GDPR Privacy Notice

This Privacy Notice explains how Integrate Paddling collects, uses, stores, and protects personal
information. We are committed to handling your data lawfully, fairly, and transparently in line
with UK GDPR and the Data Protection Act 2018.

Who We Are

Integrate Paddling is the data controller for the personal information we collect.

Contact email: info@integratepaddling.org.uk

Personal Data We Collect

We may collect and process the following information:

  • Membership details: name, address, email, phone number, emergency contact.
  • Payment information: membership fees or event payments processed through secure third-
    party providers (we do not store card details).
  • Participation records: attendance at paddling sessions, trips, training, or meetings.
  • Communications: emails, forms, or messages sent to the club.
  • Images: photographs or videos taken at club activities, used only with appropriate consent or
    legitimate interest.

How We Use Your Information

Your data may be used for:

  • Managing membership and providing club services.
  • Communicating about sessions, trips, safety updates, and club news.
  • Meeting health and safety obligations, including emergency contact use.
  • Administering payments and financial records.
  • Meeting legal or regulatory requirements, including safeguarding and insurance.
  • Using images for promotional or informational purposes where consent is required.

Legal Basis for Processing

We rely on one or more of the following lawful bases:

  • Contract: to provide membership services and manage participation.
  • Legitimate interests: running and promoting the club safely and effectively.
  • Legal obligation: complying with statutory or regulatory requirements.
  • Consent: for optional activities such as marketing or identifiable images.

Sharing Your Data

We may share information with:

  • Governing bodies or associations for registration or event entry.
  • Insurance providers for cover and claims.
  • Payment processors for membership or event fees.
  • Event or trip organisers where necessary for participation.
    We never sell your data and only share what is necessary and proportionate.

Data Retention

We keep personal information only as long as needed for membership, legal, or safeguarding
purposes. Membership data is normally deleted within 1 year after leaving the club unless
required for legal reasons.

Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data.
  • Request correction of inaccurate information.
  • Request deletion of your data where legally possible.
  • Object to or restrict certain types of processing.
  • Withdraw consent at any time where processing is based on consent.
  • Request data portability.
    To exercise these rights, contact info@integratepaddling.org.uk

How We Protect Your Data

We use appropriate technical and organisational measures to keep your information secure,
including restricted access, password protection, and secure storage systems.

Complaints

If you have concerns about how your data is handled, please contact us. You also have the right
to raise concerns with the Information Commissioner’s Office (ICO).