This document explains how Chapeltown Village Residents Association (CVRA) uses the personal data it collects for the purpose of conducting its functions as a resident’s association.
The categories of personal information that we collect, process, hold and share
This includes personal information in respect of our:
i. Members (including name, address, telephone number, email address and information distribution preferences)
ii. Suppliers / individuals with whom we have contact as part of the work conducted by CVRA (referred to in this document as business information, including name, address, telephone number, email address, payment information including bank details and details of the particular matters associated with our work on behalf of CVRA members).
Why we collect and use this information
We use this information to enable us to conduct specific functions for which we are responsible and to manage our financial and operating arrangements.
The lawful basis on which we use this information
We collect and use this information as follows:
i. Membership information: Where the data subject has given consent to the processing of his or her personal data for the purpose of identifying membership, collecting, and recording information distribution preferences and communicating matters of interest to CVRA members. Correspondence with members will also be retained to enable CVRA to keep track of issues and past events. We also record attendance at meetings of the association and appropriate details of matters raised, which may include the name of the individuals raising or commenting on these issues, or otherwise participating at such meetings.
ii. Business information: Where processing is necessary for performance of a task which is in the interest of members and/or in line with our legitimate interests as a residents’ association.
Storing this information
Personal information records may be paper based or on computer. Paper based records are stored under lock and key and computer records are password protected on a secure cloud-based server.
We hold data for up to six years, depending on its importance and having regard to the Statute of Limitations (the Limitation Act 1980). However, minutes of our meetings containing details of attendance and matters discussed with our members will be retained in perpetuity or until it is considered that they are no longer required for record purposes or on grounds of historical value.
Membership details will be destroyed within 12 months following a lapsed membership or immediately if a member notifies us in writing that they no longer wish to be identified.
What are your rights?
If at any point you believe the personal information relating to you that CVRA holds may be incorrect, you can request to see this information and have it corrected or deleted. If you are a CVRA member, you may withdraw your consent for us to hold some or all your personal data at any time, but this may impact on your membership and our ability to communicate effectively with you. If it does, we will inform you of the implications there may be if this data is destroyed so that you can make an informed decision.
If you wish to raise a complaint on how we have managed your personal data, you can contact our Data Protection Officer, who will investigate the matter, consult with the Data Controller, and respond to you as expeditiously as possible.
If you are not satisfied with our response or believe we are processing your personal data in a way that is not in accordance with the law, you can complain to the Information Commissioner’s Office (ICO).
If your personal data held by CVRA is based on consent only, you have the right to withdraw that consent at any time, and this will not affect the lawfulness of processing based on consent before its withdrawal.
The Data Controller is CVRA’s Chair (currently Paul Keeling), and you can contact him by email p.keeling@chapeltownvillage.com . Please mark your correspondence for the attention of the Data Controller.
Our Data Protection Officer is CVRA’s Vice Chair (currently Ian Ormrod), and you can contact him by email i.ormrod@chapeltownvillage.com. Please mark your correspondence for the attention of the Data Protection Officer.