Privacy Policy

We want to make sure all the personal information we have collected about you is safe and secure, whether we collect it through our website at www.millerbeck.org.uk or from other sources. This policy sets out our commitments to you in compliance with — and beyond — the General Data Protection Regulation (GDPR), and explains how we collect, store and use your personal information.

We have not appointed a Data Protection Officer as we are not required to do so, but our Owner has overall responsibility for data protection compliance in our voluntary organisation. If you have any questions about this policy or what we do with your personal information, please contact us via the Contact section of our website.

1

Privacy Notices

Collecting specific, relevant personal information is a necessary part of us being able to provide you with any services you may request from us (e.g. Father Christmas Comes to Millerbeck bookings) or just managing our relationship with you.

When we hold or use your personal information as a data controller, we will provide you with a privacy notice setting out in detail what information we hold about you, how it may be used and the reasons for those uses, together with details of your rights.

Where we collect personal information from you directly, we will provide this notice at the time of collection, via a link to our website. We will only provide this notice once, generally at the start of our relationship with you — although if the notice is updated substantially we may send you details of the updated version. You are encouraged to check back regularly for updates.

Note: It is possible for you to be covered by more than one privacy notice. For example, a volunteer member who is recorded on CCTV would be covered by both the Member notice and the CCTV notice.
2

How Do We Use Your Personal Information?

We will use your personal information as described in the privacy notice provided to you — for example, we may use it to send you information we think you might find useful, provided you have indicated that you are happy to be contacted for these purposes.

3

Who Do We Share Your Personal Information With?

Your data is held by us securely. We do not disclose your personal information unless required to do so by law, and we do not share your personal information with any third-party suppliers.

4

How Long Do We Hold Onto Your Personal Information?

We store your personal information (email address, name, and postal address — if you have previously booked tickets) until you request we delete it or until you leave the membership.

5

What Are Your Rights?

Full details of your rights are set out in the relevant privacy notice provided to you. By law you are entitled to:

To exercise any of your rights, or if you have any questions, please contact us using the details on our Contact page.

If you are unhappy with the way we are using your personal information you can complain to the UK Information Commissioner’s Office. However, we are here to help and would encourage you to contact us to resolve your complaint first.

6

Linking With Third-Party Sites

Our site may, from time to time, contain links to other websites (e.g. the 7¼ Inch Gauge Society, local hotels, events). These websites have their own privacy policies and act as data controllers of any information you submit to them. We do not accept any responsibility for these policies — please check them before submitting any personal information.

Similarly, if you linked to this site from a third-party site, we are not responsible for the privacy policies or practices of that third party. We recommend you check the policy of that site and contact its owner if you have any concerns.

7

Security

We employ a variety of technical and organisational measures to keep your personal information safe and to prevent unauthorised access, use or disclosure of it.

No information transmission over the Internet is guaranteed 100% secure, nor is storage always 100% secure, but we take all appropriate steps to protect your personal information. We take information and system security very seriously.

8

Cookies

We do not collect cookies through www.millerbeck.org.uk.

⬧ Privacy Notice for Everyone External to Millerbeck Light Railway
9

What Data We May Collect

The legal basis for processing this data is to perform a task in the public interest that is set out in law and is statute-based.

10

Why We Need It

We store this information in order to contact you about upcoming events, if you have not unsubscribed from our mailing list.

11

What We Do With Your Data

We will not:

We will share your data if we are required to do so by law.

12

How Long We Keep Your Data

We will only retain your personal data for as long as:

13

Children’s Privacy Protection

Our services are not designed for, or intentionally targeted at, children 13 years of age or younger. We do not intentionally collect or maintain data about anyone under the age of 13.

14

Where Your Data is Processed and Stored

We store your data to ensure it is as safe as possible at all stages, both while it is processed and when it is stored.

We have set up processes to prevent unauthorised access or disclosure of your data — for example, we protect your data using varying levels of encryption.

15

Your Rights

You have the right to request:

If you have any of these requests, get in touch using the Contact page on our website.

⬧ CCTV Privacy Notice

We have installed CCTV systems in some of our premises used by members of the public, for the purposes of public and staff safety and crime prevention and detection. CCTV is also installed on the outside of some of our buildings to monitor building and engine security.

In all locations, signs are displayed notifying you that CCTV is in operation. Please contact the Owner if you have any questions.

Images captured by CCTV will not be kept for longer than necessary. However, on occasions there may be a need to keep images for longer — for example, where a crime is being investigated.

You have the right to see CCTV images of yourself and be provided with a copy of the images if they are still stored.

⬧ Privacy Notice for Volunteer Members of Millerbeck Light Railway
16

What Data We May Collect

The legal basis for processing this data is to perform a task in the public interest that is set out in law and is statute-based.

17

Contact Us or Make a Complaint

Please contact the Owner if you:

Our Contact Details

The Owner
Staveley-in-Cartmel
LA12 8NH

Information Commissioner’s Office

You can also make a complaint to the Information Commissioner, who is an independent regulator:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
18

Changes to This Policy

We may change this privacy policy. In that case, the last updated date at the bottom of this page will also change. Any changes will take effect as soon as the updated policy is posted.

Following Links

If you go to another website from this one, please read the privacy policy on that website to find out what it does with your information.

If you come to www.millerbeck.org.uk from another website, you should read the privacy policy of the website you came from to find out more.