Privacy

CFM10208.com maintains a database of alumni, friends, supporters, parents, and professionals in order to stay in touch with our community and keep you updated about news, events, career initiatives, and fundraising activities.

Some members of our database choose to join our online community by registering on this website and creating an online profile. In both instances, we collect and store personal information (“data”) about you. We are committed to protecting and respecting your privacy, and this Policy explains what information we collect, where we collect it from, and how we use it.

We may update this Policy from time to time. If significant changes are made, we will notify you through the website or contact you directly where appropriate. Please review this page periodically to ensure you remain comfortable with any updates.

If you have any questions about this Policy or your personal information, please contact [Data Protection Officer / Contact Information].

For the purposes of current and future UK data protection legislation, the Data Controller is XXXXXXXX.

What type of personal information we collect

The information we collect depends on how you interact with us, but may include:

First name, last name, email address, postal address, photographs, gender, date of birth, family relationships, years associated with the organisation, education and work details, participation in events, surveys and activities, donations, geo-location data, website activity, payment records, communication preferences, content you submit to the website, and direct messages sent through the community platform.

Where we collect information from

We collect personal information when you:

Visit this website, create or update an online profile, post content, participate in events, attend meetings, contact us, open emails, send messages through the website, or when information is transferred from our primary organisational database into our alumni or community database.

How we use your information

We use your information for purposes including:

Providing requested information and updates, sending communications and invitations, delivering contractual obligations, gathering feedback, maintaining accurate records, improving our services and website experience, administering programmes and events, and helping match users to existing records in our database.

Our legal basis for processing your information

The use of your information is lawful because one or more of the following applies:

You have provided consent, processing is necessary to fulfil a contract, or processing is necessary for our legitimate interests while respecting your privacy rights.

Updating your consent preferences

If you have an online profile, you can update your consent preferences and privacy settings by logging into your account and visiting “My Settings.”

If we rely on consent as the legal basis for processing your data, we require an explicit opt-in. If we rely on legitimate interests, you may opt out at any time.

If you unsubscribe from one of our emails, you will automatically be opted out of future communications of that type.

How we keep your information safe

We understand the importance of protecting your personal information and take appropriate measures to secure it.

Data is stored on secure cloud infrastructure managed by our website provider, ToucanTech, with industry-standard firewalls, encryption, antivirus protection, backups, and strict access controls in place.

Only authorised employees and contractors have access to your information, and all personnel with access are appropriately trained in data management practices.

If you maintain an online profile, you are responsible for keeping your login credentials confidential.

While we strive to protect your information, no transmission over the internet can be guaranteed to be completely secure.

Who has access to your information?

Your information may be shared with trusted third-party providers who assist with services such as mailing, hosting, analytics, event administration, and website operations. We ensure such providers maintain appropriate data protection standards.

Information may also be shared with event partners where applicable, or in connection with organisational restructuring or mergers where necessary.

Otherwise, we will not share your information without your consent.

Keeping your information up to date

Please notify us if your contact details change. Online members can update their information through the website or by contacting us directly.

Use of aggregated data

Where information is anonymised and aggregated so that individuals cannot be identified, our website provider may use this data for research, benchmarking, analytics, and website improvement purposes.

How long we keep your information for

We retain personal information only as long as necessary for the relevant activity or legal requirement.

Where consent is relied upon for direct marketing purposes, consent will generally be treated as valid for a reasonable period, typically around two years unless renewed.

If you request that we stop contacting you or remove your information, we will retain only the minimum information necessary to honour that request and comply with legal obligations.

Your rights

You have the right to request access to your personal information and to request correction, deletion, restriction, portability, or objection to certain processing activities.

These rights are subject to certain legal limitations and exemptions.

If you believe we have not complied with applicable data protection laws, please contact XXXXXXXX immediately.

If you remain dissatisfied, you may file a complaint with the Information Commissioner’s Office (ICO): https://ico.org.uk

This Policy was last updated in [MONTH AND YEAR].