Privacy notice

Updated Privacy Notice (May 2018)
You may be aware of new laws relating to General Data Protection Regulation (GDPR) that are in effect from 25 May 2018.  The purpose of GDPR is to provide a set of standardised data protection laws across all EU member countries.   
This document sets out how Newhall Rangers Ltd comply with these laws.
Data Control
Thomas Johnson is the data controller for Newhall Rangers Ltd.
What personal data we process
• Personal data: basic contact information: name, address, email, contact number and GP contact details.
• If you complete a web-based enquiry form, we will also collect any information you provide to us as well as your internet protocol (IP) address.  This is automatically supplied by the website software used to offer the form.  All web services used by Newhall Rangers are verified by themselves as GDPR compliant.

The lawful basis for processing personal data
Newhall Rangers has a legitimate requirement in utilising the personal data provided as part of our safeguarding and well-being obligations. No information you provide is passed on without your consent.  We will never sell your information to others.
What we do with your personal information
We will only use your personal information to provide the services you have requested from us.
If you do not provide the personal information requested, then we may be unable to carry out our role within the company or to you and your child(ren).
How long we store personal information
We will only store your personal information for as long as it is required. Basic contact information held on a mobile phones is deleted within 1 months of the end of contract or sign on.

How your personal information is used
We use the information we collect to:
• Provide our services to you.
• Process payment for services/fees.
• Send you information  that might be of interest to you.  You have the right to opt-out at any time, and request that your personal contact information is deleted to prevent future proactive contact from ourselves.
Who we might share personal information with
In exceptional circumstances, we might need to share personal information with relevant authorities:
• When there is need-to-know information for a health provider, such as your GP.
• When disclosure is in the public interest, to prevent a miscarriage of justice or where there is a legal duty, for example a Court Order.
• When the information concerns risk of harm to you, or risk of harm to another adult or a child. We will discuss such a proposed disclosure with you unless we believe that to do so could increase the level of risk to you or to someone else.
What we will NOT do with your personal information
We will not share your personal information with third-parties for marketing purposes.
How we ensure the security of personal information
Personal information is minimised in phone and email communications. We will never use open or unsecure Wi-Fi networks to send any personal data.
Personal information is stored on a secure computers. These are password protected. Malware and antivirus protection is installed on all computing devices. Mobile devices are protected with a passcode/thumbprint scanner, mobile security and antivirus software.
Your right to access the personal information we hold about you
• You have a right to access the information we hold about you.
• We will usually share this with you within 30 days of receiving a request.
• There may be an admin fee for supplying the information to you.
• We may request further evidence from you to check your identity.
• A copy of your personal information will usually be sent to you in a permanent form (that is, a printed copy).
• You have a right to get your personal information corrected if it is inaccurate.
• You can complain to a regulator. If you think that we haven't complied with data protection laws, you have a right to lodge a complaint with the Information Commissioner’s Office.

 Newhall Rangers Ltd