Google Analytics, is used to collect internet log information and to follow visitor patterns. By knowing the number of visitors to the various pages, we can improve the website and identify areas of particular interest. The information is processed in a way which does not identify individuals. If we are collecting personally identifiable information through our website, we will do so using forms that clearly explain what we intend to do with it.
Filling in forms: Most forms on www.lcrig.org.uk (for example the contact Us form, event registrations), are managed through Your Membership. However, some forms are in PDF format which are emailed to LCRIG and stored securely on our server. If we are collecting personally identifiable information through our website, we will do so using forms that clearly explain what we intend to do with it.
Social buttons: Visitors may use these to bookmark or share our web pages. There are buttons for: Twitter, Linkedin. These work using scripts from domains outside of the LCRIG website and it is likely those sites will collect their own information about what you are doing. You should review the policies of each of these sites to see how they use your information and to find out how to opt out, or delete, such information.
Social Media Contact with LCRIG uses Twitter and Linkedin, If you intend to post a comment on our Twitter or Linkedin feed, Twitter and Linkedin will require you to set up your own account. Please review the Twitter and Linkedin privacy notice to see how it uses your information and to find out how to opt out, or delete, such information. Direct messages sent to the LCRIG Twitter or Linkedin account will be deleted after 1 year.
Links to other websites: Our website also contains links to other websites that may be of interest to our visitors. However, once you have used these links to leave our site, this privacy statement no longer applies and we cannot be responsible for the protection and privacy of any information which you provide whilst visiting those sites – such sites are not governed by this privacy statement. Again, please check the respective policies of any such sites that you chose to visit.
Our legal basis for processing the data described above is our legitimate interest in keeping our website and services relevant so that we can develop and grow our organisation; as well as a legitimate interest in keeping an appropriate record of any communications entered into with those visiting our website and social media platforms.
Members (With Log ins):
Members (anyone who has a membership login to LCRIG is the data controller for the information you provide during the membership unless otherwise stated. If you have any queries about membership or how we handle your information, please contact us.
Our legal basis for processing the data described below is the performance of a contract to manage and administer your membership of LCRIG and to deliver member benefits to you; as well as a legitimate interest in keeping an appropriate record of any communications entered into with members and in keeping up to date member records.
What will we do with the information you provide to us?
Data we hold will be used confidentially, and to help us run our services and keep you informed – for example, to collect subscriptions, post out publications and let you know about our training and events; or to fulfil legal or regulatory requirements if necessary.
We will use the other information you provide to represent the sector, e.g. to compile sector demographics – you would never be identifiable individually, but such information enables us to more effectively advocate for the sector. We may also use relevant information (e.g. sector or level of membership) to advise you of products and services that may be of interest.
LCRIG will never sell, trade, rent, exchange or otherwise share your personal information with any other person, company or organisation without gaining consent to do so. The information you provide will be held securely by us and/or our data processors, whether the information is in electronic or physical format. We do not collect more information than we need to fulfil our stated purposes and will not retain it for longer than is necessary.
Joining as a member
We ask you for your personal details including name and contact details. We will also ask you about your professional details and questions relevant to the sector. Our administration and management teams will have access to all of this information.
Member login information, comprising of name or username, email address, and password is collected/created.
Further details are then collected in the member profile. The information is used to provide access to the member-only areas of the website and other member-only benefits. The services and information available to you will be governed by the type of membership that you have with us.
Your personal information is also used to track your website preferences and keep you informed, unless you have opted not to receive such communications. In some instances, when a purchase is initiated by a member, billing information, that may include credit card information, is captured.
Membership database: Your membership information is held by LCRIG.
FORUM As well as a member profile, you will have access to a private, member-facing online community called Forum where you will be able to network with other LCRIG members. You can post to your own feed; connect with other members; and can join regional and special interest groups. Participation the Forum is entirely optional, but by default your name and profile picture (if you choose to upload one) are visible to other LCRIG members using the Forum.
Paying for your membership (Associate Partners): If you use a credit or debit card to pay, you will be redirected to a third party service, who collect payment on LCRIG’s behalf. They will request card number, expiry date and the contact details of the person and address that the card is registered to.
How long is the information retained for? Once you cease to be a member, your membership profile and details of financial transactions made with LCRIG will be retained for 5 years. If you decide to rejoin, your original profile will be made active again, if still on record. We will stop all communications with you after one year, or as soon as you unsubscribe, whichever is sooner.
Registrations for Training Events:
If registering for an event or training, additional information such as dietary or access requirements may be collected, but will only be used for that particular event. If a member is signed in, relevant contact information from their member profile may be pre-filled to speed up the registration process for them.
We will periodically carry out anonymous polls and surveys on our website. From time to time we conduct sector research through the use of online surveys. For sector research surveys, the identities of respondents and their answers will be treated as confidential and will only be used for research purposes, unless the correspondent expressly requests or permits otherwise.
We may occasionally carry out market research with our members and non-members regarding the member services and benefits we currently offer or may wish to offer in future.
