The following principles are complied with when processing personal data:
The lawful basis of processing of data will always be determined prior to any data being processed. The laws for processing personal data under the GDPR are as follows:
Pendle Leisure Trust processes personal data under one, or more, of the following Lawful Bases:
Required: To capture the activities and performances throughout Pendle Leisure Trust as it is important that PLT is able to publicise its work and attract audiences to future activities and events so, occasionally, photographic, audio or video recordings may be made during activities or performances, and these materials may be used in marketing materials that are designed to promote PLT.
Lawful basis: Article 6(1)(f) UK GDPR (legitimate interests), the legitimate interest being the promotion of the activities and performances within PLT.
Personal data processed: Still images, motion video and audio recordings including persons present at activities and events.
Retention: Not possible to specify, as may be used online or in printed materials.
The type of personal data being processed may include:
Personal data is obtained from one or more of the following:
Personal data is collected to provide legitimate business services which include:
Where indicated, however, some of the information is optional and you can choose not to complete.
Personal data may be used to:
Information collected is stored on the Pendle Leisure Trust's CRM Platform and EPOS Platform.
We review our retention periods for personal data on a regular basis. We are legally required to hold some types of information to fulfil our statutory obligations. We will not hold personal data on our systems for any longer than is necessary for the relevant activity, or as long as is set out in any relevant contract you hold with us.
Only Pendle Leisure Trust employees are granted access to customer information. This is ensured by the use of strict operational processes and procedures.
Staff are trained on security systems and relevant processes and procedures which are reviewed regularly for ongoing effectiveness and suitability for purpose. All employees are kept up-to-date on Pendle Leisure Trust's security and privacy practices. Employees are notified and/or reminded about the importance we place on privacy, and what they can do to ensure that customer information is protected.
Personal information provided via the Company’s portals is secured using Secure Socket Layer (SSL) server and is encrypted before being transmitted. Secure pages have a lock icon or key on the bottom of web browsers such as Microsoft Internet Explorer, information supplied by you on these webpages is securely stored and can only be accessed for the purposes for which it was provided.
All IT systems are kept in a secure environment with appropriate access control. We are audited on a regular basis by independent security companies, plus internal audits by our Local Authority Partner.
Non-sensitive details (your email address and other requested information) are transmitted normally over the Internet, and this can never be guaranteed to be 100% secure. As a result, while we strive to protect your personal information, we cannot guarantee the security of any information you transmit to us, and you do so at your own risk. Once we receive your information, we make our best effort to ensure its security on our systems. Where we have given (or where you have chosen) a password which enables you to access certain parts of our websites, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.
Third-Party Service Providers working on our behalf:
When we use third party service providers, we have a contract in place that requires them to keep your information secure and Assurances of GDPR Compliance.
Third-Party Product Providers we work in association with:
We work closely with various third-party product providers to bring you a range of quality and reliable services designed to meet your needs. In some cases, they will be acting as a data controller of your information and, therefore, we advise you to read their Privacy Policy. These third-party product providers will NOT share your information with anyone.
We may also further transfer data if we are under a duty to disclose or share your personal data in order to comply with any legal obligation or to law enforcement. However, we will take steps with the aim of ensuring that your privacy rights continue to be protected.
Different rules apply depending on the type of Lawful Processing being undertaken. Many of the following individuals’ rights apply :
The accuracy of personal data is imperative. We aim to keep it updated at all times. The personal data we hold on you is available upon request by contacting gdpr@pendleleisuretrust.co.uk. You can request that your data is updated and/or deleted at any time, unless Pendle Leisure Trust can justify that it is retained for legitimate business or legal purpose. When updating your personal data, you may be asked to verify your identity before your request can be actioned.
You can change your marketing preferences at any time by filling out our (SAR) form https://www.pendleleisuretrust.co.uk/gdpr/
, or emailing gdpr@pendleleisuretrust.co.uk or by clicking on the “Unsubscribe” link at the bottom of any of Pendle Leisure trust's Campaigns.
Pendle Leisure trust's websites may contain links to other websites run by other organisations. PLT Privacy Policy only applies to PLT’ websites and you are encouraged to read the Privacy Statements on the third party websites that you visit . PLT is not responsible for the Privacy Policies and practices of other websites even if they were accessed via a PLT website. Equally, if you link to a PLT website from a third-party site, PLT is not responsible for the Privacy Policies and practices of that third-party site.
We are concerned to protect the privacy of children aged 16 or under. If you are aged 16 or under‚ please get your parent/guardian’s permission beforehand whenever you provide us with personal information.
A cookie is a text file containing small amounts of information which a server downloads to your personal computer (PC) or mobile device when you visit a website. The server then sends a cookie back to the originating website each time you subsequently visit it, or if you visit another website which recognises that cookie.
Web pages have no memory. If you are surfing from page to page within a website, you will not be recognised as the same user across pages. Cookies enable your browser to be recognised by the website. So, cookies are mainly used to remember the choices you have made – choices such as the language you prefer and the currency you use. They will also make sure you are recognised when you return to a website.
No, there are different types of cookies and different ways of using them. Cookies can be categorised according to their function, their lifespan and according to who places them on a website.
Our website uses the following types of cookie:
Technical cookies: We try to give our visitors an advanced and user-friendly website that adapts automatically to their needs and wishes. To achieve this, we use technical cookies to show you our website, to make it function correctly. These technical cookies are absolutely necessary for our website to function properly.
Functional cookies: We also use functional cookies to remember your preferences and to help you to use our website efficiently and effectively, for example by remembering your preferred currency and language that you viewed earlier. These functional cookies are not strictly necessary for the functioning of our website, but they add functionality for you and enhance your experience.
Analytics cookies: We use these cookies to gain insight into how our visitors use the website, to find out what works and what doesn’t, to optimise and improve our website and to ensure we continue to be interesting and relevant. The data we gather includes which web pages you have viewed, which referring/exit pages you have entered and left from, which platform type you have used, date and time stamp information and details such as the number of clicks you make on a given page, your mouse movements and scrolling activity, the search words you use and the text you type while using our website.
The cookies we use have varying lifespans. The maximum lifespan we set on some of them is five years from your last visit to our website. You can erase all cookies from your browser any time you want to.
You can find our cookies in your browser settings.
Using your browser settings in, for example, Internet Explorer, Safari, Firefox or Chrome, you can set which cookies to accept and which to reject. Where you find these settings depends on which browser you use. Use the “Help” function in your browser to locate the settings you need.
If you choose not to accept certain cookies, you may not be able to use some functions on our website.
Any questions or Subject Access Requests (SARs) should be sent to: gdpr@pendleleisuretrust.co.uk
You have a right to lodge a complaint in the event that you believe that Pendle Leisure Trust has not upheld the rights, obligations and responsibilities set out in this Privacy Policy. Please send any complaints to: gdpr@pendleleisuretrust.co.uk
This Policy is reviewed on a regular basis. It was last updated Dec 2022.