PRIVACY STATEMEMT
Feltham Arts website is owned and operated by Feltham Arts Association Ltd.
We are committed to safeguarding your privacy online. We’ve written this Privacy Policy to explain what data we collect, why we collect it, and what we do with it. Personal data is very important, and we hope you can take the time to read the Policy carefully.
This may change from time to time so please do check it periodically.
Personal data
Personal data is information about you: for example, your name, address, date of birth, email, medical information and so on. It’s information that can be used to identify you.
Feltham Arts collects personal data for various reasons which we explain here. Feltham Arts is the Data Controller. Sometimes we will process your data ourselves, sometimes (for example, when requesting feedback), a third-party company will do the processing. This is called data processing. We’ll explain this too.
The person in charge of Data Processing for Feltham Arts is the Data Protection Officer. You can contact them by email on office@felthamarts.org
We only process your data if there is a legal basis to do so. We’ll explain this as we go along.
There are several ways in which we might collect and process your personal data:
1 Member Data
When you become a member to join a class or workshop at Feltham Arts, your name, e-mail, phone number, address and any medical information you share will be stored by Feltham Arts.
2 Online Data
When you book tickets online, your data is shared between Feltham Arts and Eventbrite the booking website, in order to process the transaction.
The legal basis for these first two categories of processing, is that we’d need to process your personal information in order to fulfil the contract between us. We’d retain your data appropriately.
3 Mailing List
We like to let you know what we’re doing and what’s coming up. We do this through our mailing list, and only with your consent. Your consent would provide the legal basis for us to do this.
You can choose to join our mailing list via the email sign up form on our website. You can opt in to receive emails from Feltham Arts. You can choose what you would like us to tell you about by ticking the relevant boxes. You can update your preferences at any time and as often as you like, by updating your preferences in any email we send, or by contacting the data protection officer as described. This data is used to send marketing updates and/or information on how you can support Feltham Arts. The data processors are Mailchimp and Eventbrite, as above.
We gather statistics about email opening and clicks, using industry standard technologies to help us monitor and improve our marketing.
The legal basis for this processing would be your consent. No consent: no processing.
4 Feedback
We will contact you from time to time with a survey about your general experience of any work we have partnered on in the past year. Occasionally, we may send you a feedback form about an event you attended. Our legal basis for this communication is Legitimate Interest: we rely on your thoughts and feelings to inform where we take the programme and service. Your responses to these surveys are processed through Survey Monkey (see section 7) and responses given are anonymised and hard copy feedback forms which are anonymised and stored in the Feltham Arts office.
Whenever you get in touch with us to give direct feedback (by email, in-person or over the phone) about your experiences of our service, we store and process the personal data you give, in order to assure that every piece of feedback is given an appropriate and timely response. This processing is done on site by our team. Our legal basis for this processing is in the legitimate interest of improving our service based on your feedback. Your data is retained in line with our retention statement (see the next section).
5 Consent Data
For certain events we might ask you to give additional information about a young person or vulnerable adult when you give consent for them to take part in an activity. This data is held alongside your normal membership data within Eventbrite or hard copy forms and then processed locally so that workshop leaders have it at their fingertips in case of an emergency. Our legal basis for this processing is so that we can fulfil our contract to safely support your young person or vulnerable adult throughout their visit.
Paper copies of this data are made and then destroyed at the end of a project, and digital data is retained in line with our retention statement (see the section later on).
6 Our Data Processing partners
Eventbrite, Mailchimp and Survey Monkey have implemented appropriate technological measures to protect against accidental loss, destruction, damage, alteration and disclosure. If you’d like to know more about these organisations, here are links to their Privacy Policies.
Eventbrite Privacy Policy | Eventbrite Help Centre
https://mailchimp.com/legal/privacy/
https://www.surveymonkey.co.uk/mp/legal/privacy-policy/
7 Retention
We keep your data only as long as we need to, or the law tells us to, or you want us to.
For membership and mailing lists, we will retain your data until you tell us not to, or until five years have passed with no activity on your account. (We’ll check our records every year.)
For customer feedback, we retain your data until the feedback has been actioned.
8 Examination, Correction and Deletion
At all times you have the right to view your personal data that we hold. This is called a Subject Access Request. Contact office@felthamarts.org or call us on 0208 844 1802 and we’ll get onto it.
You will be asked to verify your identity before we release any information to you, and we will endeavour to provide a full report within 30 days of verification.
If you would like to revise the information provided to us at any time, or feel what we currently have on record is incorrect, you can update the information by e-mailing office@felthamarts.org
We may from time to time ask you for further information in order to update our records or for particular purposes.
We will always tell you how we will use any further personal information received from you.
9 Use and Disclosure of Personal Data
If we are requested by the police, or a regulatory or government authority investigating illegal activities to provide information concerning your activities whilst using the network, we must do so.
10 Protecting Your Personal Data
We take every precaution to protect your information.
To this end all Personal Data is kept digitally and/or hard copy in a secure environment. Only employees and approved contractors/developers we may appoint from time to time and who need the information to perform a specific job are granted access to Personal Data.
Please note that our processors Mailchimp and Survey Monkey are based outside of the EEA and use servers located in the United States. These processors have proven to us that they robustly protect your data by carrying the EU-US Data Shield accreditation that is recognised by our own Information Commissioner’s Office as a standard of excellence.
11 Users Under 18
If you are under 18, please ensure that you obtain your parent/guardian’s consent beforehand whenever you provide Personal Information to the website. Users without such consent are not allowed to provide us with Personal Information.
12 Your Right to Query or Complaint
If you have any queries or concerns regarding your personal Information please contact Feltham Arts Data Controller 0208 844 1802 or email office@felthamarts.org
Should you feel that Feltham Arts have in any way mishandled your personal information or are operating illegally you can contact the Information Commissioner’s Office on 0303 123 1113 or navigate to https://ico.org.uk/concerns/ in your web browser.