NaCSBA’s Privacy policy was last updated 3.5.18
1. Introduction
Under the General Data Protection Regulation (GDPR) individuals have the right to be informed about how their Personal Data is being processed. The Regulation clearly stipulates that this must be done in a concise, transparent, intelligible and easily accessible form, using clear and plain language. You can find out more about GDPR at the ICOs website.
1.1 The National Custom and Self Build Association (NaCSBA) and the Right To Build Task Force (a NaCSBA initiative) are committed to safeguarding the privacy of our website visitors and service users. The Self Build Portal and the Right to Build Portal (campaign) are all NaCSBA sites.
1.2 This policy applies where we are acting as a data controller with respect to the personal data of all NaCSBA websites, including www.nacsba.org.uk, www.selfbuildportal.co.uk, www.righttobuildportal.org.uk and www.righttobuildtoolkit.org.uk, and also for all customers and enquiries relating to the Right To Build Task Force and its associated Expos; and also any NaCSBA members, in other words, where we determine the purposes and means of the processing of that personal data.
1.3 By using any of our websites and agreeing to this policy, you consent to our use of cookies in accordance with the terms of our separate Cookie Policy (Click here).
2. Credit
2.1 This document was created using a template from SEQ Legal.
3. How we use your personal data
3.1 In this Section 3 we have set out:
(a) the general categories of personal data that we may process;
(b) any data collected by cookies;
(c) the purposes for which we may process personal data; and
(d) the legal bases of the processing (for more details see our Terms and Conditions).
3.2 We may process data about your use of our website and services (“usage data“). This could be from cookies as you browse our websites without telling us who you are. The usage data may include your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation paths, as well as information about the timing, frequency and pattern of your service use. The source of the usage data is Google Analytics. This usage data may be processed for the purposes of analysing and improving the use of the website and services.
The legal basis for this processing under GDPR is our legitimate interests, namely the promotion and growth of custom and self build in the UK, giving more consumers choice about their new-build home.
3.3 We may process your account data (“account data“). The account data may include your name, email address and contact number. The source of the account data is you. The account data may be processed for the purposes of operating our website, providing our services, ensuring the security of our website and services, maintaining back-ups of our databases and communicating with you.
The legal basis for this processing is our legitimate interests, namely the proper administration of our website and business.
3.4 We may process your information included in your personal profile on our website (“profile data“). The profile data may include your name, address, telephone number, email address and any additional information you provide at registration, which may include details about your budget, project, area and your opinions, or your profession and employment details. The profile data may be processed for the purposes of enabling and monitoring your use of our website and services, for direct marketing purposes, where agreed to, and also may be aggregated to provide statistics about the sector and the process of custom or self-building, in which case all data will also be anonymized.
The legal basis for this processing is our legitimate interests, namely direct marketing for the benefit of the sector and people wishing to self or custom build. The source of the profile data is you.
3.5 We may process information that you post for publication on our website or through our services (“publication data“). The publication data may be processed for the purposes of enabling such publication and administering our website and services.
The legal basis for this processing is our legitimate interests, namely the proper administration of our website and business.
3.6 We may process information relating to transactions, including purchases of event tickets, that you enter into with us and/or through our website (“transaction data”). The transaction data may include your contact details, your card details and the transaction details. The transaction data may be processed for the purpose of supplying and managing access to paywall sections of some websites and keeping proper records of those transactions.
The legal basis for this processing is the performance of a contract between you and us.
4. Providing your personal data to others
4.1 We may disclose your personal data to any member of our group of companies (this means NaCSBA or the Right to Build Task Force) insofar as reasonably necessary for the purposes, and on the legal bases, set out in this policy.
4.2 In addition to the specific disclosures of personal data set out in this Section 4, we may disclose your personal data where such disclosure is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person. We may also disclose your personal data where such disclosure is necessary for the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure.
5. Retaining and deleting personal data
5.1 This Section 5 sets out our data retention policies and procedure, which are designed to help ensure that we comply with our legal obligations in relation to the retention and deletion of personal data.
5.2 Personal data that we process for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes.
5.3 We will retain your personal data for a minimum period of FIVE YEARS from your registering with us and for a maximum period of EIGHT YEARS from your last contact. This period was selected based upon a reasonable amount of time it takes to plan such a significant project as building your own home.
5.4 Notwithstanding the other provisions of this Section5, we may retain your personal data where such retention is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.
6. Amendments
6.1 We may update this policy from time to time by publishing a new version on our website.
6.2 You should check this page occasionally to ensure you are happy with any changes to this policy.
7. Your rights
7.1 You may instruct us to provide you with any personal information we hold about you; provision of such information will be subject to:
(a) the payment of a fee (currently fixed at GBP 10); and
(b) the supply of appropriate evidence of your identity (for this purpose, we will usually accept a photocopy of your passport certified by a solicitor or bank plus an original copy of a utility bill showing your current address).
7.2 We may withhold personal information that you request to the extent permitted by law.
7.3 You may instruct us at any time not to process your personal information for marketing purposes. You can do this by emailing media@nacsba.org.uk
7.4 In practice, you will usually either expressly agree in advance to our use of your personal information for marketing purposes, or we will provide you with an opportunity to opt out of the use of your personal information for marketing purposes.
8. Cookies
8.1 A cookie is a file containing an identifier (a string of letters and numbers) that is sent by a web server to a web browser and is stored by the browser. The identifier is then sent back to the server each time the browser requests a page from the server. Please see our cookie policy for how we use cookies.
9. Links to other websites
9.1 The Websites may contain links to other websites that are outside our control and are not covered by this privacy policy. If you access other sites using the links provided, the operators of these sites may collect information from you that will be used by them in accordance with their privacy policy, which may differ from ours.
10. Mail Fulfilment
10.1 To help us communicate with you, we use a web-based marketing automation platform called MailChimp to manage our communications, so by opting in to either NaCSBA or Third-party contact at the point of registering with us you are agreeing to us:
Transferring your contact information to MailChimp
Storing your contact information in our MailChimp account
Sending marketing emails from our MailChimp account
Tracking interactions for email marketing and ad placement purposes
And, in the case of third party emails, sharing aggregated data (without personal contact information) for the purposes of monitoring and improving communications from a marketing perspective.
11. Our details
11.1 Our websites are owned and operated by NaCSBA.
11.2 NaCSBA (registered number 7815926) is registered in England and Wales, whose registered office is at Normandy House, 305-309 High Street, Cheltenham, GL50 3HW. VAT registration number GB 122 2385 49. NaCSBA is a non profit making limited company and the liability of members is limited to £1.
11.3 You can contact us:
(a) by post, to the postal address given above;
(b) by telephone, on 07387 725 106; or
(c) by email, using info@nacsba.org.uk
12. Data protection contact
12.1 To get in touch about data protection please contact media@nacsba.org.uk