The Commonwealth Heritage Forum is committed to the protection of the privacy of all our members and visitors. Your privacy is really important to us and we understand how important it is to you. Our aim is to be as clear and open as possible about what we do with your personal data and why we do it.
We comply with our obligations under the EU General Data Protection Regulation 2018 (GDPR) by keeping personal data up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data.
Sharing your information
The information we hold about you will be treated as strictly confidential. We will only share your data with third parties with your prior consent, or unless required to do so by law.
We reserve the right to publish pictures of Commonwealth Heritage Forum events and by attending any of our events you give permission to publish pictures of those events. If you have any objection, please contact the Data Protection Officer at email@example.com and we gladly remove that respective picture.
How secure is your information?
We take security very seriously and will do everything within our power to keep your information safe.
How long do we keep your information?
We keep data in accordance with the guidance set out by the GDPR. We endeavour to maintain only data that is relevant, accurate and up to date. We have internal processes to periodically review the data we hold and delete data that is no longer relevant to our purpose for processing.
Your rights and your information
Unless subject to an exemption under the GDPR, you have the following rights with respect to your personal data:
- Access to your information - You have the right to request a copy of the personal information about you that we hold.
- Correcting your information - We want to make sure that your personal information is accurate, complete and up to date and you may ask us to correct any personal information about you that you believe does not meet these standards.
Deletion of your information
You have the right to ask us to delete personal information about you where:
- you consider that we no longer require the information for the purposes for which it was obtained or that we no longer need to retain it in accordance with our statutory obligations;
- you have validly objected to our use of your personal information;
- our use of your personal information is contrary to law or our other legal obligations.
Objecting to how we may use your information
Where we use your personal information to perform tasks carried out in the public interest then, if you ask us to, we will stop using that personal information unless there are overriding legitimate grounds to continue.
Restricting how we may use your information: In some cases, you may ask us to restrict how we use your personal information. This right might apply, for example, where we are checking the accuracy of personal information about you that we hold or assessing the validity of any objection you have made to our use of your information. The right might also apply where there is no longer a basis for using your personal information, but you do not want us to delete the data. Where this right is validly exercised, we may only use the relevant personal information with your consent, for legal claims, or where there are other public interest grounds to do so.
Withdrawing consent using your information: Where we use your personal information with your consent you may withdraw that consent at any time and we will stop using your personal information for the purpose(s) for which consent was given. Please contact us if you wish to exercise any of these rights.
Lodging a complaint: If you feel we have used your information incorrectly or without lawful basis, or you dispute our lawful basis, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO).
If we wish to use your information for a new purpose, not covered by this Privacy Notice, then we will provide you with a new notice explaining the new use prior to starting the processing and setting out the relevant purposes and legal basis for processing. Where and whenever necessary, we will seek your prior consent to the new processing.
Our contact details
We can provide you with access to your personal data at any time. We ask that requests are made in writing to The Data Protection Officer, Commonwealth Heritage Forum, 12 Devonshire Street, London W1G 7AB, or by email to firstname.lastname@example.org.