. Retention
Recordings are retained for the minimum period necessary (typically 30 days) unless required for an investigation.
7. Rights of Individuals
Individuals may request access to footage containing their personal data, subject to legal exemptions.
8. Review
This policy is reviewed annually.
HTML Creator