Privacy Statement YES Group May 23rd 2018

YES Group is committed to protecting your privacy and maintaining the security of any personal information received from you. We adhere to the requirements of data protection legislation in the UK. The purpose of this statement is to explain to you what personal information we collect and how we may use it.

In accordance with the new GDPR legislation we are amending our privacy notice to clarify what data we collect, why we collect it and what we do with it.

When you place an order, we need to know your name, address, phone number, email address and payment details. This allows us to process and fulfil your order. You have the option to withhold personal information that is not required for the order process.

YES Group offer a great value service and by using our service, you agree that we will use your personal information to update you about service updates and new products/services.

We do not sell, rent your data or exchange your personal information with any third party for commercial reasons without your consent, beyond the essential requirement for credit/debit card validation during purchase.

At our events you have the opportunity meet our sponsors and table holders.  If you wish to stay connected with them then you can do so directly when you provide them your contact details.  This is between you and them if you wish to give any of them your contact details or more, we now ask them to be GDPR compliant as part of our booking terms and conditions.

We follow strict security procedures in the storage and disclosure of information which you have given us, to prevent unauthorised access in accordance with UK data protection legislation. We do not collect sensitive information about you except when you specifically knowingly provide it. In order to maintain the accuracy of our database, you can check, update or remove your personal details.

By accessing the “My Account/Subscription” section of the members area. We use a technology called “cookies” as part of a normal business procedure to allow you to login to the YES Group member area. A cookie is an element of data that our customer area sends to your web browser which is then stored on your system.

How Do You Use Cookies?

Our Site may place and access certain first-party Cookies on your computer or device. First-party Cookies are those placed directly by us and are used only by us. We use Cookies to facilitate and improve your experience of Our Site and to provide and improve our products and services. By using Our Site you may also receive certain third-party Cookies on your computer or device. Third-party Cookies are those placed by websites, services, and/or parties other than us. Third-party Cookies are used on Our Site for analytics. In addition Our Site uses analytics services provided by Google, Active Campaign, Inspectlet which also use Cookies. Website analytics refers to a set of tools used to collect and analyse usage statistics, enabling us to better understand how people use Our Site.

What data we store; your contact details, normally name and email. But sometimes your physical address and telephone number. The events you attend or express interest in and the ones you attended. With your auto renew membership the payment service providers not us keep your payment details (Stripe, PayPal and Go-Cardless).

Where we store data in databases such as Nimble, Mailchimp and Active Campaign. And well as Google applications. All these companies are GDPR compliant.

Also payment systems Paypal, Stripe and Go-Cardless.

In order to process credit/debit card transactions, the bank or card processing agency may require to verify your personal details If you have any questions about privacy please contact us.

Why we store

To let you know about our other events you may wish to attend and our charitable objectives to include Basket Brigade. We may also inform you of our supporters and sponsors activities. But we don’t rent our list.

How long do we keep data for? Ongoing until you opt out, as you can from all our promotional emails and we also remind you of that option each year.

At point of purchase (online or at the event) we are providing an up to date copy of this page where you are opting in to our communications as a customer.

What Are My Rights?

Under the GDPR, you have the following rights, which we will always work to uphold:

  1. The right to be informed about our collection and use of your personal data. This Privacy Policy should tell you everything you need to know, but you can always contact us me to find out more or to ask any questions using the details in Part 15.
  2. The right to access the personal data we hold about you. Part 13 will tell you how to do this.
  3. The right to have your personal data rectified if any of your personal data held by us is inaccurate or incomplete. Please contact us using the details in Part 15 to find out more.
  4. The right to be forgotten, i.e. the right to ask us to delete or otherwise dispose of any of your personal data that we have. Please contact using the details in Part 15 to find out more.
  5. The right to restrict (i.e. prevent) the processing of your personal data.
  6. The right to object to us using your personal data for a particular purpose or purposes.
  7. The right to data portability. This means that, if you have provided personal data to us directly, we are using it with your consent or for the performance of a contract, and that data is processed using automated means, you can ask us for a copy of that personal data to re-use with another service or business in many cases.
  8. Rights relating to automated decision-making and profiling. We do not use your personal data in this way.

For more information about our use of your personal data or exercising your rights as outlined above, please contact us using the details provided in Part 15.

Further information about your rights can also be obtained from the Information Commissioner’s Office or your local Citizens Advice Bureau.

If you have any cause for complaint about our use of your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office.

How Long Will You Keep My Personal Data?

We will not keep your personal data for any longer than is necessary in light of the reasons for which it was first collected. Your personal data will therefore be kept for the following periods

  • until you ask us to delete it;
  • you delete the account from your account area
  • or you opt out

However when an account is deleted, this information cannot be used to identify you. All personally identifying information is deleted immediately on your request.

Account – means an account required to access and/or use certain areas and features of our site;

Membership – signing up to become a member of the YES Group community site and events

Event – Live monthly events held last Wednesday of the month

Member – a person who has signed up to be part f the YES Group online/offline community

Customer – a person who has purchased from the YES Group. This could be the purchase of products, services or event tickets

Mailing list – people who have signed up to receive emails from the YES Group

Information About Us

Our site is owned and operated by YES Group London CIC, registered in England under company number 07610865.

Registered address: 30 Torcross Road, Ruislip, Middlesex, HA4 0TB GB

For Data Protection queries please contact: Karl Pearsall

Email address: info@yesgroup.org

Telephone number: 07503588933

Registered for The Data Protection Act, Reg No:A8316433