Data Protection – Privacy Policy
A PDF version of this policy is available on request: email newcastle@idcnortheast.org.

Thank you for giving us the opportunity to communicate with you about upcoming events and activities.This policy has been put in place to explain to you how & why IDC Northeast collects your information and what information we collect when you give us your permission to do so. This is so that we comply with the law on data protection. It is very important to us that you feel your information is safe with us and gets handled with the utmost care.  If you are ever dissatisfied with the way we have used your information, this policy will show which steps you can take.

Definitions
The following definitions should help you understand this policy. When we say “we,” “us,” “our,” we are referring to IDC Northeast, a UK registered charity. You may choose to be signed up to our mailing lists or be part of phone contact lists to stay up date with our events and activities. When we say “you,” or “subscriber” we are referring to a person who has voluntarily signed up to our mailing lists. “Personal Information” means any information that identifies or can be used to identify you directly or indirectly, including, but not limited to, first and last name, date of birth, email address, gender, occupation or other demographic information. We may collect Personal Information about an email address or phone number related to a Subscriber to make sure the content you receive from us is relevant to you.

Purposes of Processing and Retention Period
We have obtained personal information from you, by your permission. This information is sufficient to identify you, and to enable communication with you by the means that you have chosen (such as email) and for the specified purposes (such as being informed about upcoming events).

We will keep this information for as long as you wish to continue to receive updates from us. We will contact you once a year in order to verify that you wish us to continue to contact you in this way.

We therefore hold your information for these purposes with your consent. You may withdraw your consent at any time by emailing newcastle@idcnortheast.org.

Where does your Personal Data go?
We do not sell, give, transfer or otherwise use your personal data other than for the purposes mentioned above.

In order to enable us to receive personal data for the specified purposes, we may provide your identity to a number of services that automate your data. These services have been carefully selected in a manner that is compliant with the regulation.

We will not send your personal information outside of the European Union. If any of the abovementioned services do, they will be obliged to explain this to you.

Safeguarding Your Information
We take reasonable and appropriate measures to protect Personal Information from loss, misuse and unauthorised access, disclosure, alteration and destruction, taking into account the risks involved in the processing and the nature of the Personal Information. We don’t, nor intend to process your personal information for any purposes other than those described in this notice and for which you have given your consent or where we have a legal obligation to do so.
Use and Disclosure of Personal Information
Disclosure of Personal Information will only take place for the following reasons:
– To protect the rights and safety of our Members and third parties, as well as our own;
– To prosecute and defend a court, arbitration, or similar legal proceeding;
– To respond to lawful requests by public authorities, including to meet national security or law enforcement requirements.

Your Rights
We are also obliged to explain to you your rights in respect of our processing of your personal data. These are:
– The right to request a copy of your personal information as it is held by us. There is normally no charge for us doing this.
– The right to request us to correct any errors in the personal information that we hold about you. We may request some evidence to confirm that an error has been made.
– The right to ask us to erase any personal data that we hold on you (legal obligations for us to retain information will take precedence).
– The right to ask us to restrict (suspend) processing of your personal data.
– The right to complain to a supervisory authority (regulator). We invite you to make any complaint directly to us in the first instance (via the details mentioned under ‘Questions & Concerns’) but you have the right to complain to the regulator at any time. In the United Kingdom of Great Britain and Northern Ireland the supervisory authority (regulator) is the Information Commissioner and the further details can be found here: https://ico.org.uk/for-the-public/.

Notice of Breach of Security
If a security breach causes an unauthorised intrusion into our system that may affect you, we will notify you as soon as possible and later report the action we took in response.

Accuracy and Retention of Data
We do our best to keep your data accurate and up to date, to the extent that you provide us with the information we need to do so. If your data changes (for example, if you have a new email address), then you are responsible for notifying us of those changes. Upon request, we will provide you with information about whether we hold, or process on behalf of a third party, any of your Personal Information. We will retain your information for as long as your account is active or as long as needed to provide you with our Services. We may also retain and use your information in order to comply with our legal obligations, resolve disputes, prevent abuse, and enforce our Agreements.

Access
We will give a Subscriber access to any Personal Information we hold about them within 30 days of any request for that information. Individuals may request to access, correct, amend or delete information we hold about them by contacting us via newcastle@idcnortheast.org or the postal address mentioned under ‘Questions & Concerns’. Unless it is prohibited by law, we will remove any Personal Information about you from our files at your or their request. There is no charge for an individual to access or update their Personal Information.

Questions & Concerns
If you have any questions or comments, or if you want to update, delete, or change any Personal Information we hold, or you have a concern about the way in which we have handled any privacy matter, please contact us via newcastle@idcnortheast.org or via postal mail at

IDC Northeast
2 Shipley Avenue
Newcastle upon Tyne
NE4 9RA

IDC does not have a statutory Data Protection Officer and is not required to have one.

Changes
We reserve the right to change this Privacy Policy at any time and from time to time. The version date can be found at the bottom of this Privacy Policy. All updates and amendments are effective immediately upon notice, which we may give by any means, including, but not limited to, by posting a revised version of this Privacy Policy or other notice on the Website. We encourage you to review this Privacy Policy often to stay informed of changes that may affect you, as your continued use of our services signifies your continuing consent to be bound by this Privacy Policy. Our electronically or otherwise properly stored copies of this Privacy Policy are each deemed to be the true, complete, valid, authentic, and enforceable copy of the version of this Privacy Policy which were in effect on each respective date you visited the Website.

Privacy Policy IDC Northeast 18/05/2018                                                    Review date: 18/05/2019