Privacy Policy

The Portishead Nautical Trust is a charitable company, limited by guarantee and registered in England (Company Registration No 87906; Registered Charity No 228876) and is a ‘controller’ under the General Data Protection Regulation and the Data Protection Act 2018.

The Portishead Nautical Trust respects all data that we hold about you. Our aim is to be clear about the data we hold, how we use it and to keep it safe. This policy outlines how we collect and use the personal data that you provide to us.

Reasons/purposes for processing information

We process personal information to enable us to relieve and assist disadvantaged young people in a particular geographical area as specified in our constitution and to maintain our own accounts and records.

How do we obtain information about you?

You may give us your information directly over the telephone, by writing to or emailing us, or by completing an application form.

What information will we collect?

We only collect information from you that is relevant. In particular, we may collect the following information from you which is defined as ‘personal data’:

• Personal details (name, address, telephone number, email address, date of birth)
• Family detail
• Lifestyle and social circumstances
• Financial details
• Education and employment details

Special categories

We may also collect information that is referred to as being in a ‘special category’. This could include:

• Physical or mental health details

Who the information is processed about

We process personal information about:

• Applicants
• Sponsors

Basis for processing

The basis on which we process your personal data is one or more of the following:

• It is necessary for the provision of our support to you
• You have given your consent (this can be withdrawn at any time)

How will we use your data?

We may use your information for the following purposes:

• To process and respond to requests for support
• To administer requests for support

Who will we share your information with?

Where necessary or required we will share your data with:

• Trustees
• Suppliers and service providers

How long will we keep your information for?

We will only keep your information for as long as we need to be able to complete our work, taking into consideration our legal obligations, and we will not keep it longer than necessary. When destroying information this is always done securely.

Security arrangements

We are committed to keeping your data safe and secure and shall ensure that all the information that you provide to us is kept secure using appropriate technical and organisational measures.

What rights do you have?

You have the following rights under GDPR:

• Right to be informed
• Right of access
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to data portability
• Right to object

Rights of access

• You have the right to see the information we hold about you
• To access this you need to provide a request in writing, together with proof of identity
• We will usually process your request free of charge and within 30 days
• Full details are available in our data subject access policy which is available on request

Right to erasure

• You have a right to ask us to erase your personal data in certain cases (details may be found in Article 17 of the GDPR)
• We will deal with your request free of charge and within 30 days but reserve the right to refuse to erase information that we are required to retain by law or regulation, or that is required to exercise or defend legal claims
• To exercise your right of erasure, please contact us

Who can you complain to?

• If you are unhappy about how we are using your information or how we have responded to your request, then initially you should contact us
• If your complaint remains unresolved, then you can contact the Information Commissioner’s Office, details available at www.ico.org.uk