Leeds Bike Mill privacy policy includes what we collect, what we do with your information, and security of your personal information. Leeds Bike Mill is committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified when using this website or engaging our services, then you can be assured that it will only be used in accordance with this privacy statement.

Leeds Bike Mill may change this policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes. This policy is effective from 1st May 2018.

Responsibility for data protection in Leeds Bike Mill is held by a Board member on rotation. To contact them with any query about data protection please email info [at] leedsbikemill.org or see our other contact details at the end of this policy.

What we collect
We may collect, store and use the following kinds of personal information:

  1. Information that you provide to us for the purpose of subscribing to our newsletter (including your email address and name)
  2. Information that you provide when registering to complete a course with us (including your name, address, email address, and phone number)
  3. Information that you provide when completing our course consent form (including name, medical issues, contact details of next of kin)
  4. Information that you provide when making a donation (including postcode area, eg. LS9)
  5. Information relating to any purchase you make from us for our goods or services, or any other transactions that you enter into through our website (including name, contact information including email addresses or phone number, postcode area where you live)
  6. Information you give when subscribing to our website blog feed (email address)
  7. Information contained in or relating to any communication that you send to us or send through our website (including your computer IP address)
  8. Information that you provide when completing optional surveys or questionnaires (usually issued by a third party organisation)
  9. Any other personal information that you choose to send to us.

Before you disclose to us the personal information of another person, you must obtain that person’s consent to both the disclosure and the processing of that personal information in accordance with this policy.

Using personal information
We operate an ‘opt in’ approach. This means that we only use your personal information in order to carry out the specific request that you have approached us for and will not start to use it for any other purpose, unless you opt in. The lawful basis upon which we process your data will usually be on your consent, to fulfill a contractual obligation with you, or occasionally for our or your legitimate interests.

Personal information you provide us with will be used for the purposes specified in this policy or on the relevant pages of the website, including:

  1. To administer our website and business
  2. To send you vouchers purchased through our website
  3. To organise course places purchased by you through our website
  4. To send statements, invoices and payment reminders to you, and collect payments from you
  5. To send you email or phone notifications that you have specifically requested
  6. To send you our email newsletter, if you have requested it (you can unsubscribe at any time if you no longer require the newsletter)
  7. To receive notifications of new blog posts, if you have subscribed to it (you can unsubscribe at any time)
  8. To provide third parties with statistical information about our users (those third parties will not be able to identify any individual user from that information without your express consent)
  9. To deal with enquiries and complaints

If you submit personal information for publication on our website, we will publish and otherwise use that information in accordance with the licence you grant to us.

We will not, without your express consent, supply your personal information to any third party for the purpose of their or any other third party’s direct marketing.

Our website financial transactions are handled through one of two of our payment services provider, Paypal (donations), and Brown Paper Tickets (course bookings). You can review Paypal’s privacy policy here (https://www.paypal.com/uk/webapps/mpp/ua/privacy-prev) and Brown Paper Tickets’ privacy policy here (https://www.brownpapertickets.com/privacy-policy.html).

Our in store financial transactions are handled through iZettle, according to our Data Processing Agreement with them (see Section 3: https://www.izettle.com/gb/payment-terms-and-conditions)

We will share information with our payment services providers only to the extent necessary for the purposes of processing payments for transactions you enter into with us. We do not store your financial details.

Disclosing personal information
In addition to the disclosures reasonably necessary for the purposes identified elsewhere in this privacy policy, we will not disclose your information to regulatory and/or government bodies and/or law enforcement agencies unless required to do so in order to satisfy legal obligations which are binding on us.

Information that we collect may be transferred to the following countries which do not have data protection laws equivalent to those in force in the European Economic Area, when being processed by agencies or suppliers operating outside the EEA. In these situations we take reasonable steps to ensure that the recipient implements appropriate measures to protect your personal data.

Personal information that you choose publish on our website or submit for publication on our website may be available, via the internet, around the world. We cannot prevent the use or misuse of such information by others.

Retaining personal information
In general, unless still required in connection with the purpose(s) for which it was collected and/or is processed, we remove your personal information from our records six years after the date it was collected. However, if before that date (i) your personal information is no longer required in connection with such purpose(s), (ii) we are no longer lawfully entitled to process it or (iii) you validly exercise your right of erasure, we will remove it from our records at the relevant time.

Security of personal information
We endeavour to ensure that there are appropriate and proportionate technical and organisational measures to prevent the loss, destruction, misuse, alteration, unauthorised disclosure or of access to your personal information.

Your information is only accessible by appropriately trained staff, volunteers and contractors. All electronic financial transactions entered into through our website will be protected by encryption technology.

Links to other websites
Our website and newsletter may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.

Your rights
You may instruct us to provide you with any personal information we hold about you; provision of such information will be subject to the supply of appropriate evidence of your identity (for this purpose, we will usually accept a photocopy of your passport certified by a solicitor or bank plus an original copy of a utility bill showing your current address). Also subject to satisfactory proof of identity, you have the right to request we delete or rectify any personal information we hold about you, and you have the right to ask for processing of your personal data to be restricted if there is disagreement about its accuracy or legitimate usage.

You have the right to unsubscribe to our newsletter or blog feed at any time by clicking the relevant link within any newsletter or blog notification email, after which we will no longer have your personal details.

You are further entitled to make a complaint about us or the way we have processed your data to the Information Commissioner’s Office (“ICO”). For further information on how to exercise this right, please see the guidance at https://ico.org.uk/for-the-public/personal-information. The contact details of the ICO can be found here: https://ico.org.uk/global/contact-us/.

Cookies
While Leeds Bike Mill does not collect or use any information you provide as a result of using our website, the platform on which our site is based – WordPress – does use cookies. A company called Automattic provide these services to WordPress, and their Privacy Policy can be found here. You should receive a notification of this policy when you browse our site.

Our details

Leeds Bike Mill Ltd CIC registered in England and Wales under registration number 08996508, and our registered address is 37 Mabgate Green, Leeds, LS9 7DS.

You can contact us:

(a)    by post, using the postal address given above;
(b)    using our website contact form;
(c)    by telephone, on the contact number published on our website from time to time; or
(d)    by email, using the email address info [at] leedsbikemill.org