LCMS Privacy Policy
Last Updated: 20 August 2024
Introduction
Welcome to the London Chamber Music Society's (LCMS) privacy policy. LCMS respects your privacy and is committed to protecting your personal data. This privacy policy will inform you how we look after your personal data when you visit our website, and will explain your privacy rights under current UK laws, including the General Data Protection Regulation (UK GDPR) and related legislation.
1. Important Information and Who We Are
-
Purpose of This Privacy Policy
This privacy policy aims to provide you with information on how LCMS collects and processes your personal data through your use of this website and any data you may provide when becoming a member of LCMS via paper application or through this website. It is important that you read this privacy policy to understand how and why we are using your data.
-
Controller
London Chamber Music Society is the data controller and is responsible for your personal data.
-
Contact Details
If you have any questions about this privacy policy or our privacy practices, please contact the LCMS Administrator in the following ways:
- Email address: development@londonchambermusic.org.uk
- Postal address: The Music Base, Kings Place, 90 York Way, London, N1 9AG
2. Changes to the Privacy Policy and Your Duty to Inform Us of Changes
We keep our privacy policy under regular review. It is important that the personal data we hold about you is accurate and current. Please inform us if your personal data changes during your relationship with us.
3. Third-Party Links
This website may include links to third-party websites. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. LCMS does not control these third-party websites and is not responsible for their privacy policies or practices. We recommend that you familiarize yourself with their privacy policies to understand how your data may be processed by these third parties.
4. The Data We Collect About You​
​
Personal data refers to any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
​
We may collect, use, store, and transfer the following types of personal data about you:
-
Identity Data: This includes your first name, last name, and title.
-
Contact Data: This includes your telephone number, email address, and postal address.
-
Transaction Data: This includes details about payments made by you, such as membership fees or ticket purchases.
-
Marketing and Communications Data: This includes your preferences in receiving marketing materials from us and your communication preferences.
We ensure that the data collected is limited to what is necessary in relation to the purposes for which it is processed.
​
5. How is Your Personal Data Collected?
We use different methods to collect data from and about you, including:
- Direct Interactions: You may provide us with your Identity and Contact Data by filling in membership forms, or by corresponding with us by post, phone, email, or otherwise. This includes personal data you provide when you:
- Apply for membership.
- Subscribe to our newsletter.
- Request marketing materials to be sent to you.
- Give us feedback or contact us.
- Automated Technologies or Interactions: As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions, and patterns. We collect this personal data by using cookies and other similar technologies. Please see our Cookie Policy in Section 13 for further details.
- Third Parties or Publicly Available Sources: We may receive personal data about you from various third parties and public sources, such as:
- Analytics providers (like Google Analytics) based outside the UK.
- Advertising networks based inside or outside the UK.
- Search information providers based inside or outside the UK.
6. How We Use Your Personal Data
​
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
- To Maintain the Membership Register: Managing your membership status, including renewal and termination.
- To Perform Our Obligations Under a Contract: For example, processing payments related to your membership or ticket purchases.
- For Administrative Purposes: Such as notifying you of the Annual General Meeting and other LCMS meetings.
- To Send You Information About LCMS Activities: This may include future concerts, events, the LCMS Magazine, or other relevant communications that we believe may be of interest to you.
- To Comply with Legal Obligations: This includes information needed to comply with regulatory requirements, such as tax reporting or law enforcement requests.
- Marketing and Communications: We will obtain your consent before sending third-party direct marketing communications to you via email, post, or text message. You have the right to withdraw consent at any time by contacting us.
7. Third-Party Marketing
​
We will only share your personal data with third parties for marketing purposes if you have provided your express opt-in consent. You can ask us to stop sending you marketing messages at any time by following the opt-out links on any marketing message sent to you or by contacting us directly.
8. Opting Out
​
You have the right to opt out of receiving marketing communications from us or third parties at any time. You can do this by:
- Following the opt-out instructions in the marketing communication.
- Contacting us directly using the details provided in Section 1.
Please note that opting out of marketing communications will not affect the processing of personal data you provided as part of your LCMS membership or any other transactions.
9. Data Security
​
We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, accessed, altered, or disclosed in an unauthorized way. These measures include:
- Access Control: Limiting access to your personal data to only those employees, agents, contractors, and other third parties who have a legitimate need to know. They are subject to a duty of confidentiality.
