GDPR

GDPR Policy

1. Scope of the Policy

This policy applies to all personal data processed by Behind The Curtain CIC, whether collected through our website, events, forms, or other interactions.

2. Data We Collect

We may collect and process the following personal data:

Personal Information Provided by You

• Name

• Email address

• Phone number

• Address

• Other information you provide through our forms or communications.

Automatically Collected Information

• IP address

• Browser type and version

• Pages visited on our website

• Time spent on our site

• Referring website

3. Legal Basis for Processing Data

We process personal data based on the following legal grounds:

• Consent: Where you have given explicit consent for specific processing activities.

• Contractual Necessity: To fulfill our obligations under a contract with you or to take steps at your request before entering a contract.

• Legitimate Interests: To improve our services, ensure security, and communicate effectively, provided this does not override your rights.

• Legal Obligations: To comply with applicable laws and regulations.

4. How We Use Your Data

We use your personal data for the following purposes:

• To communicate with you and respond to inquiries.

• To provide our services and manage your participation in our activities.

• To improve our website and tailor content to user preferences.

• To comply with legal obligations.

5. Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. Once data is no longer needed, it will be securely deleted or anonymized.

6. Data Sharing

We do not sell or rent your personal data. We may share your data with:

• Service Providers: Third parties who provide services such as email communication platforms or data hosting, subject to strict confidentiality agreements.

• Legal Authorities: If required by law or to protect our rights.

7. Your Rights Under GDPR

As a data subject, you have the following rights under the GDPR:

• Right to Access: Request access to the personal data we hold about you.

• Right to Rectification: Request correction of inaccurate or incomplete data.

• Right to Erasure: Request deletion of your personal data, subject to legal obligations.

• Right to Restrict Processing: Request limitations on how we process your data.

• Right to Data Portability: Request your data in a structured, commonly used format.

• Right to Object: Object to processing based on legitimate interests or direct marketing.

• Right to Withdraw Consent: Withdraw your consent at any time where consent is the basis for processing.

• Right to Lodge a Complaint: File a complaint with a supervisory authority if you believe we have violated GDPR regulations.

To exercise any of these rights, please contact us at info@behindthecurtain.org.uk

8. Data Security

We take appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse. This includes:

• Encrypting sensitive data.

• Restricting access to personal data to authorized personnel only.

• Regularly reviewing and updating our security practices.

9. International Data Transfers

If your data is transferred outside the European Economic Area (EEA), we ensure it is protected by:

• Using contracts approved by the European Commission.

• Ensuring transfers are made to countries with adequate data protection laws.

10. Cookies and Tracking

For information on how we use cookies and similar technologies, please refer to our [Cookie Policy].

11. Policy Updates

We may update this GDPR Policy from time to time. Changes will be posted on this page with an updated effective date. Please review this policy periodically to stay informed about how we are protecting your data.

​

By interacting with us and using our services, you acknowledge that you have read and understood this GDPR Policy.