Privacy Policy

At Cricklade Leisure Centre we take your privacy seriously and will ensure your personal information is kept secure.

We provide Leisure and Social activities.

How we use information about you

We need to process information about you or your child for the following reasons:

• Contractual purposes
• To provide the activity you have requested, communicate with you about this activity, changes to our terms and conditions and to process payments (if relevant).
• Legitimate interests
• To meet the legitimate aims of the Leisure Centre and ensure you are supported and safe whilst participating in activities.

This includes:

• Carrying out any relevant risk assessments including you completing medical forms. Some individuals may present with a medical condition that may be a risk, or cause you harm by taking part in certain activities. It is vital that you share any relevant medical information. We will ask for your agreement to undertake any appropriate assessments.
• Identifying any reasonable adjustments and adaptations to support inclusion. If you have a disability or any special needs, we will review the information you have provided to help us identify any actions we can take to support inclusion. We may need to ask you for more information to help us in this process.
• Responding to any comments, questions or complaints you may send us.
• Maintaining class attendance records and contact details for emergency purposes.
• Filming and taking photos for publicity and promotion purposes on social media and our website. All film and photos of children will only be published in line with our safeguarding policy.
• You have the right to object to any of the above uses of your information by contacting us.
• Legal reasons
• To comply with applicable laws and protect the Leisure Centre interests and legal rights. This includes, but is not limited to the use of your information relating to legal claims and compliance and regulatory activity.
• Marketing
• With your consent, we may send you information by email, SMS or via social media about Cricklade Leisure Centre news, activities, and classes that we think will be of interest to you. You can ask us to stop sending you this information at any point by contacting us via email to admin@Crickladeleisure.co.uk.

Why we share your information

We will not share your information with any other organisations except with your consent or in exceptional/emergency circumstances where we believe that the sharing of information about you is vital to protect you, your child or another person.

Individual rights

You have the right to see the personal information we hold about you. You can also request a copy of any other information we hold by writing to us.

If we do hold information about you, you can ask us to delete it or correct any inaccuracies. We will either make the requested amendments or provide an explanation as to why we are not making changes.

If you or your child leaves our lessons or one of our course, or you wish to cancel your membership we can amend or cancel your registration if you email us: admin@Crickladeleisure.co.uk. However you are responsible for cancelling your standing order with your bank as we have no jurisdiction over this. Once we have received notification, your information will be archived for 60 days. After this period, the information we have about you will be deleted, except where there is a legitimate and lawful reason to continue to hold your data. In the absence of a legitimate and lawful reason this will be deleted within 3 months unless you re-join the Leisure Centre within that period

Changes to the privacy notice

We keep our privacy notices under regular review. This privacy notice was updated on 23/01/2023.

Andy Bunn
Centre Manager
Cricklade Leisure Centre
Stones Lane
Cricklade
Wiltshire
SN6 6JW

01793 750011

GDPR Compliance Statement

Commitment

Cricklade Leisure Centre is committed to the principles inherent in the GDPR (General Data Protection Regulation) and particularly to the concepts of privacy by design, the right to be forgotten, consent and a risk-based approach. In addition, we aim to ensure:

• transparency with regard to the use of data
• that any processing is lawful, fair, transparent and necessary for a specific purpose
• that data is accurate, kept up to date and removed when no longer necessary
• that data is kept safely and securely.

Staffing

Our Data Protection Officer (DPO) the Leisure Centre Manager. He or She works to promote awareness of the GDPR throughout the organisation and to oversee the organisation’s commitment to best practice, and  will inform and advise the organisation and monitor its compliance.

Policy

Our data protection policy is available on our website and a copy has been made available to all employees and to contractors and suppliers associated with this organisation. It forms part of the induction training of all new staff and follow-up sessions will be put in place if the legislation changes or further guidance is available.

