Privacy Policy
Privacy Policy
The National Allotment Society (NAS) collect information in the course of members joining the Society. The accuracy of the data is dependent on the information supplied by the member when joining or renewing/updating membership. We may also collect your personal information from a family member or carer (in the case of a gifted membership, for example), or from main contacts of associations who are supplying personal information of their affiliate members (in the case of an association membership). This policy also equally applies to any information that may be handled by the Society in communications with non-members.
The information covered by this policy includes (but is not limited to) the following:
- Name
- Postal address
- Contact details, landline number, mobile number and email address
- Association site details
- Your use history of our services (e.g. amending data in the Member’s Area)
- Website user information (including user journeys and cookie tracking)
- Information relating to compliments or complaints
- Information included in enquiries
- Marketing preferences
- Records of consent, where appropriate
The Society does not disclose private data to third parties, unless specifically appointed by the Society under a contract to fulfil the requirements of the membership package or a specific initiative the individual has signed up to. This will enable the Society to supply the benefits of membership, or to contact you directly, with membership information, using the contact details provided to us on joining/renewing, or updated by yourself throughout your membership. We may at times contact you directly concerning developments within the Society, and will also offer you the opportunity to opt into initiatives if you so wish.
Information is only shared with specific third parties under a contract to provide the benefits under NAS membership. This is undertaken with password-protected files and/or limited access to our database. We do not sell any information to third parties. When a member updates any personal data held by the Society, we will delete the old data. When a member ceases to be a member, the digital copy of their data will be retained for two years, and the hard copy will be retained for six years.
Your information is kept physically and electronically on our secure database, with hard copies kept in a locked and alarmed office. We undertake a secure destruction process with shredding on-site for hard copies of membership information.
Our website may contain links to other websites. This Privacy policy only applies to the NAS so when you use other websites, please take the time to check their privacy policy.
About cookies
Cookies are pieces of information which are stored directly on the computer you are using. We may place cookies or similar files on your computer when you visit our website.
These cookies are used to:
- Monitor which operating system, browser and screen resolution you used to visit our website so we can plan future development accordingly.
- Monitor which areas of the site you use during your visit so that we can assess which areas of the site are of most interest and plan future improvements for our visitors
- Provide online services which require information to be passed from page to page during the course of their execution. e.g. remember that you are logged in.
You can change the settings in your browser to accept all cookies, to notify you when a cookie is issued, or not to receive cookies at any time. The last of these, of course, means that certain personalised services cannot then be provided to you.
Unsubscribing
If you have received an email or other contact directly from us and you would like to ensure that you do not receive any further communications, please click the unsubscribe link on the email or contact us with your name and the email address we have on file for you, and we will remove you from our mailing lists. Please do not click the unsubscribe button on any emails that have been forwarded to you from other members, and instead contact the person who forwarded the email to request that they do not share further emails. Please be aware that if you unsubscribe from our e-newsletter, your email will be placed on a separate suppression list to ensure you are no longer contacted. You can request that this information to be deleted; however, this could allow for you to receive further emails if you or a third party signs the email address back up to receiving the e-newsletter.
Lawful bases and data protection rights
Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.
Our lawful bases for collecting or using personal information and the purposes that they relate to are as follows:
Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
This legal basis relates to our purpose of providing services and goods, including delivery and third-party referrals our purpose of providing services and goods, including delivery and third-party referrals, for service updates or marketing purposes, and for dealing with queries, complaints or claims
for service updates or marketing purposes, and for dealing with queries, complaints or claims.
Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object. This legal basis relates to our purpose of providing services and goods, including delivery and third-party referrals, for service updates or marketing purposes, and for dealing with queries, complaints or claims.
Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability. This legal basis relates to our purpose of providing services and goods, including delivery and third-party referrals, and to comply with legal requirements.
Which lawful basis we rely on may affect your data protection rights, which are set out in brief below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:
Read more about the right to object to processing
Your right of access- You have the right to ask us for copies of your personal information. You can request other information, such as details about where we get personal information from and who we share personal information with. There are some exemptions, which means you may not receive all the information you ask for.
Read more about the right of access Your right to rectification - You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete.
Read more about the right to rectification Your right to erasure - You have the right to ask us to delete your personal information.
Read more about the right to erasureRead more about the right to object to processing Your right to restriction of processing - You have the right to ask us to limit how we can use your personal information.
Read more about the right to restriction of processing Your right to object to processing - You have the right to object to the processing of your personal data.
Read more about the right to object to processing Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you.
Read more about the right to data portability Your right to withdraw consent – When we use consent as our lawful basis, you have the right to withdraw your consent at any time.
Read more about the right to withdraw consentIf you make a request, we must respond to you without undue delay and in any event within one month.
To make a data protection rights request, or to submit a complaint about our use of your personal data, please contact us using the contact details below:
The National Allotment Society (NSALG Ltd)
O’Dell House
Hunters Road
Corby
Northamptonshire
NN17 5JE
Email: contact@thenas.org.uk
Tel: 01536 266576
If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
Website:
https://www.ico.org.uk/make-a-complaint