GDPR & Data Protection Policy

​Policy scope
The personal information which is held by the BCA will only be used to contact our members on updates to the BCA and our activities.
 
Responsibilities
Only elected committee members of the BCA will have access to the data. This will normally only include the Chairman, Secretary, Membership Secretary, Treasurer and Marketing Officer.  We have implemented the following guidelines:

• The only people able to access data covered by this policy are listed above.
• Data should not be shared informally, and access should be requested from an elected officer
• It is the responsibility of elected officers to keep data secure
• Data should be regularly reviewed and updated to ensure it is correct and relevant. If it is not, it is removed from our system

 
Data storage
Where possible, all data is secured digitally. Whether data is stored digitally or printed out, our guidelines are:

• When not required, the paper or files should be kept in a locked drawer or filing cabinet.
• When data is stored electronically, it is protected against unauthorised access, deletion or hacking.
• Data is backed up, and replicated off-site. 

Data Sharing
We will not share information with any third party without the direct and explicit consent of members.
 
Data Removal / Subject Access Requests /Data Disclosure
All individuals who have data held by the BCA are entitled to:

• Ask what information the BCA has.
• Be provided with a copy of that information
• Request an explanation on how to ensure it is up to date.

Where data is found to be incorrect, the BCA shall endeavour to show it is updated with the correct information, or removed where that is not possible.