PRIVACY NOTICE

Manor House Activity & Development Centre (MHADC), of The Manor House, St Issey Wadebridge Cornwall PL27 7QB, is a partnership of Stephen and Lesley Kirk. MHADC is registered with the Information Commissioner's Office as data controllers under registration number: ZA382705.

This privacy notice applies to personal data MHADC collects about:

  • Visitors to MHADC websites
  • Recipients of our sales and marketing collateral
  • Potential MHADC clients
  • Current and former Clients
  • Job applicants
  • Current and former employees
  • Suppliers and Partners
  • General public via CCTV camera at MHADC premises
MHADC WEBSITE

MHADC uses third party cookies

  • Google
    • Google Analytics gathers information allowing us to understand interactions with our websites and ultimately refine that experience to better serve you. If you would like to opt out of being tracked by Google Analytics across all websites, please visit http://tools.google.com/dlpage/gaoptout
    • Google Targeted Marketing - These cookies are used to make advertising messages more relevant to you and your interests.Marketing cookies are used to track visitors across websites. The intention is to display ads that are relevant and engaging for the individual user.
  • MailChimp
    • These cookies are strictly necessary to provide you with services available through MailChimp websites and includes sign up to newsletters etc.
  • YouTube
    • Registers a unique ID that can be used by Google to keep statistics of how the visitor uses YouTube video across different websites and what videos the user has seen.

For more Information on cookies used on our site please review the Cookie Statement below.

SALES AND MARKETING 
  • The contact details of suppliers, clients (current and former) and potential clients are managed by MHADC using Outlook software.
  • Newsletter and Other Mailings
    • Statistics are gathered on all mailings sent by MHADC via a third party provider, MailChimp, around email opening and the number of click through. This is to help monitor and improve the content of the newsletter. For more information regarding MailChimp please see https://mailchimp.com/legal/privacy
    • Any Recipients will be able to opt out of future mailings by clicking Unsubscribe found at the bottom of each mailing.
CLIENTS
  • MHADC processes current client contact details for the purpose of providing the course/service, invoicing, and various client administration tasks in order to fulfil its contractual obligations. Information will be retained in accordance with our data retention schedule.
  • Former clients contact details are stored for the purpose of maintaining a record of the course/service delivery in the case of future query / audit purposes in accordance with our retention policy/schedule.
JOB APPLICANTS
  • MHADC will only use the information the applicant provided for the purpose of progressing their job application or to fulfil our legal or regulatory requirements as necessary.
  • The information the applicant provided throughout the recruitment process will be used to assess their suitability for employment at MHADC. 
  • For unsuccessful applications, MHADC will retain the application files in accordance with the MHADC retention schedule. MHADC may also ask the applicant permission to contact them should any further suitable vacancies arise.
  • Interview notes and test results (as applicable) will be stored by MHADC in accordance with the MHADC retention policy.
  • MHADC will be required to confirm the successful applicant’s identity, their right to work in the United Kingdom and to seek references. For this purpose, MHADC will require
    • proof of identity (original documents to be provided to which MHADC will take copies)
    • declaration of any unspent convictions, (a DBS check will be completed in any event)
    • details of the applicant's referees for MHADC to contact
    • a completed health questionnaire (to establish fitness to work)
  • Personal data processed for a DBS security check may be held by MHADC, whilst the results of the check will be held by British Canoeing as MHADC’s agent for the online checks. The candidates will receive a hard copy of the results, which they may provide to MHADC if they so wish.
  • At the start of employment MHADC will require information for HR purposes as detailed on the new starter form, such as
    • bank details for payroll
    • National Insurance number for payroll
    • copy of driving licence (including driving points) for insurance purposes and completion of additional driver form
    • next of kin details (to be used when there is emergency at work)
SUPPLIERS AND PARTNERS
  • MHADC will only use the information you provide for the purpose of support, invoicing and various supplier and or partner administration tasks in order to fulfil our contractual obligations.
CCTV
  • CCTV cameras are installed in MHADC premises for the purpose of crime detection, crime prevention and the safety of both the public and employees. Images captured by CCTV will not be kept for longer than necessary.
  • MHADC will only disclose recorded images to authorised bodies who intend to use it for the purposes stated above. 
YOUR RIGHTS

