Privacy Statement

Imagineering Foundation

CIO 1158003

This privacy policy sets out how the Imagineering Foundation collects, uses and protects personal data. In accordance with the General Data Protection Regulation (GDPR) it also sets out the legal basis on which such personal data is processed.

We are committed to ensuring that your personal data is protected. The majority of personal data held by the Foundation is in the public domain but this will be treated in the same manner as any sensitive data held. We may change this policy from time to time by updating this page. This policy is effective from 25^th May 2018.

Processing on the legal basis of ‘legitimate interests’ (Article 6.1(f) of the GDPR)

In simple terms the legal basis of ‘legitimate interests’ means that the processing is necessary for the operation of the Foundation be it current charitable business or enquiries.

In order to do this we may collect and keep a record of personal data about you from our website, telephone conversations, emails, written communications and contact at public events.

The personal data we collect from you may be used in various ways, including:

to process any orders placed
to communicate with people for maintaining our internal records
to improve the quality of our service
to protect our website and systems against unauthorized access.
Access to your personal data will be limited to the Foundation’s administrators. Personal data will not be shared with any third parties for marketing purposes.

Processing on the legal basis of ‘consent’ (Article 6.1(a) of the GDPR)

The Foundation will require your specific permission (‘consent’) before processing your personal data. In these circumstances we will provide notice of the exact nature of the processing and give you a genuine choice to accept or refuse.

Should you choose to accept (‘consent’) to such processing you then have the right to withdraw your ‘consent’ by informing us that you no longer give permission for your personal data to be used in this way.

Retention of personal data

Unless there are overriding legal requirements, we retain your personal data as follows: -

Removed from active records to archive if no activity for 2 years.
Destroyed from archive if no activity for a further 3 years.

Keeping your personal data secure

All electronic personal data will be maintained in password protected files in Microsoft’s cloud based systems, with full back up facilities. Any paper documents will be stored in secured facilities.

Personal data transfers

The Foundation does not transfer the personal data it collects to any other entity outside of the EEA.

Your data protection rights

Under GDPR there are certain rights with regards to the processing of your personal data. If you would like to exercise any of these rights or need further information, please contact

The Admin Manager, Imagineering Foundation c/o MTC, Ansty Business Park, Pilot Way. Coventry. CV7 9JU

Email: .(JavaScript must be enabled to view this email address)

Note on Sensitive Data

No financial related data will be retained unless requested by the person in writing or email.,

Disclosure Barring Service (DBS) personal data will only be retained if required to meet Safeguarding requirements.

Note on Safeguarding

All the requirements of the Foundation’s Safeguarding Policy will be maintained within this Privacy Policy.

Data Protection Officer

Due to the low number of people (3) involved in formal administration a formal Officer has not been nominated. However, contact the Admin Manager if required.