Privacy and Data Policy
Introduction
Bay Veterans Association is committed to protecting the privacy and personal data of our supporters, volunteers, service users, and visitors. This Privacy and Data Policy outlines how we collect, use, store, and protect your personal information, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who We Are
Bay Veterans Association is a Community Interest Company (CIC) that supports veterans and their families across the Morecambe Bay area. Our registered office is Arndale Center, 23-25 Royalty Mall, Morecambe, LA4 5DH. For the purpose of data protection law, we are the data controller of the personal information you provide to us.
What Data We Collect
We may collect and process the following types of personal data:
Name, address, and contact details
Date of birth (if required for specific services)
Donation and transaction details
Volunteer, event or fundraising participation records
Communications and preferences
Any other information you choose to provide
How We Collect Your Information
We collect your data when you:
Sign up to volunteer or register to attend an event
Donate or fundraise for us
Subscribe to our mailing list
Contact us by phone, email, or in person
Use our website or social media pages
How We Use Your Information
We collect your data when you:
Manage volunteer participation and communication
Process donations(where applicable)
Send updates about our work, events, and campaigns (with your consent)
Respond to enquiries or feedback
Monitor and improve our services
Fulfill legal and regulatory obligations
Legal Basis for Processing
We rely on the following lawful bases for processing your data:
Your consent (e.g. for email newsletters)
Performance of a contract (e.g. event registration)
Legal obligation (e.g. tax requirements)
Legitimate interests (e.g. organisational support and development)
Data Sharing and Third Parties
We will never sell your data.
We may share your information with carefully selected and trusted third parties that support us in delivering our services. This may include, for example, organisations that assist with processing donations, managing event bookings, delivering well-being services, or distributing newsletters.
Any sharing of data is strictly limited to what is necessary for the delivery of specific services or administrative support. Where such sharing occurs, we ensure that:
- A data processing agreement is in place to protect your personal information
- The third party agrees to comply with data protection legislation and our standards
- Your data is not used by these organisations for their own purposes
- Data is stored securely and used only for the agreed-upon tasks
We only work with organisations that demonstrate a strong commitment to privacy and data security. We do not allow third parties to use your information for marketing or any unrelated activity.