Our GDPR Policy – Data Privacy Notice

 


This document outlines Shrewsbury LGBT History’s EU GDPR policy.


This is a ‘live’ document that we will update as new information becomes available.


 

Organisation overview:

Shrewsbury LGBT History was founded in 2015 by invitation from the National Festival of LGBT History. Each year the Shrewsbury LGBT History Festival aims to share and highlight the history of LGBT+ people in Shropshire and beyond. The festival takes place in February and we run other events throughout the year.

 

 

Why do we collect data?

We collect data for normal business activities:

  • to complete our projects and events

  • to research stories and projects

  • to market our events

  • as part of our own due diligence to comply with public liability and indemnity insurance.

 

We do not sell or trade data or pass on data to third parties without the specific written permission of the data supplier. For example, if we are asked to recommend a colleague for a job etc.

We will share data if required to do so by law (e.g., by the police or as part of a legal process) or as part of our regular accounting activities (invoicing etc).

 

 

How do we collect data?

We collect data in usual ways:

  • Through the ticket sales via our website

  • Through documents and content supplied to us as part of our work (i.e., film files for review, text for content etc)

  • Business to business contact scenarios (work events, meetings etc)

  • E-mail contact

  • Through social media

  • Contact information in the public domain


 

What data do we collect?

Customer information: contact names, email, contact number, social media information, billing information & bank details

 

We do not collect sensitive personal data (health, sexual orientation, dates of birth, school/college info etc) unless this is consented and required for a particular project


 

How do we store data?

Our contact lists are stored on Wix and Dropbox cloud services.

Access is password-protected. Also via Microsoft Excel.
 

Software

We do not use facial recognition software.

We use some software as part of our workflows that stores data and metadata including:

  • Adobe Photoshop – for marketing and photography projects

 

We understand that data stored on these systems cannot be deleted for legal reasons including the following:

  • Public liability and indemnity insurance purposes.

  • We need to be able to defend our work and back reference projects in case of legal challenge.

  • Data (including film footage and archive material) from old projects/films may be required in future productions

  • Accounting

  • It is a requirement that all invoices and company paperwork should be retained for 7 years for funder requirements

Anyone contributing to a Shrewsbury LGBT+ History project is asked to complete a contributor consent form which covers data protection and rights. These contributor forms are kept indefinitely or for as long as the programme/report that they pertain to remains active.

 

Data management & viewing your data

We regularly update our contact lists and delete old & irrelevant contacts.

If you wish to be removed from our contact list please send us an e-mail to marketing@lgbtsand.com


 

If you require further information, please contact marketing@lgbtsand.com