We are Kidderminster Harriers Independent Supporters Trust (Registered Office: 35, Kings Road, Kidderminster DY11 6YU. We are the data controller of your personal data.
This policy sets out how we collect, process and hold your personal data if you visit our online store or otherwise provide personal data to us.
This policy affects your legal rights and obligations so please read it carefully. If you have any questions, please contact us at firstname.lastname@example.org.
Personal data we collect
We collect, process, store and use personal data when you take out membership or purchase from our online store, including your name, address, telephone/mobile numbers and email address together with payment information. We may also collect personal data that you give to us about other people, if you register them to attend an event. You agree that you have notified any other person, whose personal data you have provided, of this privacy notice and, where necessary, obtained their consent so that we can lawfully process their personal data in accordance with this policy.
All personal data that you provide to us must be true, complete and accurate. If you provide us with inaccurate or false data, and we suspect or identify fraud, we will record this.
You do not need to provide us with any personal data to view our online store. However, we may still collect the information set out under “the Data we automatically collect” section of this policy.
When you contact us by email or post, we may keep a record of the correspondence and we may also record any telephone call we have with you.
Data we automatically collect
When you visit our online store, we, or third parties on our behalf, automatically collect and store information about your device and your activities. This information could include (a) your computer or other device’s unique ID number; (b) technical information about your device such as type of device, web browser or operating system; (c) your preferences and settings such as time zone and language; and (d) statistical data about your browsing actions and patterns. We collect this information using cookies in accordance with the “Cookies” section of this policy and we use the information we collect on an anonymous basis to improve our online store, our events and the services we provide, and for analytical and research purposes.
If you have taken out Trust membership, you have consented for us to contact you, using your personal information for the administration of your membership, for a period of up to 6 months after its expiry. These communications may include notifications of meetings and ballots, renewal invitations and reminders. You may opt out of receiving these communications at any time, by contacting us at or by writing to us at our registered office, as above.
If you opt in to receive newsletter communications from us you consent to the processing of your data to send you regular emails notifying you of our website postings. We retain a record of your consent.
You can choose to no longer receive newsletter communications by contacting us at or ‘unticking’ the newsletter option in the members’ profile page of our website. If you do unsubscribe to newsletter communications, it may take up to 5 business days for your new preferences to take effect.
We do not use your personal data for marketing purposes..
Lawful processing of your personal data
We will use your personal data in order to comply with our contractual obligation to supply to you with the tickets you have purchased, including to contact you with any information relating to the KHIST 2020 Lottery or an event, to comply with any request you may make and with which we are in agreement, and to deal with any questions, comments or complaints you have in relation to the purchase or event.
We may also use your personal data for our legitimate interests, including: dealing with any membership and/or customer services required, enforcing the terms of any other agreement between us, for regulatory and legal purposes (for example anti-money laundering), for audit purposes and to contact you about changes to this policy.
Who do we share your data with?
We may share your personal data with any service providers, sub-contractors and agents that we may appoint to perform functions on our behalf and in accordance with our instructions, including payment providers, email communication providers, IT service providers, accountants, auditors and lawyers.
Under certain circumstances we may have to disclose your personal data under applicable laws and/or regulations, for example, as part of anti-money laundering processes or protect a third party’s rights, property, or safety.
Where we hold and process your personal data
Some or all of your personal data may be stored or transferred outside of the European Union (the EU) for any reason, including for example, if our email server is located in a country outside the EU or if any of our service providers or their servers are based outside of the EU. We shall only transfer your personal data to organisations that have provided adequate safeguards in respect of your personal data.
A copy of the membership database is stored in a dropbox account, available only to current KHIST board members, for membership administration. There are no copies retained on personal computers.
A cookie is a small text file containing a unique identification number that is transferred (through your browser) from a website to the hard drive of your computer. The cookie identifies your browser but will not let a website know any personal data about you, such as your name and/or address. These files are then used by websites to identify when users revisit that website.
We also use Google Analytics to monitor how the online store is used. Google Analytics collects information anonymously and generates reports detailing information such as the number of visits to the online store, where visitors generally came from, how long they stayed on the online store, and which pages they visited. Google Analytics places several persistent cookies on your computer’s hard drive. These do not collect any personal data. If you do not agree to this you can disable persistent cookies in your browser. This will prevent Google Analytics from logging your visits.
We shall process your personal data in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures. All information you provide to us is stored on our secure servers. Payment transactions are processed by ‘Paypal’ and no bank account details are retained by us.
Where we have given, or you have chosen a password, you are responsible for keeping this password confidential.
However, you acknowledge that no system can be completely secure. Therefore, although we take these steps to secure your personal data, we do not promise that your personal data will always remain completely secure.
You have the right to obtain from us a copy of the personal data that we hold for you, and to require us to correct errors in the personal data if it is inaccurate or incomplete. You also have the right at any time to require that we delete your personal data. To exercise these rights, or any other rights you may have under applicable laws, please contact us at .
Please note, we reserve the right to charge an administrative fee if your request is manifestly unfounded or excessive.
If you have any complaints that we have not been able to satisfactorily resolve in relation to this policy, or otherwise in relation to our processing of your personal data, you should contact the UK supervisory authority: the Information Commissioner, see ..
If you are a member of the Trust, we will retain your personal data for a period of 18 months after the expiry of your membership.
Completed membership application forms will be safely destroyed once personal data has been recorded in the Trust’s secure membership database. No copies will be retained.
If you register with our online store, we will retain your personal data until you close your account.
If you receive newsletter communications from us, we will retain your personal data until you opt out of receiving such communications.
If any provision of this policy is held by a court of competent jurisdiction to be invalid or unenforceable, then such provision shall be construed, as nearly as possible, to reflect the intentions of the parties and all other provisions shall remain in full force and effect.
This policy shall be governed by and construed in accordance with the law of England and Wales, and you agree to submit to the exclusive jurisdiction of the English Courts.
We may change the terms of this policy from time to time. You are responsible for regularly reviewing this policy so that you are aware of any changes to it. If you continue to use our online store after the time we state the changes will take effect, you will have accepted the changes.