Privacy Policy

The following statement describes how Kalash Tribal collects and uses your personal information through your use of our website including any information you may provide through our site when you purchase a product or service, sign up to our newsletter or donate to our Sister to Sister projects .

If you have any queries about this statement, please contact us at kalash.tribal@gmail.com

This website is not intended for children and we do not knowingly collect data relating to children.

You must read this privacy notice together with any other privacy notice we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data. This privacy notice supplements the other notices and is not intended to override them.

Who We Are

Kelley Beeston trading as Kalash Tribal

Old Heathcoat School Community Centre, King Street, Tiverton, Devon, EX16 5JJ

+44 (0)1398 331143

This privacy policy relates to the above parties, hereafter referred to collectively as Kalash.

Kalash is committed to protecting your privacy and ensuring that any personal information or data we hold about you is held fairly and securely. Under data protection law, Kalash is a “data controller”. This means that we have control over the way we process your personal information.

This privacy policy is intended to explain: what personal data we collect about you; when we collect personal data; the purposes for which we use your personal data; and the legal basis or ground we are relying on for each processing activity. We will also explain the security measures we have taken as an organisation to keep your personal data secure. Under data protection law, you as an individual, have rights in relation to the personal data that we hold about you and we will set these out too.

What personal data do we collect?

Personal data or personal information means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).

The basis on which we collect personal data from you under GDPR for the purposes covered by this policy is that you have consented to its use.

We may collect, use and store the following personal data about you:

Identity Data includes your name, maiden name, last name, username or similar identifier, marital status, title, date of birth and gender;
Contact Data includes billing address, delivery address, email address, telephone numbers and contact preference;
Financial Data may include bank account and payment card details (if you are making a direct payment or donation);
Transaction and Events Data includes details about previous donations to our Sister to Sister projects, products and services you may have purchased from us and events or activities you register for or attend;
Technical Data includes internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website;
Usage Data includes information about how you use our website; and
Marketing and Communications Data includes your preferences in receiving marketing from us and your communication preferences.

We will also collect, gather and store Aggregated Data regarding the use of our website, such as which pages are visited most frequently. Only anonymous information and statistics will be used which do not identify individual visitors. Aggregated Data is therefore not considered personal data in law as this data does not directly or indirectly reveal your identity.

Special category data

Special category data is data which is more sensitive and requires more protection. We only collect special category data related to health such as your age or any disability that you may have, with express consent provided from the data subject, in order to tailor product offers to your circumstances, which we legitimately need to have to ensure that we provide:

appropriate facilities or support to enable participation in our events or other activities
ICE information
proper and valid insurance cover for teacher and performance troupe members
As with all data, it is entirely up to you to decide whether or not you are happy to provide this information. Sensitive personal data will only be used in order for us to fulfil our contract with you to provide the services that you have requested. We may use data provided by you to serve you better and meet your particular needs (for example, specific dietary meals when attending an event)

When do we collect your personal data?

We use different methods to collect data from and about you and have set these out below.

Direct Interactions

You may give us personal data when you correspond with us by post, phone, email or otherwise to:

· Subscribe to our newsletter;

· Make a donation to our Sister to Sister projects;

· Ask a question by phone, email, post or otherwise;

· Complete a health questionnaire on joining our classes;

. Register for our workshops, events or dance classes;

. Join our website forum

· Participate in social media functions on our website e.g. entering a survey or competition; or

· When you report a problem with our website

How do we use this information and the legal grounds?

We use your personal data for the purposes listed below. For each processing purpose we have set out the legal ground for this:

