Data Custodian: Carmelite Priory, Boars Hill, Oxford, OX1 5HB
Categories of Personal Data held: Name, address, phone number, email address, date of birth, medical conditions during time of stay at the priory (see terms and conditions), as well as information and data relevant to the instructive purposes of the Centre.
Personal information provided by guests is stored securely in the Centre’s records system and will be used solely for the Centre’s purposes. It will not be passed on to anyone else.
Secure and Compliant
Your personal data are stored securely by us and used for communications and fundraising in support of our mission. We comply with current UK regulations on personal data, communications and privacy. We only share personal data outside our organisation for specific and limited purposes, subject to strict safeguards (e.g. with printers, email service providers, statutory bodies). We use some secure third-party data processors whose servers store data outside the EU but fully comply with UK/EU regulations.
Data Protection Principles: Personal data shall be:
1.processed lawfully, fairly and in a transparent manner
2.collected and further processed for specified, explicit and legitimate purposes
3.adequate, relevant and limited to what is necessary for the processing purpose
4.kept in a form which allow identification of data subjects and for no longer than necessary having regard to the purpose for which the data is processed
5.processed in a manner that ensures appropriate security
The purposes of the processing as well as the legal basis for the processing:
- Provision of update information to CACS course members, as well as to friends of the Centre (CACS)
- Providing promotional information to those who have subscribed for the receiving of such.
Recipients of Personal Data: Designated Personnel of the Centre, as well as third parties who are from time to time required to carry out services on behalf of the Centre in order that the Centre performs its contract to you and fulfils its obligations to regulatory bodies. Data sent onward/returned to agents and clients, with your consent, as appropriate.
The Period for which Personal Data will be stored: We consider our relationship with friends, course participants, guests, retreatants, donors and supporters to be life-long and we will retain much of your data indefinitely unless your request otherwise.
Disposal of data is carried out confidentially: Persons whose data has been collected by the Retreat Centre/CACS have the right to request access, rectification and erasure of personal data. Restrictions of processing concerning their data will be applied within the demands of data protection regulations. We do not store credit card details, nor do we share customer details with any third parties. You can complain to the UK Fundraising Regulator if we fail to respect your rights. Please note that in some cases we may be unable to erase your data if retention is required to meet our legal obligations.
The foregoing matters apply to the Retreat Centre/CACS, its administrative team, course members, friends and any other person engaging with the Retreat Centre/CACS, all of whom have the right to lodge a complaint with the supervisory authority if their data has been used without permission, outside of the circumstances or purposes for which they were collected.
Research We Undertake: We research our contacts to disvocer those who may have the ability to offer larger fits, using public domain sources (e.g. internet searches). Sometimes we may use a secure third-party research service to develop our understanding of those we suspect of falling into the group: their interests, financial capacity, social networks, philanthropy. This information makes it more likely that our fundraising approaches will be welcomed and appropriate.
Contact Details: If you have any queries please do not hesitate to contact the Retreat Centre Administrator, Carmelite Priory, Boars Hill, Oxford OX1 5HB
6th May 2019