Organisation: AOC Sussex, Surrey & Hampshire
Policy Version: May 2021
At AOC Sussex, Surrey & Hampshire we know the importance of privacy and handling data securely. This document outlines the type of data we collect and process.
What type of information we collect:
Currently AOC Sussex, Surrey & Hampshire only collect personal information when you use the club shop. Information is collected on the checkout page and is used to process your order.
The information collected and processed is:
• First name and Surname
• Address – House, Street, Town/City, Postcode and County.
• Email Address (Only used for communications regarding your order)
• Track and Trace for COVID-19 (Events only)
The checkout page contains a payment area. Payment details are handled securely by our payment provider Stripe. Stripe is a certified PCI Service Provider Level 1, which means it meets the most stringent security standards in the industry. No payment details are collected or processed by AOC Sussex, Surrey & Hampshire.
How we collect personal information:
AOC Sussex, Surrey & Hampshire collect information as part of the checkout process on the club shop. We only collect the necessary information to process your order.
How we store your personal information:
Personal information is stored securely on our webservers, no physical copies of order information is kept. Club shop order information is held for 60 days, after this the information deleted.
Your data protection rights:
Under data protection law, you have rights including:
Your right of access: You have the right to ask us for copies of your personal information.
Your right to rectification: You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure: You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing: You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing: You have the right to object to the processing of your personal information in certain circumstances.
Your right to data portability: You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact us at firstname.lastname@example.org if you wish to make a request.
How to complain:
If you have any concerns about our use of your personal information, you can make a complaint to us at email@example.com.
You can also complain to the ICO if you are unhappy with how we have used your data.
Information Commissioner’s Office
Helpline number: 0303 123 1113
ICO website: www.ico.org.uk