For all online surveys participation is voluntary at all times. The information you provide will be processed at all times by LCRIG in accordance with the Data Protection Act 1998 and from 25th May 2018, in accordance with the General Data Protection Regulation which will supersede it.
We use Survey Monkey and Slido for our questionnaires. If Survey Monkey or Slido are used, this will be made clear to you and in setting up the survey we might include optional boxes for your name and email. However, it is likely the sites will collect their own information e.g. anonymous usage information about what you are doing. Here is a link to their privacy notice: https://www.surveymonkey.com/mp/legal/privacy-policy/
Our legal basis for processing the data described above is legitimate interest in understanding and advocating for our sector and customers and so we can develop and improve our services.
Emails that we send to members and non-members: LCRIG uses a third party provider to deliver the majority of our email. Your Membership is also used to manage your email preferences, if you have stated on your member profile that you are happy for LCRIG to contact you by email. You will see an option to manage your email preferences at the end of every email sent from Your Membership LCRIG where you can subscribe/unsubscribe. This list is not exhaustive, but such emails may be about membership, training, jobs, technical news, industry news and LCRIG news.
Email tracking. Some emails that we send you have no tracking in at all, for example personal correspondence. Other emails we send are tracked so that we can tell if those emails send traffic to our website or we can tell, at an individual level, whether the user has opened and clicked on the email, to understand open and click rates to try and improve our emails. This information is recorded by Mailchimp anylitics. Sometimes we do use the personal information e.g. to re-email people who haven’t opened emails. If you want to be sure that none of your email activity is tracked, then you should unsubscribe from all LCRIG email correspondence.
Our legal basis for sending emails is legitimate interest where it concerns the administration of correspondence or a financial or membership transaction. For marketing emails our basis is consent.
LCRIG complies with its obligations under the Data Protection Act 1998 (the DPA), which will be superseded from 25 May 2018 by the General Data Protection Regulation 2016/679 (the GDPR), by keeping personal data up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data.
Only authorised employees and data processors (software suppliers and those working on behalf of LCRIG will have access to your data. All parties who have access to your data are required to process/use that data in accordance with the provisions of current data protection legislation and LCRIG’s Data Protection Policy.
LCRIG will never sell trade, rent, exchange or otherwise share your personal information with any other person, company or organisation without gaining consent to do so.
Your Membership uses sophisticated security and safeguard measures to protect users’ information (e.g. Secure Sockets Layer (SSL) encryption) to ensure that your data, debit/credit card will be protected against fraudulent use on our site.
Cookies are small text files that are placed on your computer by websites that you visit. They allow the website to remember who you are. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site.
You have the ability to accept or decline cookies by modifying the settings in your browser. However, you will not be able to login to the website if cookies are disabled. You can also manually remove cookies from your system. For more information on disabling and enabling cookies you should search for or lookup ‘Cookies’ in your Operating System Documentation or visit https://aboutcookies.org/
These cookies are used to collect information about how visitors use our website. We use the information to compile reports and to help us improve the website. The cookies collect information in an anonymous form, including the number of visitors to the website, where visitors have come to the website from and the pages they visited. You can find out more at https://support.google.com/analytics/answer/6004245?hl=en
Controlling Your Personal Information:
Personal data relates to a living individual who can be identified from that data. Identification can be by the information alone or in conjunction with any other information in the data controller’s possession or likely to come into such possession. The processing of personal data is governed by the Data Protection Act 1998 (the DPA) which will be superseded from 25 May 2018 by the General Data Protection Regulation 2016/679 (the GDPR).
You have rights as an individual which you can exercise in relation to the information LCRIG holds about you.
This privacy notice was drafted with brevity and clarity in mind. It does not provide exhaustive detail of all aspects of LCRIG’s collection and use of personal information. However, we are happy to provide any additional information or explanation needed. Any requests for this should be sent to firstname.lastname@example.org
If any of your personal details are incorrect, please write to us, email us or use the contact form, so that we can make any corrections promptly. Members are asked to review their data at least once a year on renewal.
If you want to make a complaint about the way LCRIG has processed your personal information, you can contact the ICO in the UK as the statutory body which oversees data protection law – https://ico.org.uk/make-a-complaint/.
Access to personal information
Members have an online login that will allow them to update their membership profile online at anytime.
Individuals can find out if we hold any personal information by making a ‘subject access request’ under the Data Protection Act 1998. If we do hold information about you, we will:
- give you a description of it;
- tell you why we are holding it
- tell you who it could be disclosed to and
- let you have a copy of the information in an intelligible form.
To make a request to LCRIG for any personal information we may hold you need to put the request in writing addressing it to LCRIG, Suite 4e, The Beehive, Shadsworth Business Park, Blackburn, Lancashire.
If you agree, we will try to deal with your request informally, for example by providing you with the specific information you need over the telephone.
Identity and contact details of controller and data protection officer: LCRIG is the controller and processor of data for the purposes of the DPA 1988 and GDPR.
If you would like your information to be permanently deleted, please put a request in writing addressing it to LCRIG, Suite 4e, The Beehive, Shadsworth Business Park, Blackburn, Lancashire.
LCRIG may change this policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes. This policy was last updated 8th August 2019.