Data Protection

Wolvercote Mill abides by the UK DPA (the UK’s implementation of the GDPR). 

• Only data that is required for the proper functioning of Wolvercote Mill will be stored. This includes names and e-mail addresses for consenting individuals for the purposes of messaging regarding events and updates

• Data concerning contracts for employees and volunteers will be stored in a secure manner with appropriate access control measures. 

• All subscribers have the right and ability to request their details be removed from any mailing list

• Data will be stored securely, with access only to authorised users, in compliance with UK DPA requirements

• Only data processors, under terms agreed in writing with the DPO and the data controller, will be allowed to access and process data. 

• Only UK DPA compliant applications and data storage applications/software will be used. 

• Any breaches must be reported to the DPO (P Sheriff), as soon as possible.