We use customer personal data to provide a means of contacting the customer about their booking and to invoice them. The data is stored onsite in our management information system and emails, with some details in a paper diary, and certain data may also be stored in our accounts system. We retain electronic and paper copies of this data for up to five years.

Website information forms are forwarded to us by email and all emails, including any that may contain personal data, remain on our systems for at least five years. The legal basis for this processing is the contract to provide the facilities requested. We may, at times, undertake some marketing to current and recent customers using personal data that we hold and the legal basis of legitimate interest.

Technical information containing personal data received in emails or from our website will only be used for statistical purposes and not deliberately to track or identify a person.

All staff personal data is stored in our paper files and our accounts system. We use this data principally to provide payroll and pension services. We delete the personal data of staff who have left us three years after the year they leave. The legal basis for this processing is the contract of employment or agreement to work as a volunteer.

We will not pass personal data to any other organisation except to undertake marketing on our behalf, or in fulfilment of our legal duties as an employer. We do not share our information with other organisations, but our website designers and hosts, along with other organisations that provide us with technical services, may have temporary access to personal data which they will handle in confidence and securely.