- Data Encryption: Ensuring that personal data is encrypted where necessary, particularly when transmitted over the internet.
- Regular Security Reviews: Conducting regular assessments of our information systems to ensure they remain secure.
We have procedures in place to deal with any suspected data breach. If a breach occurs, we will notify you and any applicable regulator when legally required to do so.
10. Data Retention
How Long Will You Use My Personal Data For?
We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for satisfying any legal, accounting, or reporting requirements. The specific retention periods are as follows:
- Membership Data: Retained for the duration of your membership and up to 7 years after termination to comply with legal obligations and for archival purposes.
- Marketing Data: Retained until you withdraw your consent or opt-out of marketing communications.
- Event Attendance Data: Retained for up to 3 years after the event for reporting and marketing purposes.
After these periods, we will securely destroy your personal data in accordance with applicable laws and regulations.
Your Right to Request Deletion
You have the right to request the deletion of your personal data at any time. To request data deletion, please contact us using the details provided in Section 1. Please note that we may need to retain certain information for legal or administrative purposes.
​
11. Your Legal Rights
Under certain circumstances, you have rights under data protection laws in relation to your personal data. These rights include:
- Request Access to Your Personal Data: You have the right to request a copy of the personal data we hold about you and to check that we are lawfully processing it.
- Request Correction of Your Personal Data: If any data we hold about you is incorrect or incomplete, you have the right to request correction.
- Request Erasure of Your Personal Data: You can request the deletion of your personal data where there is no longer a valid reason for us to keep it.
- Object to Processing of Your Personal Data: Where we are processing your personal data based on a legitimate interest (or those of a third party) and you feel it impacts your fundamental rights and freedoms, you have the right to object to this processing.
- Request Restriction of Processing Your Personal Data: You can ask us to suspend the processing of your personal data in specific situations.
- Request the Transfer of Your Personal Data: You have the right to request that your data be transferred to you or a third party in a structured, commonly used, machine-readable format.
​
- Right to Withdraw Consent: If we are relying on your consent to process your personal data, you have the right to withdraw this consent at any time. This will not affect the lawfulness of any processing carried out before you withdraw your consent.
If you wish to exercise any of these rights, please contact us using the contact details provided in Section 1.
​
12. Automated Decision-Making
​
We do not use your personal data for automated decision-making, including profiling, which has legal or similarly significant effects on you.
13. Cookies
​
Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site. By continuing to browse the site, you are agreeing to our use of cookies.
-
What are cookies?: Cookies are small data files that are placed on your computer or mobile device when you visit a website. Cookies are widely used by website owners in order to make their websites work, or to work more efficiently, as well as to provide reporting information.
-
Types of Cookies We Use:
- Essential Cookies: These are necessary for the operation of our website.
- Analytical/Performance Cookies: These allow us to recognize and count the number of visitors and see how visitors move around our website.
- Functionality Cookies: These are used to recognize you when you return to our website.
- Targeting Cookies: These cookies record your visit to our website, the pages you have visited, and the links you have followed.
- Managing Cookies: You can set your browser to refuse all or some cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.
14. Data Transfers
​
We do not transfer your personal data outside the European Economic Area (EEA). If in the future, any data transfers outside the EEA are necessary, we will ensure that your data is protected in a manner consistent with how your personal data will be protected by us under this privacy policy and applicable data protection laws.
15. How to Contact the Information Commissioner’s Office (ICO)
​
If you have any concerns about how your data is handled, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues.
- Website: [https://ico.org.uk/](https://ico.org.uk/)
- Phone: 0303 123 1113
- Postal Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom
However, we would appreciate the chance to deal with your concerns before you approach the ICO, so please contact us first.
16. Changes to This Privacy Policy
​
We may update this privacy policy from time to time in response to changing legal, technical, or business developments. We will notify you of any changes by posting the new policy on our website and, where appropriate, by email. Please check back frequently to see any updates or changes to our privacy policy.
17. Contact Us
​
If you have any questions or concerns about this privacy policy or our data processing practices, please contact us using the details provided in Section 1.
---
This policy is intended to comply with the latest UK GDPR requirements and reflect the necessary adjustments following 2024 legislation updates.