SPACE4ACTION Data Protection Policy Last updated: Monday 22nd July 2019 This Policy covers all training that Space4Action has created, owns and/or delivers. Currently this includes, but is not limited to, C.O.P.E. Training, Ask & Act Program, DAY Program, Own My Life Course, and any speaking engagements or bespoke training. Space4Action holds individual, company or organisational data for the purposes of trading with client organisations. In this document they are referred to as clients. Space4Action is the data controller. This Policy outlines the obligation, roles and procedures to ensure the security of all retained data. If you have any questions, please email: email@example.com. Policy Statement: Space4Action is committed to protecting the rights and privacy of all individuals and website users in accordance with the GDPR and LED implementation Regulations (2018), Isle of Man Data Protection Act (2018). This Policy applies to both Directors of Space4Action and to any future employees of Space4Action. It is expected that all Directors and Employees of Space4Action will have read this policy and accord [agree to comply] with it, and that they understand that any breech of Data Protection is an offence and will be dealt with accordingly. Roles and Responsibilities: Space4Action will use customers’ and potential customers’ data for the following reasons: In relation to the booking of training, talks and other events. To supply updates which will keep clients appraised of future training and events. To make clients aware of updates to training materials they may have received. To make clients aware of information, (for example news stories or resources from other sources), in relation to the subjects which Space4ction trains clients on. Clients are solely responsible for the accuracy of the information provided to Space4Action and also have control over its removal without the involvement of Space4Action. Personal Information must be accurate and up to date: It is the responsibility of clients who are suppling their information to ensure the accuracy of all personal information they give to Space4Action. Clients are also responsible for the ongoing accuracy of their information. Inaccurate information may be removed by Space4Action. Personal Information must not be kept for longer than is necessary: Clients are responsible for informing Space4Action if they wish their information to be deleted from Space4Action’s databases. The Data Subject can unsubscribe from email updates either using links on the update emails or by contacting Space4Action. (firstname.lastname@example.org). Personal Information must be secure: Space4Action is committed to ensuring that client information is securely kept. In order to prevent unauthorised access or disclosure, Space4Action has put in place suitable physical, electronic and process procedures to safeguard and secure the information we collect online and in hard copy.