LSRT”, “we”,”us”, and “our” means the London Scottish Regimental Trust and we are committed to respecting your privacy.
The London Scottish Regimental Trust is registered as a charity in England and Wales registered charity number 1032157, and our registered address is London Scottish House, 95 Horseferry Rd, London, SW1P 2DX.
About this privacy notice
For the purpose of data protection law, we are a data controller in respect of your personal data. The London Scottish Regimental Trust is responsible for ensuring that it uses your personal data in compliance with data protection law.
This Privacy Notice applies to you as a member of the Regimental Family, a customer of our charitable services or hospitality facilities, a prospective customer, an intermediary or a client of an intermediary. This Privacy Notice sets out the basis on which any personal data about you that you provide to us, that we create, or that we obtain about you from other sources, will be processed by us. Please take time to read and understand this Privacy Notice.
Personal data that we collect about you
We may collect information that you provide to us or one of our affiliated Trusts or entities. This includes information about you that you give us by filling in forms or communicating with us whether face-to-face, by phone, email, or otherwise. This information may include:
Name, address, email address and telephone number, financial information, nationality or third parties who, on your behalf, we have provided with information, goods, services, or charitable benefit.
Information we generate about you
This may include (by way of a non-exhaustive list):
A file with your contact history to be used to ensure that the services we have provided you with are satisfactory.
Through our cloud security services, traffic and security reports that include information on the internet usage of our organisation’s computer users )e.g. what websites were visited by each user, any documents downloaded, security incidents, and any prevention measures we take to safeguard the integrity of our people, the information we hold, and the way we communicate.
Information we obtain from other sources
We do not use ‘cookies’ on our websites.
We do not process anonymised data.
We may receive information from our associated trading company London Scottish Volunteer Enterprises Ltd, who manages London Scottish House on our behalf. This information may include your name, contact details, and the details of the service or product we provided to you, or that assists us in administering our relationship with you.
Use of your personal data
Your personal data may be stored and processed by LSRT in the following ways and for the following purposes:
Your data is used to provide our services to you. This can be in one of the following ways: to deliver services, merchandise, information, or charitable support that you have requested from us, or have expected us to provide to you in the past. In some cases these services are provided to you by a third party. Your data may also be used for marketing purposes, so that we will tell you about events, activities, or news that you may in interested in, as well as inviting you to events that we are organising or hosting.
We are entitled to use your personal data in these ways because:
We need to do so to fulfil our contractual obligations with you. These contractual obligations may be commercial, charitable, or because of your direct relationship with the London Scottish Regiment and its affiliated entities. They may be written, verbal, or implicit in the relationship you have with us;
We have obtained your consent;
We have legal and regulatory obligations that we have to discharge;
We may need your personal data to establish, exercise or defend our legal rights or for the purpose of legal proceedings;
The use of your personal data as described is necessary for our legitimate business or charitable interests (or the legitimate interests of one or more of our affiliates), such as;
allowing us to effectively manage and administer the operation of our charities and business;
maintaining compliance with internal policies and procedures;
monitoring the use of copyrighted materials;
enabling quick and easy access to information on London Scottish Regimental Trusts and their affiliates including London Scottish House and London Scottish Volunteer Enterprises.
Automated decision-making and profiling
We do not use fully automated decison-making in order to execute our charitable or business relationship with you;
We do, however, process your data on a partially automated basis through GDPR complaint third party proprietary software platforms (who have their own privacy policies), with the aim of evaluating certain characteristics of yours (profiling). We use profiling in the following situations:
To provide you with relevant information and advice regarding our activities and services we use internal data analysis. This enables us to target appropriate communications, notices and invitations to you. We may also use that analysis to notify you of new products, services or activities that we think might be suitable for you.
We take physical and electronic measures to ensure that the data is accessed only by the personnel of LSRT or our affiliates that need to do so for the purposes described in this notice.
We do not share your data with business or charity partners outside of LSRT or our affiliates:
We also share your data with the providers of our electronic data storage services, for the purpose of providing that service to us. These third parties will be subject to confidentiality requirements and they will only use your personal data as described in this Privacy Notice; and
To the extent required by law, for example, if we are under a duty to disclose your personal data in order to comply with any legal obligation, establish, exercise or defend our legal rights.
Transfer of personal data outside of the European Economic Area
The personal data we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (“EEA”). It may also be processed by staff operating outside of the EEA who works for us, or one of our affiliates or third party suppliers. In these cases your data will continue to be protected in a manner consistent with how your data is protected by us within the EEA.
Retention of Personal data
How long we hold your personal dat will vary. The retention period will be determined by various criteria including:
The purpose for which we are using it – we will need to keep the data for as long as is necessary for that purpose; and
legal obligation – laws or regulations may set a minimum period for which we have to keep your personal data.
You have a number of legal rights in relation to the personal data we hold about you. These rights include:
The right to obtain information regarding the processing of your personal data and access to the personal data we hold about you;
The right to withdraw your consent to our processing of your personal data at many time. Please note, however, that we may be entitled to process your personal data if we have another legitimate reason (other than consent) for doing so.
In some circumstances, the right to receive some personal data in a structured, commonly used, and machine readable format and/or request that we transmit that data to a third party where this is technically feasible. Please note this right only applies to personal data you have provided to us.
The right to request that we rectify your personal data if it is inaccurate or incomplete.
The right to request that we erase your personal data in certain circumstances. Please note that there may be circumstances where you ask us to erase your personal data but we are legally entitled to retain it;
The right to object to, and the right to request that we restrict, our processing of your personal data in certain circumstances. Again, there may be circumstances where you object to, or ask us to restrict, our processing of your personal data but we are legally entitled to continue processing your personal data and/or to refuse that request; and
the right to lodge a complaint with the data protection regulator (details of which are provided below) if you think that any of your rights have been infringed by us.
You can exercise your rights by contacting us using the details set out in the “Contacting Us” section below.
You can find out more about your rights by contacting the Information Commissioner’s Office, or by searching their website at https://ico.org.uk
If you would like further information on the collection, use, disclosure, transfer, or processing of your personal data or the exercise of any of your rights listed above, please address questions, comments and requests to firstname.lastname@example.org