Privacy Policy

Who We Are

Cornish Hall End Village Hall is a registered charity (Charity No. 301291) operating as a community venue in Essex. We are committed to protecting your privacy and handling your personal data in accordance with UK GDPR and the Data Protection Act 2018.

What Personal Data We Collect

We may collect and process the following types of personal data:

• Contact information (name, address, phone number, email address)
• Booking details and event requirements
• Payment information for hall hire and event bookings
• Emergency contact details when required
• Correspondence and communication records
• Website usage data (cookies and analytics)

How We Use Your Personal Data

We use your personal data for the following legitimate purposes:

• Processing and managing hall bookings
• Financial administration and accounts
• Communicating about events and activities
• Marketing our facilities and events (with your consent)
• Fundraising activities
• Meeting legal and regulatory requirements
• Insurance purposes

Legal Basis for Processing

We process your personal data under the following legal bases:

• Legitimate interests: Managing the hall and providing our services
• Contract: Fulfilling booking agreements and terms
• Legal obligation: Accounting, tax, and insurance requirements
• Consent: Marketing communications (where applicable)

Data Retention

We retain personal data for up to 7 years for accounts and financial purposes, in line with standard accounting practices. Some data may be retained for longer periods where required by our insurers or for legal compliance. When data is no longer required, it is securely deleted.

Sharing Your Data

We do not sell, rent, or trade your personal information to third parties. We may share limited data only when:

• Required by law or regulatory authorities
• Necessary for insurance claims or legal proceedings
• With our accountants or auditors for financial compliance
• With trusted service providers who assist with our operations (under strict data protection agreements)

Your Rights

Under UK GDPR, you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data (where legally permissible)
• Restriction: Request limitation of processing
• Portability: Request transfer of your data
• Objection: Object to processing based on legitimate interests
• Withdraw consent: For marketing communications

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes secure storage, access controls, and regular security reviews.

Cookies and Website Analytics

Our website may use cookies to improve user experience and gather anonymous usage statistics. These help us understand how visitors use our site to make improvements. You can control cookie settings through your browser preferences.

Contact Us

For any questions about this privacy policy or to exercise your data protection rights, please contact:

Complaints

If you believe your data protection rights have been breached, you have the right to lodge a complaint with the Information Commissioner's Office (ICO). Visit ico.org.uk or call 0303 123 1113.

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.