Privacy Policy
This privacy notice tells you what to expect when Heber Leisure website collects personal information.
Heber Leisure (“We”, “our” and “us”) are committed to protecting and respecting your privacy.
This policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.
For the purpose of the Data Protection Act 2018 (the “Act”) and the General Data Protection Regulations (GDPR), the data controller is Cheshire West and Chester Council, having its registered office at Council Offices, 4 Civic Way, Ellesmere Port, Cheshire CH65 0BE
Statement of intent
When you supply any personal information to Heber Leisure we have legal obligations under the Data Protection in the way we deal with that information. In particular, we must:
· Collect the information fairly
· Let you know how we will use it
· Keep the information secure
We are committed to protecting and respecting your privacy. Whenever you provide personal information we will treat your information in accordance with this privacy policy, and in accordance with the Data Protection Act 2018.
Information we may collect from you
We may collect and process the following data about you:
· Information that you provide by filling in forms on our site www.heberleisure.co.uk (our “Site”). This includes information provided at the time of registering to use our Site, subscribing to any service, posting material or requesting further services. We may also ask you for information when you report a problem with our Site.
· Our forms may also collect various sensitive data including but not limited to ethnicity and gender in order to provide anonymised reports to Cheshire West and Chester Council.
· Our facilities and services are available to everyone, that means we also collect data for those aged under 16 years. Certain services are restricted to juniors and require the parent or guardian’s consent before admission is allowed. In these instances, we may be required to collect information relating to the junior and the guardian. We do not market to anyone under the age of 16 years. It is the responsibility of the parent or guardian to provide us with the correct contact details of the parent or guardian in these cases.
· If you contact us, we may keep a record of that correspondence.
· We may also ask you to complete surveys that we use for research purposes, although you do not have to respond to them.
· Details of your visits to our Site including, but not limited to, traffic data, location data, weblogs and other communication data, whether this is required for our own billing purposes or otherwise and the resources that you access.
Where we store your personal data
The data that we collect from you may be transferred to and stored at, a destination outside the European Economic Area (“EEA”). It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers. Such staff maybe engaged in, among other things, the provision of support services. By submitting your personal data, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.
Where we have given you (or where you have chosen) a password which enables you to access certain parts of our Site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
The transmission of all information via all routes on the Internet is not completely secure. Though we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our Site, via the internet. Any transmission is therefore at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
Uses made of the information
We use information held about you in the following ways:
· To ensure that our service content is presented in the most effective manner for you.
· To provide you with information, products or services that you request from us or which we feel may interest you, where you have consented to be contacted for such purposes.
· To carry out our obligations arising from any contracts entered into between you and us.
· To allow you to participate in interactive features of our service, when you choose to do so.
· To notify you about changes to our service.
We may use anonymised data to improve our services or services for research purposes
We may also use your data, or permit selected third parties to use your data, to provide you with information about goods and services which may be of interest to you and we or they may contact you about these by post or telephone.
If you are an existing customer, we will only contact you by electronic means (e-mail or SMS) with information about goods and services similar to those which were the subject of a previous sale to you.
If you are a new customer, and where we permit selected third parties to use your data, we (or they) will contact you by electronic means only if you have consented to this.
If you do not want us to use your data in this way, or to pass your details on to third parties for marketing purposes, please tick the relevant box situated on the registration form on which we collect your data.
Disclosure of your information
We may disclose your personal information to third parties:
· In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets.
· If our business or substantially all of its assets is acquired by a third party, in which case personal data held by us about our customers will be one of the transferred assets.
· If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of use and other agreements; or to protect the rights, property, or safety of us, our customers, or others.
Your rights
You have the right to ask us not to process your personal data for marketing purposes. We will usually inform you (before collecting your data) if we intend to use your data for such purposes or if we intend to disclose your information to any third party for such purposes. You can exercise your right to prevent such processing by checking certain boxes on the forms we use to collect your data. You can also exercise the right at any time by contacting us at heberleisure@heber.org.uk.
Links to other websites
This privacy notice does not cover the links within this site linking to other websites. We encourage you to read the privacy statements on the other websites you visit.
Job applicants, current and former Heber Leisure employees
When individuals apply to work at Heber Leisure, we will only use the information they supply to us to process their application and to monitor recruitment statistics.
Where we want to disclose information to a third party, for example where we want to take up a reference or obtain a ‘disclosure’ from the Criminal Records Bureau we will not do so without informing them beforehand unless the disclosure is required by law.
Personal information about unsuccessful candidates will be held for 12 months after the recruitment exercise has been completed, it will then be destroyed or deleted. We may from time to time contact you about other suitable jobs within this period.
We retain de-personalised statistical information about applicants to help inform our recruitment activities, but no individuals are identifiable from that data.
Once a person has taken up employment with Heber Leisure, we will compile a file relating to their employment. The information contained in this will be kept secure and will only be used for purposes directly relevant to that person’s employment.
Once their employment with Heber Leisure has ended, we will retain the file in accordance with the requirements of our retention schedule and then delete it.
Access to personal information
Heber Leisure try to be as open as it can be in terms of giving people access to their personal information. Individuals can find out if we hold any personal information by making a ‘subject access request’ under the Data Protection Act 2018 and the General Data Protection Regulations (GDPR) from 25th May 2018.
The Act and Regulations give you the right to access information held about you. Your right of access can be exercised in accordance with the Act. Any access request must be made by contacting us directly as detailed in the ‘Contact us’ section below.
Should you wish to change any of the information held about you, you can do this by writing to us as detailed in the ‘Contact us’ section below. We may need to request proof of identification in these instances.
If you wish to have your information removed from our database, providing you are no longer using our facilities and services, you can request this in writing as detailed in the ‘Contact us’ section below.
If you are not happy with the way in which your data is managed, you should contact us immediately in writing as detailed in the ‘Contact us’ section below for resolution.
Changes to our privacy policy
We may revise this privacy policy at any time by updating this page. You should check this page from time to time to review the current privacy policy because it is binding on you.
Contact us
Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to heberleisure@heber.org.uk or by writing to Heber Leisure, Bishop Heber High School, Chester Road, Malpas, Cheshire SY14 8JD