Privacy Policy
Introduction
Highfield Park Trust is committed to protecting your personal information and respecting your privacy.
This Privacy Policy explains how we collect, use, store and protect your personal information when you:
- visit our website;
- contact us;
- attend our events;
- volunteer with us;
- work for us or apply for employment;
- become an allotment holder;
- make a donation or purchase goods or services;
- subscribe to our newsletter; or
- otherwise interact with the Trust.
We process personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable data protection legislation.
Who is responsible for your personal information?
Highfield Park Trust is the data controller for the personal information we collect.
Contact details:
Highfield Park Trust
Highfield Park Visitor Centre
Hill End Lane
St Albans
Hertfordshire
AL4 0RA
Email: admin@highfieldparktrust.co.uk
Telephone: 01727 847242
Website: www.highfieldparktrust.co.uk
The Trust’s Data Protection Lead is the Chief Executive Officer
What information do we collect?
The information we collect depends upon your relationship with the Trust.
This may include:
- name;
- postal address;
- email address;
- telephone number;
- emergency contact details where appropriate;
- employment information where you apply for a job or work for the Trust;
- volunteer information;
- allotment tenancy information;
- records of correspondence with us;
- event booking information;
- donation or purchase information;
- photographs where appropriate and with permission where required;
- website usage information collected through cookies.
We only collect personal information that is necessary for the purposes described in this policy.
How do we collect your information?
We collect information:
- directly from you;
- when you complete forms;
- when you contact us by email, telephone or post;
- when you register for events;
- when you subscribe to our newsletter;
- when you apply for employment or volunteer opportunities;
- through our website and cookies.
How do we use your information?
We use your personal information to:
- administer the Trust and its activities;
- communicate with you;
- manage volunteers, staff and trustees;
- administer allotments;
- organise events;
- process donations or purchases;
- respond to enquiries;
- comply with legal obligations;
- maintain health and safety records where necessary;
- improve our services and website;
- send newsletters or information about park activities where you have requested or consented to receive them.
Our lawful basis for processing
Under UK GDPR we process personal information using one or more of the following lawful bases:
- your consent;
- performance of a contract with you;
- compliance with a legal obligation;
- our legitimate interests in managing and promoting the Trust and its activities, provided these interests do not override your rights and freedoms.
Where we rely on your consent, you may withdraw it at any time.
Marketing
If you have asked to receive our newsletter or other updates, we may send you information about activities, events and other matters relating to Highfield Park.
You can unsubscribe or withdraw your consent at any time by:
- clicking the unsubscribe link in our emails; or
- contacting us using the details above.
We do not sell your personal information.
Sharing your information
We only share personal information where necessary.
This may include:
- organisations providing services to the Trust, such as IT providers, website hosts or email service providers;
- professional advisers including accountants, auditors, insurers and legal advisers;
- regulatory bodies or public authorities where required by law;
- emergency services where necessary for health and safety reasons.
We require organisations processing information on our behalf to keep it secure and only use it for authorised purposes.
International transfers
We aim to keep personal information within the UK wherever possible.
If information is transferred outside the UK, we will ensure appropriate safeguards are in place as required by data protection law.
How long do we keep your information?
We only keep personal information for as long as necessary.
Retention periods depend upon the type of information and the purpose for which it was collected.
We securely delete or anonymise personal information when it is no longer required, unless we are legally required to retain it for longer.
Your rights
Under UK GDPR you have the right to:
- be informed about how your information is used;
- request access to your personal information;
- request correction of inaccurate information;
- request erasure in certain circumstances;
- request restriction of processing;
- object to certain processing;
- request transfer of your information where applicable;
- withdraw consent where processing is based on consent.
Requests are normally free of charge. However, we may charge a reasonable administrative fee where a request is manifestly unfounded or excessive or where additional copies are requested.
To exercise any of these rights, please contact us using the details above.
Website and cookies
Our website uses cookies and similar technologies to improve your browsing experience and understand how visitors use our website.
Cookies may collect information about your device or browsing activity.
We use analytical cookies to help us understand how visitors use our website so that we can improve it.
Some third-party services, such as social media platforms or embedded content, may place their own cookies. These are governed by the privacy policies of those providers.
Most web browsers allow you to control or disable cookies through your browser settings, although doing so may affect the functionality of parts of the website.
For more information about cookies, visit:
Security
We take appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse or disclosure.
Links to other websites
Our website may contain links to other websites.
This Privacy Policy applies only to Highfield Park Trust’s website. We encourage you to read the privacy policies of any other websites you visit.
Changes to this Privacy Policy
We review this Privacy Policy regularly and will publish any updates on this page.
How to complain
If you have any concerns about how we use your personal information, please contact us in the first instance.
If you remain dissatisfied, you have the right to complain to the Information Commissioner’s Office (ICO).
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Website: www.ico.org.uk
Telephone: 0303 123 1113