Elevate Community Productions CIC (ECP) is the data controller responsible for the personal data we collect from you. Our commitment is to treat your personal information with the utmost care, in full compliance with UK General Data Protection Regulation (UK GDPR).

Contact for Data Protection Issues:

• Email: info@elevatecommunityproductions.org
• Address: Cranford Community College, High Street Hounslow, TW5 9PD

We collect and use personal data for specific, explicit, and legitimate purposes. We limit the data we collect to only what is necessary for those purposes ("Data Minimisation").

A. Project Applications 

• Data Collected: We collect your Name, Contact Details, demographics, and Availability.
• Purpose: The data is used to process your application and to communicate with you about scheduling and your involvement in our projects.
• Lawful Basis: We rely on Legitimate Interests. This processing is necessary for the running of our community-focused projects which is a core activity of the CIC.

B. Mailing List Sign-Up

• Data Collected: We collect your Name and Email Address.
• Purpose: The data is used to send you updates, newsletters, project news, and opportunities related to ECP's work.
• Lawful Basis: We rely on Consent. You explicitly opt-in to receive these communications, and you can withdraw this consent at any time via the 'unsubscribe' link in our emails.

C. Website Usage Data

• Data Collected: We may collect your IP Address, Browser Type, and information on pages visited.
• Purpose: This data helps us analyse website traffic, troubleshoot technical issues, and improve the user experience on our site.
• Lawful Basis: We rely on Legitimate Interests for monitoring and maintaining the performance and security of our website.

Security and Sharing: We take appropriate steps to protect your personal data from unlawful processing, accidental loss, or damage, using suitable technical and organisational measures. This includes using password protection for files and keeping records in a lockable location when not in use. We will not transfer or disclose your personal contact or application data to any third parties without your authorisation, except where required by law (e.g., government authorities). We may use third-party service providers (like email platforms) to run our mailing list, but they will be required to process your data securely and legally.

Retention: We only keep your personal data for as long as is necessary for the purposes for which it was collected.

• Application Data: Retained for a maximum of [State a Specific Time Period, e.g., 12 months] after the project concludes, unless you become an ongoing volunteer.
• Mailing List Data: Retained until you withdraw consent (unsubscribe).

Under UK GDPR, you have the following rights concerning your personal data that we hold:

1. Right to be Informed: You have the right to be informed about how we collect and use your personal data. This Privacy Notice provides this information.
2. Right of Access: You have the right to request a copy of the personal data we hold about you (a Subject Access Request).
3. Right to Rectification: You have the right to have inaccurate or incomplete personal data corrected or updated without undue delay.
4. Right to Erasure: You have the right to ask us to delete your personal data in certain circumstances.
5. Right to Restrict Processing: You have the right to ask us to suppress or restrict the processing of your data in certain circumstances.
6. Right to Object: You have the right to object to us processing your personal data where we rely on "Legitimate Interests" as the lawful basis.
7. Right to Withdraw Consent: Where we rely on Consent (e.g., for the mailing list), you have the right to withdraw that consent at any time.

If you wish to exercise any of these rights, please contact our Data Protection Contact using the email provided in Section 1.

If you are unhappy with how we have used your data, you have the right to make a complaint at any time to the supervisory authority for data protection, which in the UK is the Information Commissioner's Office (ICO).

• ICO Website: https://ico.org.uk/make-a-complaint/