Leslie Town Hall Data Protection and GDPR Policy
Effective Date: 18/7/2025
1. Introduction
Leslie Town Hall is committed to protecting and respecting your privacy. We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other relevant legislation concerning the protection of personal data.
2. Purpose
This policy sets out how Leslie Town Hall collects, uses, stores, and protects personal data. It applies to all employees, volunteers, trustees, contractors, and third parties processing personal data on behalf of Leslie Town Hall.
3. Legal Basis for Processing Personal Data
We process personal data on the following legal bases:
– Consent
– Contractual obligation
– Legal obligation
– Legitimate interests
4. Types of Personal Data Collected
Leslie Town Hall may collect and process the following types of personal data:
– Names, addresses, email addresses, phone numbers
– Payment details (for event bookings or hall hire)
– Health information (for accessibility or safety reasons)
– CCTV footage (for security purposes)
5. Data Collection Methods
We collect personal data via:
– Event bookings
– Hall hire forms
– Email or telephone enquiries
– CCTV systems
– Volunteer and employment applications
6. Data Use
Personal data is used to:
– Manage bookings and hall hire agreements
– Process payments
– Ensure safety and security
– Comply with legal obligations
– Communicate with volunteers and service users
7. Data Retention
We retain personal data only as long as necessary:
– Financial records: 6 years
– Booking records: 3 years
– CCTV footage: 30 days (unless required for investigation)
– Volunteer/staff records: Up to 6 years after termination
8. Data Sharing
Leslie Town Hall will only share personal data with:
– Service providers under contract (e.g., payment processors)
– Legal authorities when required by law
We will never sell or rent personal data to third parties.
9. Data Security
Leslie Town Hall implements appropriate technical and organisational measures to safeguard personal data. This includes:
– Secure storage (both physical and digital)
– Password-protected systems
– Staff and volunteer training on data protection
10. Data Subject Rights
Under UK GDPR, individuals have the right to:
– Access their personal data
– Request correction or deletion of inaccurate or unnecessary data
– Restrict or object to processing
– Request data portability
– Withdraw consent at any time (where applicable)
– Lodge a complaint with the Information Commissioner’s Office (ICO)
11. Contact Information
For any data protection queries or to exercise your rights, contact:
Leslie Town Hall – Data Protection Officer
Email: DPO@leslietownhall.com
Or
Data Protection Officer
Leslie Town Hall
21 High Street
Leslie
KY6 3DA
12. Review and Updates
This policy is reviewed annually and updated as necessary to comply with legal requirements and organisational changes.