Norfolk Amateur Radio Club (NARC) Privacy policy – May 2018

The purpose of this privacy statement is to advise you of the personal information that the Norfolk Amateur Radio Club (NARC) holds and how we use it.

Who are we?
NARC is a not-for-profit organisation set up to promote the hobby of Amateur Radio and is run by an elected committee of members, for its ordinary members, on a voluntary basis.

The legal basis for processing your data 
When you join or rejoin the NARC, or register to use the NARC website, we will ask you for some personal information which we will use to provide you with membership or online services.  As you will be about to or have already entered into a membership contract with the NARC, your consent to do this is given when you complete the application form in print or electronically on the NARC web site.

What personal data do we hold?
NARC will hold your name, callsign (if applicable), user names, encrypted passwords  (which are MD5 hashed and salted) and e-mail address. In addition to this we may record membership details such as date of joining, renewal date, membership type, member number, home address, billing address.

Why we need it
Your information will be used to process orders placed in the online shop for electronic parts, membership subscriptions, merchandise and the electronic delivery of Newsletters. These purchase details are retained in your membership account information. We do not hold any personal financial details such as credit card or PayPal account information.

Your data will not be given to third parties and is only available to the Club's Committee to operate and run the club as outlined above.

Within the newsletter delivery we use image tracking to confirm delivery and read recipts.

Where is it held?
Our website and database systems are based in the UK and we will make every effort to keep your data inside the EU. However, for internal administrative purposes it may occasionally be required for your data to be temporarily transferred outside the EU using secure means to other IT systems in our control. Also we use Google services which again can be based outside of the EU. By accepting this policy you give us consent to transfer your data outside the EU in a secure and confidential manner.

How long will we keep it?
Your details will be deleted from our membership database 12 months after membership expiry. They will be retained in our financial records for UK tax purposes for up to 7 years, after which they will be deleted.

The GDPR provides a number of rights concerning your personal information and these are detailed in the NARC Compliance Statement / Terms and Conditions – available on the club Information page at www.norfolkamateurradio.org

If you have any questions about NARC and the GDPR, please contact the Membership Secretary (This email address is being protected from spambots. You need JavaScript enabled to view it.) or Chairperson (This email address is being protected from spambots. You need JavaScript enabled to view it.)

Additional contact details are on the contacts page of the club website.