1) Changes to this Privacy Notice
2) Third Party websites
3) How is my personal information collected?
We collect personal information in the following ways:
- Directly from you - For example, by filling in forms on our websites (such as to sign up to our newsletter, or making a donation) or offline (including taking part in our events), or communicating with us by phone, email or letter or completing a survey or when you meet with us.
- We may also receive information from analytics providers (such as Google), contact, financial and transaction information from technical, payment and delivery services.
- Depending on your settings and the relevant policies and terms of service, you might give us permission to access information about you from social media such as Facebook and Twitter.
- If we have not done so already, we will notify you when we receive personal information about you from other sources and tell you how and why we intend to use that personal information.
- When you visit our website, we automatically collect some technical information from your computer or mobile device such as IP address, browser type and version, time zone setting, browser plug-in types and versions and operating systems and platforms, and information about your visit to the website and your use of it.
- We also collect cookies – see 6), below, for more information.
4) What personal information will Plymouth Music Zone collect about me?
We collect, store and use the following kinds of personal information:
- Identity data such as your name, username (and other profile data such as your preferences, social media profiles, feedback and survey responses)
- Photographs, video and/ or audio recordings.
- Contact data such as your address, email and telephone numbers.
- Financial data such as bank account and payment details, and Gift Aid information.
- Transaction data, including details of payments and donations.
- Technical data such as your IP address when you browse our websites.
- Communication preferences.
- Any other information you provide us as above (“How is my personal information collected?”).
Plymouth Music Zone employs the use of CCTV within its building and externally. All cameras are located in public areas, none are within private areas. They are used to safeguard participants, staff and visitors to the building, and also to aid in security of the building and equipment. CCTV on the outside of the building is also used for the same purposes. Images/footage may be shared with Devon and Cornwall Police on their reasonable request.
Other cookies are set by You Tube (Google) for storing user preferences.
7) How and why will Plymouth Music Zone use my personal information?
Plymouth Music Zone will use your personal information for purposes specified in this Policy. In particular, including:
- for "service administration purposes", which means that Plymouth Music Zone may contact you for reasons related to the service you have signed up for (e.g. to notify you that a particular service has been suspended for maintenance);
- to provide you with information or support;
- to personalise the way Plymouth Music Zone content is presented to you
- IP addresses are used to identify the location of users, the number of visits from different countries and also to block disruptive use; and to analyse and improve the services offered on Plymouth Music Zone websites e.g. to provide you with the most user-friendly navigation experience, and to administer our website.
- to enable us to review, develop and improve what Plymouth Music Zone offers.
- to occasionally carry out market research.
- to send you details of Plymouth Music Zone’s work, activities and services that we think will be of interest to you. It's up to you to decide whether or not you want to receive this information.
- to process donations.
- to communicate with you in general and to manage relationships with our supporters and stakeholders.
- to audit and administer our accounts.
- to satisfy legal and regulatory obligations, and for the prevention of fraud or misuse of services.
- for the establishment, defence and/ or enforcement of legal claims.
Where Plymouth Music Zone proposes using your personal information for any other uses we will ensure that we notify you first. You will also be given the opportunity to withhold or withdraw your consent for your use other than as listed above.
8) When and how will Plymouth Music Zone contact me?
Plymouth Music Zone may contact you for a number of different purposes using the contact details you have provided. The basis on which we do so differs depending on the purpose of the communication, and specifically whether it is a marketing communication or not.
We may use your contact details to provide you with information about our work and campaigns which we consider may be of interest to you. Where we do so by email we will obtain your consent to do so (which can be withdrawn) – for example, if you sign up to receive newsletters from our website. Where we do so by post, we are doing so on the basis of our legitimate interests, unless you opt-out.
Generally, we send the following types of marketing communications:
- Updates about our work or the work of partner organisations and projects that we support.
- Campaigns and fundraising appeals.
- Information about events. Note that if you sign up to an event we will then send you administrative communications about the event. On occasion we may also send you a reminder about the same event in future years in case you want to participate in it again.
- Surveys about Plymouth Music Zone’s services (participation is always voluntary).
You control how we use your personal information for these purposes, and can update your preferences at any time – please contact us at firstname.lastname@example.org if you would like to do so.
If you opt out of these communications we may retain some appropriate information to enable us to comply with the request not to be contacted in the future.
Administrative and other communications
We will communicate with you using the contact details you have provided for essential administrative and other non-marketing purposes, such as to respond to queries, administer a donation or provide you with services or information you have requested, or contact you about an event you are attending, or for research purposes.
Note that we may still need to communicate with you for these purposes even here you have opted-out of receiving marketing communications from us.
9) Will Plymouth Music Zone share my personal information with anyone else?
Generally, we will only use your personal information within Plymouth Music Zone and share with third parties to the extent required to achieve the purposes set out in
Those third parties may include:
- suppliers and sub-contractors for the performance of any contract we have with them – for example for IT services such as website hosting
- insurers and professional service providers such as accountants and lawyers
- financial companies that collect or process donations on our behalf, and external fundraising platforms
- regulatory authorities, such as HMRC.
We also reserve the right to disclose your information to third parties for their own
purposes in some cases. For example:
- If we sell or buy all or part of a business, in which case we may disclose it to
the potential seller or buyer.
