This policy sets out how we use and protect any personal information that you give us when you use this website.
If you have any questions about this policy, or do not agree with it, please contact us at friends@Kemnalpark.org or on 0208 300 9790 before using this website.
We may change this policy from time to time by updating this page. You should check this page from time to time to ensure you are happy with any changes. This policy is effective from 01 October 2016. “We/our/us” refers to Kemnal Park Limited A20 Sidcup By-Pass Chislehurst BR7 6RR. Registered Number 7190287

What information do we collect?

In general, you can use this website without giving us any information. However, additional services may be available if we have certain information about you.
We may collect the following information:
• Your name and contact information, including email address, geographical address and company details
• Information regarding personal or professional interests, demographics, experiences with our products and  contact preferences in order to provide you with further correspondence about our products and services

What do we do with the information we collect?

We use this information to provide you with a better service, and, in particular, for the following reasons:
• To provide answers to your questions asked via the website
• For internal record keeping
• To improve the content of the website
• To obtain feedback from you
• To notify you about the updates to the website
• To provide you with copies of our publications which you subscribe to via our website
• To respond to your media queries about us
• To talk to you about the other services we offer where we have the appropriate permissions
We may contact you by email, phone, fax or mail, unless you have registered with the appropriate Preference Service.
To make it easier for you to read this information, below are a number of links that will take you directly to particular sections.
• About us
• When you ask us to deliver a service
• Other uses of your data
• Updating your personal information
• Who we share data with
• Use of Cookies
• Google Analytics
• Who we are
• Your right to complain
• Changes we have made to our privacy promise

1. About Us

• The protection of your privacy and personal information is important to us. We make sure that not only do we have appropriate security measures in place, but that any other organisation we work with to provide a service also meets the same standard as us.
• We will respect your privacy. You should receive emails only from us. We will make sure that the boxes you need to tick if you are happy to receive marketing are presented clearly and at an appropriate time.
• We will make it clear at the point when we request your information, what we are collecting it for and how we are going to use it.
• We will collect and use your personal information only if we have your permission or we have sensible business reasons for doing so, such as collecting enough information to deliver the service you have requested.
• We will minimise the amount of information we collect from you to what we need to deliver the services you have requested.
• We will be clear in our dealings with you as to what information about you we will collect and how we will use it.
• We will use personal information only for the purposes for which it was originally collected and we will make sure we delete it securely.
• Our websites are accessible via the internet. Please remember that if you post any comments or links on any of our sites that they can be read and accessed by anyone and everyone.
• If we, our service providers, or our commercial partners transfer any information out of the European Economic Area (EEA), it will only be done with the relevant legal instruments or permissions being in place.

What information do we collect about you and how do we use it?

We collect information on you:
• when you ask us to deliver a service
• when you contact us for information
• when you sign up for a newsletter
• when you use the website
• through cookies
• if you choose to reveal information in postings
• if you complete your details on research questionnaires

Why we collect data?

We have to tell you the reason for collecting your information – and this is called the legal basis for processing.
• Where you provide information in the course of a booking we process your data under Contract, i.e. your data is necessary to fulfil the service you are paying for.
• Any additional contact, i.e. telling you about relevant events that you may wish to participate in, is managed under legitimate interest.
• Sending you additional information such as our regular newsletter is managed under consent.
Under the terms of current data protection legislation, we will always make it as easy as possible for you to opt out of unwanted processing, providing it does not restrict our ability to provide you with the service you have requested.

Profiling

From time to time we may use some elements of the data you supply to target the messages we send you.  For example, we may use appropriate anniversary dates to send you details of specific events.
None of this information is collated by wholly automated means and the rights and freedoms of the data subject are safeguarded by suitable measures.

How long do we hold on to your data?

Because we collect data for a wide range of purposes, we do not have a singularly defined retention period. For each individual product and service we define a carefully assessed timeframe within which we retain your data. For example, we are obliged by legislation to keep details of any financial transactions for seven years.
After this, data is managed to ensure that it is either erased from our system, minimised and retained for legal reasons or pseudonymised and retained on a global suppression list to ensure that you do not receive unwanted messaging from us.

2. When you ask us to deliver a service

The minimum information we need from you at the first point of contact is your name, and address, landline telephone number and email address. We will ask you more questions in order to deliver the service you are requesting. Unless we say otherwise, you must answer all the booking questions.
We will process data collected for the purpose of fulfilling the service you have requested on the basis of contract. We will also, on the basis of legitimate interest, contact you at appropriate times to enable you to participate in events at Kemnal Park should you wish to do so. You always have a choice and can opt out of processing on this basis at any time by contacting our Database Manager Sharon Solomon by email sharon.solomon@kemnalpark.org or telephone 0208 300 9790

3. Other uses of your data

We do not sell or share your data at any time, with the exception of data which we have to provide to statutory bodies under our legal obligations.

Use of children’s data

We do not knowingly collect or store any personal information about children under the age of 16 except within the context of the provision of our services.

4. Updating your personal information

Under current data privacy legislation, you have the right to rectify, erase or restrict the processing of your data without undue delay. You may also request access to the data we hold on you.  Please note, that in the context of the services we provide, some data cannot be erased or rectified due to current legal obligations.
To do this or to update your personal information at any time please contact our Database Manager Sharon Solomon by email sharon.solomon@kemnalpark.org or telephone 0208 300 9790

5. Who we share data with

We do not and will not, sell or share your information at any time to anyone else for marketing purposes.
Generally speaking, we don’t share your information with anyone else because you are very precious to us. If we need to for any reason, we will let you know in advance, unless someone in a legal capacity tells us we can’t.
Any other organisations who access your information in the course of providing services on our behalf will be governed by strict contractual restrictions to make sure that they protect your information and keep to data-protection and privacy laws which apply. We may also independently audit these service providers to make sure that they meet our standards. We may use service providers to help us run these sites (or services available on the sites), some of whom may be based outside the EEA or countries deemed adequate by the EDPB.

6. Cookies

Cookies are little packets of data that sit on our website, in some cases to make it work, and in some cases to add additional services. For more information about cookies, how to look after them, even how to turn them off, please visit our page on cookies – http://kemnalpark.org/website-cookie-policy/

7. Google Analytics

We use Google Analytics on our sites for anonymous reporting of site usage. If you would like to opt-out of Google Analytics monitoring your behaviour on our sites please use this link https://tools.google.com/dlpage/gaoptout

8. Who we are

Kemnal Park is a company registered in England with the number 07190287. Our address is Kemnal Park Cemetery, Sidcup By Pass, Chislehurst, Kent, BR7 6RR. We are registered as a data controller with the Information Commissioner’s office – our registration number is ZA377749
Our data privacy support is provided by: Data Oversight Ltd, 20-22 Wenlock Road, London N1 7GU.
If you would like to contact Kemnal Park, please email friends@kemnalpark.org or contact us by telephone on 0208 300 9790.

9. Your right to complain

If you are not satisfied with the way your request was handled, you have the right to lodge a complaint with the supervisory authority – details of which are given below:
Information Commissioner’s Office
https://ico.org.uk/concerns/
Telephone: +44 303 123 1113

10. Changes we have made to our privacy promise

If we make changes to this document we will show you what they are here. If these changes are significant, we may also choose to email relevant individuals with new details. If we are required by law, we will obtain your consent to make these changes.

Changes to this policy by date

May 2018 – New company privacy promise created.