Privacy Policy and Data Protection Policy

Introduction
This document has been prepared by the Worshipful Company of Fuellers and the Fuellers Charitable Trust Fund (together “the Company”) for our Members, Trustees and all interested parties to clarify the steps we have taken to ensure we comply with the General Data Protection Regulation legislation (“GDPR”). Its purpose is to provide an overview of our Data Protection policy, covering the processing and protecting of personal data in order to provide agreed services to the Company and all other parties we contact in relation to our role as a Livery Company or Charitable Trust.
The Company is both a Data Controller and Data Processor in relation to the services it provides. We are not required to appoint a Data Protection Officer under the legislation; for any queries relating to our data processing please email clerk@fuellers.co.uk .

Lawful Basis
Of the six available lawful bases for processing data under GDPR the Company considers that the processing of the data it holds in order to carry out the administration of the Company and to provide other agreed services to our members is that of “performance of a contract with the data subject”.
Furthermore, the Company considers that the processing of the data it holds in order to carry out the general marketing activities is that of “legitimate interest” and also “to take steps to enter into a contract”.

Types of Personal Data
As a member of the Company or an associated party, you may volunteer your personal data information when using our website, emailing us, interacting with us on social media, replying to surveys, or registering for information or events.
The data we collect can include your salutation, full name, post-nominals, date of birth, date of becoming an Associate Member, being granted the Freedom of the Company, being enrobed in the Livery, becoming a Court Assistant or an Officer of the Company, job title, postal address(es), biography, spouse or partner details, name and date of birth of children, CV, telephone number(s), e-mail address (es), social media account address(es), website address(es) and photographs.

Rationale for Processing Personal Data
The information that you provide us with will be used for the purpose of contacting you and/or providing you with relevant and updated information about our organisation, its activities and positions.
The Company processes identification details of the individuals who register to participate to events it organises for the purpose of managing the registration and participation to such events under the general terms and conditions that are expressly accepted by the individuals and/or based on consent for certain personal data. Your consent will be specifically asked for photos or multimedia content that may enable the recognition of participants at events.

Data Retention
Your personal data will be kept as long as you are a member of the Company and, otherwise provided by law, for the time that is strictly necessary to achieve the purpose(s) for which they were collected.
You can submit a Subject Access Request for all data held on you or your organisation at any time by emailing clerk@fuellers.co.uk
Should you wish to withdraw your prior informed consent, rectify or remove any of the information that we hold about you or your organisation, please contact us at: clerk@fuellers.co.uk.

Data Sharing
The Company does not share or sell any personal data to third parties for any commercial purposes. Your personal data will not be shared with any other third parties unless we would be required to do so by law or to comply with a court order served upon us in connection with our website(s), social media channels, or to protect and defend our legal rights and interests and those of our members.
The processing of the personal data stored and processed by the Company has been assessed as presenting very limited risks for fundamental rights as only professional information is used with adequate security measures in place to prevent data breaches.

Online Data
The Company and its web hosting company treat all data held with care and security. Any details provided will remain confidential.
Our website or social media channels may use tracking techniques such as cookies for collecting technical information about your use for the purpose of improving and tailoring their content and making it more user-friendly. Cookies are text files placed on your computer to collect standard internet log information and visitor behaviour information. This information is used to track visitor use of the website and to compile statistical reports on website activity. You can set your browser not to accept cookies and but in a few cases some of our website features may not function as a result.
When interacting with our social media channels your consent and personal data use are covered by the terms and conditions and privacy policies of each of these social media platforms.
Our website, social media channels and electronic communication tools may also contain links to websites or social media channels of third parties. These links are provided for your information and convenience only. The Company does not endorse, approve or take any responsibility for the websites or social media channels to which we provide links. We also do not endorse, approve or take any responsibility for their availability, performance, content or for the use of such websites or social media channels or any information contained therein.
The Company’s data privacy policy applies only to the Company’s data storage and processing methods, website and electronic communication media and not to any other websites or media that you would access by hyperlink from our website or our social media. When you leave our website by linking to another site or through social media, you should read the privacy policy, if any, provided by such website or media.
The Company gives no warranty that the contents of our online platforms are free from infection by viruses or anything else which has contaminating or destructive properties and shall have no liability in respect thereof.

Data Storage
The data we hold contains personal contact details and occasionally corporate bank account details. Sensitive Personal Data is not collected or stored.
This data is held in a range of formats – paper files, archived paper files and IT server-based internal networks. Electronic data is stored in a database, with data also stored in other directories on the same server, for example for invoice correspondence. Our IT server and hardware are protected with anti-virus software. All IT equipment is password protected and access is restricted to the relevant personnel. We do not process or hold data outside the United Kingdom.
Physical data stored held at our office is secured in locked cabinets in locked offices. Our office is secure with electronic fob entry and alarms.

For any further information on our data practices please email clerk@@fuellers.co.uk or write to The Clerk, The Worshipful Company of Fuellers, Carmen Hall, 186C Fleet Street, London, EC4A 2SH.