Data Privacy Notice

1. Your personal data – what is it?
Personal data relates to a living individual who can be identified, either by the information alone or in conjunction with any other information the data controller holds or is likely to obtain. The processing of personal data is governed by the General Data Protection Regulation (the “GDPR”).

2. Who are we?
The Charity Trustees are the data controller for the Mint House (contact details below).  They decide what personal data is processed, how and for what purposes.

3. How do we process your personal data?
The Mint House fulfils its obligations under the “GDPR” by keeping personal data up to date; by storing and destroying it securely; by not collecting excessive amounts of data or holding data for too long; by protecting personal data from loss, misuse, unauthorised access and disclosure and by using appropriate technical measures to protect personal data.

We use your personal data for the following purposes:

  • Let members of our network know about events and developments of interest.
  • Develop and deliver training and other services, including RJ facilitation, in line with our charitable objectives.
  • Recruit, support and communicate with trustees, volunteers, contractors and any staff we may employ.
  • Safeguard children, young people and adults at risk.
  • Maintain our accounts and records.
  • Meet the requirements of regulators including the Charity Commission and HMRC.
  • Respond effectively to enquirers and handle any complaints.


4. What is the legal basis for processing your personal data?

  • Explicit consent of the data subject so that we can keep you informed about events and developments of interest.
  • Processing is necessary to fulfil our legal obligations under employment, social security and social protection law.
  • Processing is necessary to fulfil a contract.
  • Processing is necessary for the Mint House's legitimate interests unless these are over-ridden by the interests, rights and freedoms of the data subject.


5. Sharing your personal data
Your personal data will be treated as strictly confidential. We will only share your data with third parties outside the Mint House with your consent or when necessary to comply with safeguarding obligations.

6. How long do we keep your personal data?
We keep data in accordance with our Data Retention Schedule. A copy of the schedule is available from the Data Protection Trustee.

7. Your rights and your personal data
Unless subject to an exemption under the GDPR, you have the right to:

  • Request a copy of the personal data which the Mint House holds about you.
  • Request that the Mint House corrects any personal data if it is found to be inaccurate or out of date.
  • Request your personal data is erased where it is no longer necessary for the Mint House to retain such data.
  • Withdraw your consent to the processing at any time.
  • (Where applicable) request that the data controller provide the data subject with his/her personal data and where possible transmits that data directly to another data controller, (known as the right to data portability).
  • Request a restriction is placed on further processing where there is a dispute in relation to the accuracy or processing of your personal data.
  • Object to the processing of personal data (where processing is based on this being in the Mint House's legitimate interests).
  • Lodge a complaint with the Information Commissioner's Office.


8. Further processing
If we wish to use your personal data for a new purpose, not covered by this Data Protection Notice, then we will provide you with a new notice explaining this new use before we start the processing, setting out the relevant purposes and processing conditions. Where and whenever necessary, we will seek your prior consent to the new processing.

9. Contact Details
To exercise all relevant rights, queries or complaints please in the first instance contact the Data Protection Trustee at RP@minthouseoxford.co.uk