Privacy Policy
Who we are
The Royal Corps of Army Music Trust gather and process your personal information in accordance with this privacy notice and in compliance with the relevant data protection Regulations and Laws. This notice provides you with the necessary information regarding your rights and our obligations, and explains how, why and when we process your personal data.
The Royal Corps of Army Music Trust registered office is at HQ Royal Corps of Army Music, Kneller Hall, Twickenham TW2 7DU and we are a charity registered in England and Wales under charity number 1073432. Our designated Data Protection Manager for the organisation is Mr John Huggins, who can be contacted at the address above.
Information We Collect
The Royal Corps of Army Music Trust processes your personal information to meet our legal, statutory, and contractual obligations and to provide you with our products and services. We will never collect any unnecessary personal data from you and do not process your information in any way, other than as specified in this notice.
The personal data that we collect from you is
- Name, including Post Nominals
- Service Number
- Rank
- Date of Birth
- Home Address
- Personal Email
- Business Email
- Home Telephone Number
- Mobile Telephone Number
We collect information in the following ways
- Electronic forms
- Hard copy forms
- Website shop orders
- Telephone shop orders
- Verbally
How We Use Your Personal Data
The Royal Corps of Army Music Trust takes your privacy very seriously and will never disclose, share or sell your data without your consent; unless required to do so by law. We only retain your data for as long as is necessary and for the purposes specified in this notice. You are free to withdraw this consent at any time. We use your personal information to manage your membership account on our customer relationship management system and/or to provide the services you have requested from us. We never share your information with third parties, unless it is necessary to deliver the service you have requested from us. Primary examples of this include, but are not limited, to:
- Ensuring that Shop orders you have made are completed and can be sent out to your preferred address.
- Sharing limited personal information with your specific Regional Secretary so they can keep you informed of trust business and what is going on in your area.
- As part of our legal obligation for business accounting and tax purposes.
We never share your information with third parties for marketing purposes.
Legitimate Interests
We will occasionally process your personal information using the legitimate interests’ legal basis. Where this is the case, we have carried out a thorough Legitimate Interests’ Assessment (LIA) to ensure that we have weighed your interests and any risk posed to you against our own interests, ensuring that they are proportionate and appropriate.
Your Rights
You have the right to access any personal information that the Royal Corps of Army Music Trust processes about you and to request information about: –
- What personal data we hold about you
- The purposes of the processing
- The categories of personal data concerned
- The recipients to whom the personal data has/will be disclosed
- How long we intend to store your personal data for
- If we did not collect the data directly from you, information about the source
If you believe that we hold any incomplete or inaccurate data about you, you have the right to ask us to correct and/or complete the information and we will strive to correct it as quickly as possible; unless there is a valid reason for not doing so, at which point you will be notified.
You also have the right to request erasure of your personal data or to restrict processing (where applicable) in accordance with the data protection laws; as well as to object to any direct marketing from us; to exercise your data portability rights, and to be informed about any automated decision-making we may use.
If we receive a request from you to exercise any of the above rights, we may ask you to verify your identity before acting on the request; this is to ensure that your data is protected and kept secure.
Sharing and Disclosing Your Personal Information
We do not share or disclose any of your personal information without your consent, other than for the purposes specified in this notice or where there is a legal requirement. The Royal Corps of Army Music Trust uses third-parties to provide the services and business functions outlined below. All processors acting on our behalf only process your data in accordance with instructions from us and comply fully with this privacy notice, the data protection laws and any other appropriate confidentiality and security measures. Processors include:
- Royal Corps of Army Music Trustees and Secretary
- Publishers of The Fanfare Magazine
- Our accountant and our bank
Safeguarding Measures
The Royal Corps of Army Music Trust takes your privacy seriously and takes every reasonable measure and precaution to protect and secure your personal data. We work hard to protect you and your information from unauthorised access, alteration, disclosure or destruction and have several layers of security measures in place.
Consequences of Not Providing Your Data
You are not obligated to provide your personal information to the Royal Corps of Army Music Trust however, as this information is required for us to provide you with our services, we will not be able to offer all our services without it.
How Long We Keep Your Data
The Royal Corps of Army Music Trust only ever retains personal information for as long as is necessary and we have strict review and retention policies in place to meet these obligations. In most cases, we will keep your personal data until you leave the Association, and then for 12 months afterwards, at which point we will erase your data. We are, however, required under UK tax law to keep your basic personal data (name, address, contact details) for a minimum of 6 years after which time it will be destroyed.
Lodging A Complaint
The Royal Corps of Army Music Trust only processes your personal information in compliance with this Privacy Notice and in accordance with the relevant data protection laws. If, however you wish to raise a complaint regarding the processing of your personal data or are unsatisfied with how we have handled your information, you have the right to lodge a complaint with the Supervisory Authority.
