PRIVACY POLICY


YOUR PERSONAL DATA

Your data is your data. The Shark Trust is committed to keeping your data secure and being transparent about how we use it.

If you have any concerns about your data, you can contact us at any time at privacy@sharktrust.org


WHAT WE NEED

The Shark Trust acts as the ‘Controller’ of the personal data you provide to us – that means we decide how and why it is used. We only collect the basic personal data that we need to fulfil your needs – no more than is necessary.

In some cases we’ll use a ‘Processor’ to help us collect your data and process your request. We work closely with trusted processors to ensure that they share our commitment to your security.

If you’ve paid us for something, the data we hold is restricted to contact details (name, address, phone and email) along with details of your donation/purchase/subscription. Where there’s a financial transaction, we’re obliged to hold your information on record for 6 years.

If you’ve only consented to join our mailing list we’ll hold your name and email only. You can unsubscribe from the list at any time by clicking on the link at the bottom of any email that we send. Alternatively, you can ask us to remove your details by emailing privacy@sharktrust.org


WHY, WHO AND HOW LONG?

It depends on what you’ve asked us to do:

                     
  If you have…
 
  We need your data to…
 
  Your data is processed by…   And shared with…   We will keep it until…  
                     
  Joined as a member
 
  Fulfil the contract and send your Shark Focus magazines
 
  Charity Checkout (UK), Go Cardless (Direct Debit) & Shark Trust
 
  Telebiz marketing who send out your magazines
 
  6 years after your membership lapses
 
 
  Bought from our shop
 
  Fulfil the contract and deliver your goods
 
  Shopify (US) & Shark Trust
 
  Courier and postage companies
 
  6 years after the transaction (for UK tax records)
 
 
  Donated to us through charity checkout
 
  Donated to us through charity checkout
 
  Charity Checkout & Shark Trust
 
  HMRC
 
  6 years after the transaction (for UK gift aid tax records)
 
 
  Signed up as a fundraiser
 
  Send you vital information and register your event
 
  Charity Checkout & Shark Trust
 
  Race and event organisers
 
  The end of the year in which the event is held
 
 
  Recorded a shark sighting or an eggcase find (UK)
 
  Contact you for verification and manage your recorder account
 
  DConcept (EU) & Shark Trust
 
  No-one
 
  Indefinitely unless you ask us to remove it
 
 
  Recorded an Eggcase find in Netherlands
 
  Contact you for verification and manage your recorder account
 
  DConcept & Shark Trust
 
  Dutch Elasmobrach Society (National Partners)
 
  Indefinitely unless you ask us to remove it
 
 
  Signed up to our mailing list
 
  Email you with updates and marketing information
 
  MailChimp (USA)
 
  No-one
 
  Indefinitely until you withdraw consent (unsubscribe)
 
 

WHERE WE KEEP YOUR DATA

We keep a copy of your personal data on secure software managed from our office in the UK. The system is held on a server in the UK. We have a Data Protection policy in place to oversee the effective and secure processing of your personal data. Any third party that has access to your data has a processing contract with us which binds them to manage your data securely and only under our instruction. Where these Third-Parties are outside the EU, we take steps to ensure they meet the standards of the GDPR (The EU’s General Data Protection Regulation).


WHAT ARE YOUR RIGHTS?

If at any point you believe the information we process is incorrect you may request to see this and have it corrected or deleted – please send an email with the heading “Subject Access Request” to privacy@sharktrust.org

If you wish to raise a complaint on how we’ve handled your personal data, you can contact us and we’ll investigate the matter.
If you’re not satisfied with our response or believe we’re processing your personal data not in accordance with the law you can complain to the Information Commissioner’s Office (ICO).

Because of our size and the nature of the data held, we haven’t appointed a Data Protection Officer. The person responsible for Data Protection is Glenys Heafield who can be contacted at privacy@sharktrust.org or 01752 672020. 

The Shark Trust
5 Creykes Court
The Millfields
Plymouth
PL1 3JB