The Poppleton Centre Privacy Policy


Data Protection Policy

We take the privacy of your personal information seriously.

Personal Data Held by the Poppleton Centre.

We hold paper copies of booking forms at the Poppleton Centre, which lists hirers names, addresses, telephone numbers, email addresses and paper records holding our volunteer’s personal data.

We store this information in a secured location.

Use of Personal Data.

We use your personal data for

  • communication purposes

  • event planning

  • and invoicing requirements

We do not share or sell your data to third parties. However we use Mailchimp to manage and process our marketing distribution lists.

Who controls your information? And how to contact us.

The Poppleton Centre is a charity and is registered with the charities commission under the charity number 523984 and with our office at The Poppleton Centre, Main Street, Upper Poppleton, York, YO26 6JT.

Communications regarding Data Protection should be sent to the Centre Manager via email on;

Processing Data.

We monitor attendance at events for our marketing lists.

Access to Personal Data.

A small number of Committee members have access to the locked storage cupboards. This is limited to:

  • Chairman

  • Treasurer

  • Centre Manager

Data Retention: How long we keep your data.

We retain your data for a period of 6 years.

You have a right to be forgotten. If you would like this to be exercised please contact the Centre Manager.

Personal data connected to the Poppleton Social loyalty cards is kept for 1 year.

Your Rights to Your Data.

You are welcome to verify what personal data we hold about you, please contact the Centre Manager or one of the above Committee members

CCTV Usage.

Here at the Poppleton Centre we use CCTV to ward off any antisocial behaviour. We keep the footage stored in a secure location for 2 weeks before it is overwritten.

The data is kept inside the EEA.

The only people who have access to this are the same committee members that are named under the personal data section and the Police if there has been an incident.


The Poppleton Centre operates its own WIFI connection. When access is shared data captured includes your device/machine name, IP address and websites you visit. This data is held for 2 weeks.

The office works on a secure, separate IP address.

Privacy Policies of Third Party Platforms.

The Poppleton Community Trust.

As an employer the trust use York CVS as a third party in order to pay and manage staff appropriately.

Trustees may send employees personal data to the Charities Commissions

The personal information that will be passed to York CVS includes; Name, Address, Email, NI Number and Bank Account details.