- If we are under a legal or regulatory duty to do so.
- To protect the rights, property and/ or safety of the charity, its personnel, supporters, users or others (including you).
10) Protecting your personal information
We take appropriate and proportionate measures to keep your personal information secure and to prevent the loss, destruction or misuse of it. For example, information is stored on a secure server and can only be accessed by authorised personnel. Please note that the transmission of information via the internet is never completely secure, and although we do our best to protect it, we cannot guarantee the security of personal information transmitted over the internet.
Generally, the personal information we collect is stored at a destination within the UK or European Union. We use agencies and/ or suppliers to process personal information on our behalf and so personal information may therefore be transferred, stored, or accessed outside the UK or EU. In these cases we take all steps reasonably necessary to ensure that appropriate safeguards are in place (for example, by entering into an agreement approved by the European Commission for this purpose).
11) Children aged 16 or under
We do not directly collect information from under-16s. However, due to the nature of our work many beneficiaries are children. Where that information is collected and
shared with us, we will always have in place appropriate safeguards and any necessary consent. Where possible and appropriate (for example where using personal information for case studies), we will also seek consent from a parent or guardian for those under 16.
12) How long will Plymouth Music Zone keep my personal information?
We will hold your personal information only for as long as is necessary for the purpose(s) for which it is being held, and to satisfy any legal, accounting or reporting
requirements. This length of time may vary depending on those purposes, and if you would like further information please contact us (see details below).
13) Our legal basis for collecting and using your personal information
The law requires us to have one or more of the 6 lawful grounds to collect and use your personal information. The following are relevant to the purposes set out above:
1. Where you have given your consent (for example, to receive marketing emails and text messages). This consent can be withdrawn.
2. Where there is a contract and the use is necessary for the performance of the contract or to take steps at your request prior to entering into it (though the majority of our relationships are voluntary).
3. Where there is a legal obligation. For example, to share your personal information with HMRC to process Gift Aid.
4. Where it is in your/somebody else’s vital interests (for example in the case of a medical emergency suffered at an event).
5. Where Plymouth Music Zone or others have a “legitimate interest” in the collection and use. The law allows personal information to be collected and used if it is necessary for a legitimate interest – ours are set out here in general terms.
Sometimes it is not practical to ask for consent and we will rely on this legal basis. Where these situations relate to marketing and fundraising, note that you can change your preferences by contacting us (see details below).
We consider and balance any potential impact on you (both positive and negative) and your rights when relying on this ground.
What are Plymouth Music Zone’s legitimate interests?
Where we rely on legitimate interests, depending on the activity those will be Plymouth Music Zone’s interests.
These legitimate interests, ultimately, are in the running of a commercial entity in pursuit of our charitable objectives, and include the following:
- Charity governance, including delivery of our purposes, statutory and financial reporting and other regulatory compliance.
- Administration and operational management, including responding to solicited enquires, providing information, research, donor due diligence, events management, the administration of our projects and employment and recruitment requirements.
- Fundraising, marketing and campaigning, including administering campaigns and donations, and sending direct marketing by post (and in some cases
making marketing calls).
- Providing our services, and this can include your interests, such as when you have requested information or services from us, or the interests of beneficiaries.
14) Can I find out what personal information Plymouth Music Zone holds about me?
You can contact us asking what personal information Plymouth Music Zone holds about you and to request a copy. Once we are satisfied with your identity and that the right applies we will have 30 days to comply.
15) Your privacy rights
In addition to the right of access, you have a number of rights in relation to our use of your personal information. These include the right:
- to withdraw consent – where we are relying on your consent to use your personal information, you can withdraw that consent at any time.
- to object to processing (use) – you have the right to object where we are (i) relying on the legal basis of our legitimate interests (ii) using your personal information to send direct marketing or (iii) using it for statistical purposes.
- to erasure – in some cases, you can ask us to delete your personal information from our records (or anonymise it). We may retain some (limited) information
in order to ensure you are not contacted by us in the future.
- to restrict processing – instead of deletion, you may ask us to restrict our use of your personal information if there is disagreement about its accuracy orlegitimate usage.
- to rectification – if you believe our records concerning you are inaccurate, you can ask us to update them. You can ask us to check the personal
information we hold about you if you are unsure.
- to ‘data portability’ – this means that, where we are processing your personal information using automated means on the basis of consent, or to perform a contract, you can ask us to transfer it to you or another service provider in a usable format.
To exercise any of these rights, please contact us (details below) with an explanation of the rights you wish to exercise. Note that we may ask for proof of ID or further information.
These rights only apply in limited circumstances. If you would like more information, you can contact us (details below) or consult guidance from the Information
Commissioner (the UK regulator) here - https://ico.org.uk/for-organisations/guide-tothe-
Contact us (including complaints)
Data Protection Officer, Plymouth Music Zone
By post: Plymouth Music Zone, Raglan Road, Devonport, Plymouth, PL1 4NQ
By email: email@example.com
By phone: 01752 213690
You are entitled to make a complaint at any time to the Information Commissioner’s Office, the UK regulator for data privacy – www.ico.org.uk/global/contact-us. We are always grateful for the opportunity to resolve your concerns before you feel the need to speak to the ICO.