Privacy Policy

Dunkerton Parish Hall ("we", "our", "us") is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal information.

Last updated: January 2025

Information We Collect

We may collect the following types of personal information:

• Contact information: Name, email address, phone number, postal address
• Booking information: Event details, attendance numbers, special requirements
• Communication records: Records of emails and messages you send to us
• Website usage data: Basic analytics about how visitors use our website (no personal identification)

How We Use Your Information

We use your personal information for the following purposes:

• To process hall bookings and enquiries
• To respond to your messages and questions
• To send you information about events and activities (with your consent)
• To improve our services and website
• To comply with legal obligations

Legal Basis for Processing

Under the UK GDPR, we process personal data on the following legal bases:

• Legitimate interests: For booking enquiries and running the charity
• Consent: For marketing communications and newsletters
• Legal obligation: For compliance with charity and tax law

Sharing Your Information

We do not sell or rent your personal information to third parties. We may share your information with:

• Service providers who help us operate the website or services
• Professional advisors (accountants, legal counsel)
• Authorities when required by law

Cookies & Tracking

Our website uses cookies to improve your experience. We use:

• Essential cookies: Required for the website to function (e.g., cookie consent)
• Optional cookies: Only set with your consent for analytics or preferences

You can control or delete cookies through your browser settings. Our cookie banner allows you to accept or reject optional cookies.

Data Retention

We retain personal information only for as long as necessary to fulfil the purposes outlined in this policy:

• Booking enquiries: Retained for 2 years after last contact
• Email communications: Retained for 3 years
• Financial records: Retained for 7 years (required by law)

Your Rights

Under the UK GDPR, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data (subject to legal requirements)
• Restriction: Request limiting how we use your data
• Portability: Request your data in a portable format
• Objection: Object to processing based on legitimate interests

To exercise these rights, please contact us using the details below.

Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These include secure servers, encrypted communications, and regular security reviews.

Children's Privacy

Our website is not directed at children under 13. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.