Should you have any questions about anything contained in the Privacy Form, please contact us as follows:
Mr John Huggins
HQ Royal Corps of Army Music
Kneller Hall
Twickenham
TW2 7DU
Email: info@rcamtrust.co.uk
Telephone: 020 8744 8631
Using the Website
Contact Forms
We use contact forms to enable us to contact the User. We collect Personal Data; Name, Phone number and Email address.
By filling in the contact form with their Data, the User authorises this Application to use these details to reply to requests for information, quotes or any other kind of request as indicated by the form’s header.
Akismet
We collect information about visitors who comment on Sites that use our Akismet anti-spam service. The information we collect depends on how the User sets up Akismet for the Site, but typically includes the commenter’s IP address, user agent, referrer, and Site URL (along with other information directly provided by the commenter such as their name, username, email address, and the comment itself).
iThemes Security
Security Logs
The IP address of visitors, user ID of logged in users, and username of login attempts are conditionally logged to check for malicious activity and to protect the site from specific kinds of attacks. Examples of conditions when logging occurs include login attempts, log out requests, requests for suspicious URLs, changes to site content, and password updates. This information is retained for 14 days.
Who we share your data with
This site is scanned for potential malware and vulnerabilities by Sucuri’s SiteCheck. We do not send personal information to Sucuri; however, Sucuri could find personal information posted publicly (such as in comments) during their scan. For more details, please see Sucuri’s privacy policy.
In order to ensure file integrity, iThemes Security pulls data from wordpress.org, ithemes.com, and amazonaws.com. No personal data is sent to these sites. Requests to wordpress.org include the WordPress version, the site’s locale, a list of installed plugins, and a list of each plugin’s version. Requests to ithemes.com and amazonaws.com include the installed iThemes products and their versions. For wordpress.org privacy policy details, please see the WordPress Privacy Policy. For ithemes.com privacy policy details, please see the iThemes Privacy Policy. Requests to amazonaws.com are to content added and managed by iThemes which is covered by the Amazon Web Services Data Privacy policy.
When running Security Check, ithemes.com will be contacted as part of a process to determine if the site supports TLS/SSL requests. No personal data is sent to ithemes.com as part of this process. Requests to ithemes.com include the site’s URL. For ithemes.com privacy policy details, please see the iThemes Privacy Policy.
How long we retain your data
Security logs are retained for 14 days.
Where we send your data
This site is part of a network of sites that protect against distributed brute force attacks. To enable this protection, the IP address of visitors attempting to log into the site is shared with a service provided by ithemes.com. For privacy policy details, please see the iThemes Privacy Policy.
BackupBuddy
Backups
Per the functionality of this plugin, backups of your website files and/or database are created and stored locally on your server and/or remotely on 3rd party servers based on the settings of this plugin. Archives can include, but are not limited to, file and database assets, including hashed passwords, 3rd party data, uploads and user information. These backups are stored to provide critical functionality of this plugin.
Cookies
Cookies are used to handle importing and restoring backups.
Plugin Settings
Some plugin settings ask for an email address or login credentials to 3rd party services. This is stored to provide functional features to the plugin.
Recent Activity
This plugin tracks dates, times and actions of successful and unsuccessful backups and remote data transfers. This is stored to help make the plugin better and assist with troubleshooting problems.
Logging
This plugin logs some personal information such as email addresses, usernames, database and server information. This is stored to help make the plugin better and assist with troubleshooting problems.
How long we retain your data
Backups
Backup retention is completely up to the website owner. This can vary from less than one minute to indefinitely.
Cookies
Cookies used during the restore/import process expire after 24 hours.
Plugin Settings
Settings are retained indefinitely until they are changed or removed manually.
Where we send your data
Backups
Backups are sent to remote destinations automatically, and can be configured to be sent to third-party servers.
How we protect your data
Backups
Backup zip files are stored with hashed file names to prevent filename guessing and directory browsing is disabled.
What third parties we receive data from
Backup Destinations
Backups can be sent to third-party destination servers, including but not limited to:
- Dropbox | Privacy Policy
- Google Drive | Privacy Policy
Links to third party privacy policies have been included.
Cookies
If you leave a comment on our site you may opt in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Analytics
This website uses Google Analytics, a web analytics tool that helps website owners understand how visitors engage with their website. Google Analytics customers can view a variety of reports about how visitors interact with their website so that they can improve it.
Like many services, Google Analytics uses first-party cookies to track visitor interactions as in our case, where they are used to collect information about how visitors use our site. We then use the information to compile reports and to help us improve our site.
Cookies contain information that is transferred to your computer’s hard drive. These cookies are used to store information, such as the time that the current visit occurred, whether the visitor has been to the site before and what site referred the visitor to the web page. The cookies do not have access to or use any personally identifiable information.
Google Analytics collects information anonymously. It reports website trends without identifying individual visitors. You can opt out of Google Analytics without affecting how you visit our site – for more information on opting out of being tracked by Google Analytics across all websites you use, visit this Google page.
Who we share your data with
We will not share any more of your data with any third party.