General Data Protection Regulation

The HRA complies with the requirements of the Data Protection Act 2018 (sometimes referred to as GDPR)

Privacy Notice

The categories of personal information we collect, process and hold.

 (a) Members – including name, address, email address and subscription. We do not hold records of telephone numbers. 

 (b) Businesses – including business name and email address and a record of payments made for advertisements in the magazine., 

Why we collect and use this information.

We use this information to enable us to carry out the specific functions for which we are responsible as a residents’ association.

The basis on which we use this information.

We collect and use this information as follows:

Membership: Where the data subject has given consent to the processing of his/her personal data -  for identifying membership, collecting and recording subscription payments and communicating matters of interest to HRA members by email. 

Businesses:  To keep a record of invoices issued and payments made for advertisements in the quarterly magazine. 

Storing this information.

Information will be stored on computer.  

Membership details will be erased immediately if a member notifies us in writing that they no longer wish to be on the database. 

Your rights - members

You may withdraw your consent for us to hold some or all of your personal data at any time, but this may impact on your membership.  If it does, we will inform you of the implications there may be if this information is erased so that you can make an informed decision.

If you wish to raise a complaint about how we have handled your personal data, you can contact our Secretary Stephen Collitt who will investigate the matter and respond to you as expeditiously as possible.

If you are not satisfied with our response or believe we are processing your personal data in a way that is not in accordance with the law, you can complain to the Information Commissioner’s Office.

If your personal data held by the HRA is based on consent only, you have the right to withdraw that consent at any time, and this will not affect the lawfulness of processing based on consent before its withdrawal.