[*Group Name*] Privacy Notice

Who we are

[*Group Name*] is an independent registered UK road safety charity, affiliated to IAM RoadSmart, as part of their support for Associate Members preparing for the advanced test. We help to improve driver and rider skills through coaching and education.

[*Group Name*] is run by volunteers, represent a unique resource with unparalleled experience and expertise. We also provide a social focus meeting and enjoying the company of fellow driving and motorcycling enthusiasts.

[*Group Name*] acts as the data controller/data processor when collecting and processing your data.

This Privacy Notice covers [*Group Name*] in relation to the collection and use of the information you give us. We may change this Policy from time to time. If we make any significant changes we will advertise this on our website or contact you directly with the information. Please check this page occasionally to make sure you are happy with any changes.

If you have any questions about this Notice or concerning your personal information please contact us using the details provided at the bottom of this Notice.

Our basis for processing your personal information and what we use it for

[*Group Name*] aims to be very clear when we collect your personal data and will not do anything you wouldn’t reasonably expect in order to provide the products and/or services that you request, to communicate with you, and to personalise our information we send to you.

We will process your personal data because [What is your basis for processing, please refer to the ICO guidance] https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/lawful-basis-for-processing/

How do we use your information?

We use your information to: [list below how you use the data subject’s personal information]

• Arrange and manage your Advanced Driving Course (our obligation arising from your purchase via IAM RoadSmart)
• Manage your membership of the Group
• #
• #
• #

Pictures, videos and written updates of [*Group Name*] events and activities at which you may be in attendance, or referred to by name, may also be regularly published on social media sites, in group newsletters/magazines and on group related websites.

What type of information we collect and how we use your information

We will use your personal information in a number of ways which reflect the legal basis applying to processing of your data. To enable us to contact you in relation to an enquiry you have made, Group events and to manage your membership.

The personal data that we collect from is: - [List all the personal identifiers you collect. please refer to the ICO guidance] https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/key-definitions/what-is-personal-data/

• Name
• #
• #
• #
• #

Special category data

[Do you collect any Special category data i.e. health, race? - you must identify both a lawful basis under Article 6 and a separate condition for processing special category data under Article 9.]

[Please list any special category date you collect and your lawful basis for processing]

We collect information in the below ways: - [list how you collect the data subjects personal information e.g. forms etc.]

• #
• #
• #
• #
• #

To enable us to contact you in relation to an enquiry you have made, relevant products or services, Group meeting and events you may be interested in.

[Do you collect bank, credit or debit card details? How do you store them and keep them secure?]

If you provide us with bank, credit or debit card details in order to pay for *********** , we will keep such details ************* .

We may ask for additional information from you in order to deliver the specific product or service purchased.

As required by the General Data Protection Regulation, we follow strict security procedures in the storage and disclosure of information you have provided to us. You have the right to object to this processing. Please bear in mind that if you object this may affect our ability to deliver the products and services you have requested.

Disclosure of information to third parties

[*Group Name*] will not share your details with third parties except:

1. where we have your permission;
2. where we are required to deliver your product or service;
3. where we are required by law and by law enforcement agencies, judicial bodies, government entities, tax authorities or regulatory bodies around the world;

Third parties may deliver some of our products to you or provide all or part of the service requested by you. In these instances, whilst the information you provide will be disclosed to them, it will be kept secure, it will only be used for the administration of the service provided and to maintain management information for business analysis. In order to deliver these products and services, IAM RoadSmart may utilise the following third parties:

We may also disclose your personal information if we are required to do so under any legal obligation and may use external data for the purposes of fraud prevention and credit risk reduction, or where doing so would not infringe your rights, but is necessary and in the public interest.

If we provide information to a third party (either a provider of a product or service, or an external data processing agency such as a mailing house) we will exercise the strictest control over the third party contractually, requiring it and any of its agents and/or suppliers to: [list below how you will do this]

• #
• #
• #
• #
• #

In addition, we will restrict the information disclosed to the absolute minimum necessary, for example, to provide the product or service.

Marketing

[Do you send marketing communications?]

[What information do you send? What does the communication include i.e. other products?]

If the data subject no longer wants to receive the communications, how can they stop receiving them?]

[Do you hold an opt-out/in database?]

How we use cookies

[If you have your own website please complete the section below]

[If you use the IAM RoadSmart website please refer the IAM Privacy Notice at the foot of this webpage]

"Cookies" are small pieces of information sent by a web server to a web browser, which enables the server to collect information from the browser.

When you visit a site that uses cookies for the first time, a cookie is downloaded onto your computer/mobile device so that the next time you visit that site, your device will remember useful information such as items added in the shopping cart, visited pages or logging in options.

The common Cookies [*Group Name*] utilise are as follows:

You may refuse to accept cookies by activating the setting on your browser which allows you to block cookies. However, if you select this setting you may be unable to access certain parts of our site, including services and on-line shopping. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you log on to our site. Details of how to disable the Cookie function can be found at the help menu on your browser.

How we use Google Analytics

[If you have your own website what arrangements do they have with google?]

How long do we keep your information?

We will hold your personal information for as long as it is necessary for the relevant activity. By way of example, we hold records of payment you make for at least six years so we can fulfil our statutory obligations for tax purposes

We may retain information after your association with us has come to an end. Some information may be retained indefinitely for historical, statistical or research purposes. As stated below, you have the right to require us to erase personal data.

Your rights

You have a number of legal rights to control what IAM RoadSmart can do with your information.  For example:

• the right to be informed about the collection and use of your personal data
• the right to access the information we hold about you
• the right to correct or update information we hold about you
• the right to have the information we hold about you erased
• the right to restrict or suppress your personal information
• the right to obtain and reuse your personal data for your own purpose
• the right to object to the processing of their personal data in certain circumstances

Please note that:

In some cases, exercising these rights may mean that we are no longer able to provide you with our products and services.

We will not administer requests by a third party unless accompanied by evidence that the third party is entitled to act on behalf of the individual.

Please also note that the above rights are not absolute, and we may be entitled to refuse requests where exceptions apply.

Changes to this Privacy Notice

This Notice may be changed from time to time. If we make any significant changes we will advertise this on our website or contact you directly with the information.

Do please check this Policy each time you consider giving your personal information to us.

Contact us

Please contact us if you have any questions about our privacy policy or information we hold about you:

• In writing to: *Address*
• Via email to: *Email address*
• Via telephone to: *Telephone number*

This Policy was last updated on *Date*