The Caledonian Railway Association (‘the Association’) is committed to protecting the privacy and security of personal information entrusted to us.
This privacy notice is for Members of the Association and also for those who purchase items through our mail order service, make enquiries through our website or attend our events – referred to for this purpose as ‘Customers’.
This privacy notice describes how we, as a “Data Controller”, collect and use personal information about you during and after your relationship with us, in accordance with the General Data Protection Regulation (GDPR). It applies to the processing of personal data of our Members and Customers.
The kind of information we hold about you
We collect, store, and use the following personal information about you:
- Telephone number(s)
- Email address(es)
We do not collect or hold any other personal information about you.
How is your personal information collected?
We typically collect personal information about our Members from application forms or subsequent updates provided by Members. We also collect your name, email address, Membership number and username when your register for access to our web forum.
Personal information about Customers is collected from forms submitted directly by you, or for online purchases settled by PayPal from the personal information you have provided to them and which they include in the payment confirmation emails we received from them.
Member’s details are held in a secure database operated by the Membership Secretary.
Personal information collected during Forum registration is held on a secure database on the Forum server.
Member’s names and status only are shared with the Mail Order Officer to verify entitlement to reduced Member prices.
How we will use information about you
Personal information held about Members is only used for the administration of the Association and the delivery of our obligations to you. This includes its use to generate mailing lists for our journal, The True Line which is issued to all Members. This mailing is performed for us by a third party as explained below.
Personal information about Customers is only to complete delivery of ordered items or for the administration of events which you have subscribed to.
We only hold your data in order to fulfil our obligations to you. We will never sell or share your data to another party except in the specific instances noted below where we use third parties to aid in the efficient operation of the Association.
Member’s personal information is shared with Henry Ling Limited, the printer of The True Line, who also provide the mailing service for the journal. Data is shared over a secure connection and is deleted by them at the completion of each mailing.
When you have pre-purchased a new publication ahead of its launch Customer’s personal information is shared with our publisher Black Dwarf Lightmoor Publications Limited who fulfil delivery of these pre-orders. This personal data is deleted by them once delivery has been completed.
Changes to this Privacy Notice
We may update this privacy notice from time to time. The latest update was performed in May 2018.
If you have any questions about this privacy notice, please contact us through our website at https://www.crassoc.org.uk/web/contact.