Privacy Policy & GDPR Statement

Last updated: December 2025
Hinckley Wharf CIC

Hinckley Wharf CIC (“we”, “us”, “our”) is committed to protecting the privacy and personal data of everyone who interacts with our organisation. This Privacy Policy explains how we collect, use, store and safeguard your information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and all applicable privacy laws.


1. Who We Are

Hinckley Wharf CIC
Registered Office:
The Atkins Building,
Lower Bond Street,
Hinckley,
Leics,
LE10 1QU

Operating Address:
The Wharf,
Coventry Road,
Hinckley,
LE10 0NQ

Data Protection Manager:
Mr George Seward
Email: info@hinckleywharf.org.uk

Mr Seward is responsible for overseeing compliance with this Privacy Policy and for handling all data protection enquiries.


2. What Personal Data We Collect

We may collect and process the following categories of personal data:

2.1 Data You Provide Directly

  • Name

  • Email address

  • Telephone number

  • Postal address

  • Enquiry details submitted through contact forms or emails

  • Information provided when applying for membership, volunteering, or booking facilities

  • Information relating to safeguarding or incident reports

2.2 Automatically Collected Data

When you visit our website, we may collect:

  • IP address

  • Browser type and version

  • Device information

  • Pages visited and time spent on the site

  • Cookie preferences

2.3 Data from Partner Organisations

As a CIC supporting community groups, we may receive limited data from:

  • Brookfield Fishers

  • Hinckley Sea Cadets

  • Hinckley Water Activities Club

  • Hinckley Boat Club

This data is only shared where necessary for operational, safety, or safeguarding purposes.


3. How We Use Your Personal Data

We use your data for the following purposes:

  • To respond to enquiries and provide information

  • To manage membership, bookings, and access to facilities

  • To coordinate activities with partner organisations

  • To maintain safety and safeguarding records

  • To send important operational updates

  • To comply with legal and regulatory obligations

  • To improve website functionality and user experience

We do not use your data for unsolicited marketing and we do not sell your data to third parties.


4. Lawful Bases for Processing

Under UK GDPR, we rely on the following legal bases:

  • Consent – when you voluntarily submit a form or request information

  • Legitimate interests – to operate and manage the Wharf safely and effectively

  • Contract – where we enter into an agreement with you

  • Legal obligation – for safeguarding, incident reporting or compliance with CIC regulation

  • Vital interests – where processing is necessary to protect someone’s life or safety


5. How We Store and Protect Your Data

We take data security seriously. Measures include:

  • Encrypted email services

  • Secure password-protected systems

  • Access controls restricting data to authorised personnel only

  • Regular security reviews

  • Secure disposal of digital and paper records

  • SSL encryption on our website

We do not store payment card information on our website.


6. Data Sharing & Third Parties

We may share data with:

  • Partner organisations (only when necessary for operational or safety reasons)

  • Emergency services or safeguarding authorities

  • IT providers who manage our website or email systems

  • Legal or regulatory bodies when required

Any third-party providers are contractually obliged to comply with UK GDPR.

We do not share your information with advertisers or unrelated organisations.


7. Cookies & Website Analytics

Our website uses cookies to ensure basic site functionality and to improve user experience.

Cookies include:

  • Essential cookies – required for the site to work

  • Analytical cookies – e.g., Google Analytics (only used with consent)

  • Preference cookies – to remember your cookie settings

You can manage or withdraw cookie consent at any time.


8. Your Data Protection Rights

Under UK GDPR you have the following rights:

  • Right to be informed – about how your data is used

  • Right of access – request a copy of your data

  • Right to rectification – correct inaccurate information

  • Right to erasure (“right to be forgotten”)

  • Right to restrict processing

  • Right to data portability

  • Right to object

  • Rights relating to automated decision-making (not used on this site)

To exercise any of these rights, contact:
info@hinckleywharf.org.uk


9. Data Retention

We only keep personal data for as long as necessary for the purpose it was collected.

Typical retention periods include:

  • Enquiries: up to 12 months

  • Membership/booking records: up to 6 years

  • Safeguarding or incident reports: in accordance with statutory requirements

  • Financial or legal records: 6 years

After this period, data is securely deleted or anonymised.


10. Children’s Data

As we support youth organisations, including Hinckley Sea Cadets, we may handle limited data relating to young people.

We ensure:

  • Safeguarding compliance

  • Minimal data collection

  • Secure storage

  • Access limited to authorised, DBS-checked individuals

We never publish or share children’s data publicly.


11. Links to External Websites

Our website links to partner organisations and other third-party sites.
We are not responsible for the privacy practices of these external websites.


12. Complaints

If you have concerns about how we manage your data, please contact:

Data Protection Manager:
Mr George Seward
Email: info@hinckleywharf.org.uk

You also have the right to complain to the Information Commissioner’s Office (ICO):
https://ico.org.uk/


13. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be published on this page with an updated “last modified” date.

Last updated: December 2025