In order to ensure you remain in control of your personal data, as individuals you have the following legal rights in relations to your personal data, which are held by MHADC:

  • right to obtain a copy of your personal data (data subject access request)
  • right to rectify incorrect personal data 
  • right to request deletion of your personal data where it is no longer required for MHADC to retain such data
  • right to withdraw consent to processing when consent is the only basis use for collection and processing
  • right to request further processing where there is a dispute in relation to accuracy or processing of your personal data
  • right to object to your personal data being used for marketing or where processing is based on legitimate interest

If you would like to exercise any of your legal rights above, please contact Lesley Kirk.

Please keep in mind that there are exclusions to the rights outlined above and although MHADC will endeavour to respond to your request, there may be circumstances where we are unable to do. If you are unsatisfied with our response or you believe that your privacy rights have been infringed you should contact the UK Information Commissioner's Office (ICO), who oversees data protection compliance in the UK. Details of how to do this can be found at www.ico.org.uk.

LINKS TO OTHER WEBSITES

MHADC website may contain links to other websites. MHADC does not control those other sites and we cannot be responsible for the content of those sites or for the protection of any information you provide to other sites (which are not governed by this privacy notice). MHADC accepts no responsibility or liability for such other websites. You should exercise caution when entering personal information online and look at the privacy statement applicable to the website in question.

QUERIES

Any queries in relation to your personal data or this privacy notice should be directed to Lesley Kirk.

CHANGES TO THIS PRIVACY NOTICE

This privacy notice may be updated from time to time. The latest version will always appear on MHADC website

Last modified: 21/05/2018

GDPR Notice

Working within the MHADC Data Protection Policy, we are committed to ensuring that our business, policies, and practices are compliant with the existing Data Protection Act and its replacement, the General Data Protection Regulation (GDPR). We take personal data security seriously

SERVICES AND PRACTICES

As a Data Processor for our clients, we ensure that:

  • We only process information following instruction and approval from the Data Controller (this includes a change of purpose, and the deletion or removal of client data) except where this contravenes MHADC’s own requirements for storage of information
  • As part of providing a course/service for the client, MHADC will need to process various personal data as provided by the client for the purposes of the course/service provided.
  • MHADC has a requirement to store some personal data (including but not limited to the Consent Form)for 3 years for an adult and 3 years after the 18th birthday in the case of a child (ie when they turn 21 years of age). This is because the statute of limitation on a personal injury claim is three years (or longer in the case of a child) and we may be required to provide evidence of consent if MHADCinsurer is required to defend a claim.

As Data Controller for our clients, we ensure that:

  • We only process information as required for the purpose of providing the course/service
  • MHADC has a requirement to store some personal data (including but not limited to the Consent Form)for 3 years for an adult and 3 years after the 18th birthday in the case of a child (ie when they turn 21 years of age). This is because the statute of limitation on a personal injury claim is three years (or longer in the case of a child) and we may be required to provide evidence of consent if MHADCinsurer is required to defend a claim.
  • Access to MHADC client data (both hard and soft copy) is limited to those who have a legitimate need
  • Computer Data is backed up every week and stored in rotation in a secure location off site (within the UK)
  • Hard Copy data is stored onsite initially under strict control measures and then off site at a secure location (within the UK)
  • The MHADC incident reporting process takes into account the requirement to contact the Data Controller, ICO (or other Supervisory Authority), and other relevant regulatory authorities in the event of a personal data breach
  • We support our clients in dealing with Data Subject requests in relation to the personal data that we may have processed on their behalf
CHANGES TO THIS GDPR NOTICE

This GDPR notice may be updated from time to time. The latest version will always appear on MHADC website

Last modified: 21/05/2018

Cookie Notice

Get in touch today

Testimonials