GDPR and Privacy Policy

Privacy Policy

The BMCA (trading as B.M.C.A. (1983) Ltd.) (“us” or “we”) is committed to respecting your privacy and the privacy of every visitor to our website. The information we collect about you will be used to fulfil the required services and enable us to improve how, as an organisation, we deal with you.

We are required under data protection legislation to notify you of the information contained in this privacy notice.

This privacy notice sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.

Should you have a question about the data we store, our contact details are:

BMCA
132 Sedgley Road, Woodsetton,Dudley, West Midlands DY1 4LJ

Email: privacy@bmca.org.uk

Information we collect about you

The information that we collect about you will only be used lawfully (in accordance with the Data Protection Act 2018 and the General Data Protection Regulation). All data is retained within the United Kingdom or the European Economic Area (EEA) and transferred only to countries outside the EEA where that country has an adequate level of legal protection for personal data or where we use an appropriate safeguard (as provided for by data protection laws) for protecting your personal data when it is transferred. You have the right to ask us for the details of any such safeguard that we use to transfer your personal data to a destination outside the EEA.

Our legal basis for processing your personal data depends on our reasons for processing your data in a particular situation. We use information held about you (and information about others) in the following ways:

– To provide you with our services and to carry out our obligations arising from any contracts entered into between you and us (i.e. for the performance of a contract between us);

– To provide you with information about events or services that we feel may be of interest or beneficial to you (i.e. on the basis that you have provided your consent or because it is in our legitimate interests).

– To ensure the content on our website is presented in the most effective manner for you and your computer or mobile device (legitimate interests); and

– To notify you about changes to our service (performance of a contact and/or legitimate interests).

We may collect and process the following data about you:

Type of information we collect:

  1. Information that you provide by filling in forms on our website www.bmca.org.uk. This includes information you provide at the time of registering or at any subsequent point. As part of our entry system, we’ll ask for you to fill in a form that will tell us your name, email address and phone number. We’ll also ask for your machine and class details, billing address and debit/credit card details; Once you’ve entered the event, we keep a record of billings made to you.
  2. Information about events, observers, queries, complaints (about events, our website, etc).
  3. Device-specific information (such as your hardware model, operating system version, unique device identifiers, and mobile network information) and details of your visits to our website. We use Google Analytics to collect data about how many people visit our site, how long they look at certain pages, where they exit the site, whether they make a purchase and where our visitors originate from. This is statistical information about our users’ browsing actions and patterns, and does not identify any individual.

Reason we collect it:

  1. We collect details for AMCA Insurance purposes and to contact you in the event that an event is cancelled or changed.
  2. If you contact us, we may keep a record of that correspondence.
  3. We use this data to monitor the performance of our website and gather information to improve it or our advertising campaigns. We use Cookies to obtain this information. The personal data collected are IP address and order ID. This type of process is common and fundamental to most online businesses. It helps us understand how our website is being used and areas of the site that we could improve in the future.

Lawful basis for processing:

  1. We process your personal data for these purposes on the basis that it is necessary for the performance of our contract (information about your entry, billing) with you and also on the basis of legitimate interests i.e. because it is in our legitimate interests as an organisation to ensure that you get the most from our events.
  2. We process this data on the basis that it is necessary for performance of our contract with you and/or because it is within our legitimate interests to consider and respond to communications from our customers, website visitors.
  3. We process this particular data on the basis that it is within our legitimate interests as a business to analyse the performance of our website and improve the online experience for our customers and those who visit our website.

Who we share your data with:

  1. Stripe
  2. Woocommerce

Reason we collect it:

  1. Online payment processor
  2. Online order/entry processor

Lawful basis for processing:

  1. Performance of a contract
  2. Performance of a contract

For how long do we hold your information?

We will hold the above information for as long as is necessary in order to provide you with our services, deal with any specific issues that may raise or otherwise as is required by law or any relevant regulatory body. Unless otherwise required by law, your data will be stored for a period of 1 year after our last contact with you at which point it will be deleted. Personal data that we process on the basis of your consent will be deleted upon your request unless there is an alternative lawful basis upon which we rely to continue processing the data.

Where we store your personal information?

The data we collect from you is stored in the EEA but may be transferred to and stored at a destination outside of the EEA. It may also be processed by staff operating outside of the EEA. However, we will only transfer personal data to a destination outside the EEA if we have a lawful basis for doing so and where we have implemented an appropriate safeguard recognised by the General Data Protection Regulation (GDPR). Any passwords are stored on BMCA servers in encrypted form. We do not disclose account details, postal or email addresses to anyone except when legally required to do so.

Protection of Personal Information

When you enter an event, information (such as your name, address and payment card details) that is exchanged between your browser and our website is transferred in encrypted form using Secure Socket Layer (“SSL”) to our payment provider, Stripe.

We use industry-standard efforts to safeguard the confidentiality of data, including encryption, firewalls and SSL. We have implemented reasonable administrative, technical, and physical security controls to protect against the loss, misuse, or alteration of your data.

Your rights

We expect the information we hold to be accurate and up to date. You have the right as an individual to find out what information we hold about you and make changes if necessary; you also have the right, assuming we are not obligated or entitled by law to refuse, to ask us to stop using the information. To have your information erased or rectified, please contact privacy@bmca.org.uk

You have the right to object to our processing of your data at any time either via email or by contacting us and requesting that processing of your details be restricted or your personal data be erased. Please note however that there may be circumstances where we are unable to agree to such a request because the law prevents us from doing so.

Changes to this policy

Any changes we make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by email.

Contact

Questions, comments and requests regarding this privacy policy are welcome and should be addressed to privacy@bmca.org.uk