To register you as a newsletter subscriber we use your Identity and Contact Data to identify and register you in order to fulfil our legal contractual obligations to you (“Consent Ground”).
When you make a donation to us for our Sister to Sister projects we use your Identity, Contact, Financial / Transaction data to identify you, for our internal record keeping and to fulfil our legal contractual obligations to you (“Legal Contract Ground”).
To process your donations to Sister to Sister we use a third-party processor for processing your donation payment. This enables us to fulfil our legal contractual obligations to you (“Legal Contract Ground”).
To send you marketing materials about our activities and future events we use your Identity, Contact and Marketing and Communications Data to provide you with details of our upcoming dance classes, workshops, events and fundraising activities, which we believe will be of interest to you (“Legitimate Interest Ground”).
To deliver relevant website content to you we use your Identity, Contact, Profile Data and Usage Data. This allows us to tailor our website for your use (“Legitimate Interest Ground”).
To manage our relationship with you we use your Identity, Contact, Profile and Marketing and Communications Data to enable us to notify you about any important administrative messages, changes to our terms or policies, relevant changes in the law, where we need to perform the contract between us for example, to administer a booking, event or reservation and to send you emails or call you in relation to your booking (“Legal Obligation Ground”).
To engage you in a personalised way we use your Identity, Contact, Profile Data and sometimes publicly available information. Where we have identified that you may have the capacity or affinity to support Kalash and/or our Sister to Sister projects at a higher level, we may legitimately use the information we hold about you to identify connections between you and our existing circle of supporters (“Legitimate Interest Ground”).
To administer and protect this website we use your Identity, Contact and Technical Data to properly administer our IT services to you and to prevent fraudulent activities (“Legal Obligation Ground”).
If required to do so by law or regulatory obligation we may need to disclose personal data to regulatory bodies (“Legal Obligation Ground”).

Please note, when we are relying on the Legitimate Interest Ground we consider your fundamental rights and freedoms before we process your personal data for our legitimate interests to consider and balance any impact on you (both positive and negative). We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted by law) (“Legitimate Interest Assessment“).

For more information about the legal grounds we have relied on to process your personal data please go to www.ico.org.uk.

Subscriber communications

When you sign up for our newsletter you will be given the opportunity to opt in to receive other communications from us (dance classes, workshops/events, Sister to Sister projects).

If you change your mind and no longer wish for us to contact you for marketing purposes please let us know and we will stop contacting you. You can do this at any time by:

Unsubscribing to communications using the ‘unsubscribe’ link at the bottom of our emails indicating that you do not wish to receive email updates.
Contacting Kalash by emailing kalash.tribal@gmail.com
Writing to us at: Kalash Tribal, Old Heathcoat School Community Centre, King Street, Tiverton, Devon, UK.

Privacy and security

‘Cookies’ are small pieces of information sent by a web server to a web browser, which enable the server to collect information from the browser. Essentially it takes the form of a small text file deposited on your computer’s hard drive.

We use cookies to ensure that you can interact with our web sites successfully, to identify you when you visit our website and to keep track of your browsing patterns, so we can offer a better service.

The use of cookies does not give us access to the rest of your computer or to personal information about you.

Personal Data Protection

Information that you submit in a registration, enquiry form, sign up for news letter or purchase of goods and services may be stored using a third party 'cloud computing' service and/or stored on secure hard drives. Donations and payments made via our website are through Paypal so please check their policies.

However, the transmission of information over the Internet is never 100% secure so while we try to protect your personal information, we can’t guarantee the security of any information you submit to us via our website.

We also take appropriate measures to ensure that the information we receive is kept secure, accurate and up to date and kept only for so long as is necessary for the purposes for which it is used. All access to our secure server is restricted only to authorised staff.

How long will we hold your personal data for?

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

Consent

By providing us with your personal information you consent to the collection and use of that information for the purposes and in the manner described in this Privacy Policy.

Links

Our website may include links to websites run by other organisations. We are not responsible for the privacy practices of other organisations’ website, so you should read their privacy policies carefully before you submit any personal data.

Your data protection rights

You have the right to ask for a copy of the information we hold about you which we will provide free of charge, and to have any inaccuracies in your information corrected.

You can make a complaint or raise a concern about how we process your personal data.

In some circumstances, you have the right to object to our processing of your personal data or to stop us from continuing to make active use of personal data that we retain in our records.

We want to make sure that your personal data is accurate and up to date. You may ask us to correct or remove information that you think is inaccurate.

If you would like to contact us about any data requests described above please email us at kalash.tribal@gmail.com or write to us at Old Heathcoat School Community Centre, King Street, Tiverton, Devon, UK.

For more information about your rights under data protection or if you are not happy with how we have handled a complaint, you can contact the Office of the Information Commissioner, which oversees the protection of personal data in the UK, or the Fundraising Regulator, which is responsible for overseeing fundraising activities carried out by charities in the UK.

Alternatively, you may choose to contact the Information Commissioner directly about your complaint, regardless of whether you have raised it with us first.

Changes to our privacy policy

We reserve the right to amend this privacy statement. The most up to date version will be always be available on our website so please check from time to time. By continuing to use our website you will be deemed to have accepted any changes.

This privacy policy was last updated on 03 January 2019