Right to be forgotten

Cricklade Leisure Centre recognises the right to erasure, also known as the right to be forgotten, laid down in the GDPR. Individuals should contact the Leisure Centre Manager with requests for the deletion or removal of personal data. These will be acted on provided there is no compelling reason for continued processing and that the exemptions set out in the GDPR do not apply. These exemptions include where the personal data is processed for the exercise or defence of legal claims and to comply with a legal obligation for the performance of a public interest task or exercise of official authority.

Subject access requests

Cricklade Leisure Centre recognises that individuals have the right to access their personal data and supplementary information and will comply with the one month timeframe for responses set down in the GDPR. As a general rule, a copy of the requested information will be provided free of charge although Cricklade Leisure Centre reserves the right to charge a “reasonable fee” when a request is manifestly unfounded or excessive, particularly if it is repetitive. If this proves necessary, the person concerned will be informed of their right to contest our decision with the supervisory authority (the Information Commissioner’s Office (ICO)).

As set out in the GDPR, any fee will be notified in advance and will be based on the administrative cost of providing the information.

Privacy

Cricklade Leisure Centre will implement data protection “by design and by default”, as required by the GDPR. Safeguards will be built into products and services from the earliest stage of development and privacy-friendly default settings will be the norm. The privacy notice, which is on our website and which is provided to anyone from whom we collect data, explains our lawful basis for processing the data and gives the data retention periods. It makes clear that individuals have a right to complain to the ICO. Where relevant, the DPO has conducted a privacy impact assessment (PIA) to ensure that privacy risks have been properly considered and addressed.

Children

The GDPR provides for special protection for children’s personal data and Cricklade Leisure Centre will comply with the requirement to obtain parental or guardian consent for any data processing activity involving anyone under the age of 16. Systems have been introduced to verify individuals’ ages.

Data loss

If a data breach occurs that is likely to result in a risk to the rights and freedoms of individuals, the people affected will be informed as soon as possible and the ICO will be notified within 72 hours.

GDPR contact

Any questions related to GDPR or to issues concerning data protection generally should initially be addressed the Leisure Centre Manager, on  01793 750011 or via email to admin@crickladeleisure.co.uk.

Cookie policy

About cookies

A cookie is a file containing an identifier (a string of letters and numbers) that is sent by a web server to a web browser and is stored by the browser. The identifier is then sent back to the server each time the browser requests a page from the server.

Cookies may be either “persistent” cookies or “session” cookies: a persistent cookie will be stored by a web browser and will remain valid until its set expiry date, unless deleted by the user before the expiry date; a session cookie, on the other hand, will expire at the end of the user session, when the web browser is closed.

Cookies do not typically contain any information that personally identifies a user, but personal information that we store about you may be linked to the information stored in and obtained from cookies.

Cookies that we use

We use cookies for the following purposes:

1. analysis – we use cookies to help us to analyse the use and performance of our website and services; and
2. cookie consent – we use cookies to store your preferences in relation to the use of cookies more generally.

Cookies used by our service providers

Our service providers use cookies and those cookies may be stored on your computer when you visit our website.

We use Google Analytics to analyse the use of our website. Google Analytics gathers information about website use by means of cookies. The information gathered relating to our website is used to create reports about the use of our website. Google’s privacy policy is available at: https://www.google.com/policies/privacy/.

Managing cookies

Most browsers allow you to refuse to accept cookies and to delete cookies. The methods for doing so vary from browser to browser, and from version to version. You can however obtain up-to-date information about blocking and deleting cookies via these links:

(a) https://support.google.com/chrome/answer/95647?hl=en (Chrome);
(b) https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences (Firefox);
(c) http://www.opera.com/help/tutorials/security/cookies/ (Opera);
(d) https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies (Internet Explorer);
(e) https://support.apple.com/kb/PH21411 (Safari); and
(f) https://privacy.microsoft.com/en-us/windows-10-microsoft-edge-and-privacy (Edge).

Blocking all cookies will have a negative impact upon the usability of many websites.

If you block cookies, you may not be able to use all the features on our website.