General Data Protection Regulation (GDPR) Statement as of May 2018
This statement
GDPR came into force 25th May 2018. This document aims to clarify our data management processes.
Information we hold in relation to GDPR
Information that falls under GDPR legislation is any information relating to an identified or identifiable natural person. This could include the following data items which we hold:
• Email addresses and mobile phone numbers which are used for communication
• Individual names
• Individual’s regional location
This information comes from our website processes where the organisation/person is fully informed of the information we will hold and its usage. Given the very limited scope of the data we process in relation to GDPR we consider the information we carry to be low risk.
Communicating privacy information
We communicate our privacy information i.e. data we hold and how we process it in this document which is made available on our website.
Your rights
You have a right to know what information we hold on you. We can provide a document setting out information held on you. You or your legal representative can request such information. We will remove such information from our database and comply with requirements covering your rights under GDPR within 30 days following a request by you or your legal representative.
Subject access requests and Data Protection Communication
Any requests for information or deletion should be made to:

 Fairness In Fees Limited 23 The Ridge Coulsdon Surrey CR5 2AT

Lawful basis for processing personal data
We process details of information provided to us on our website relating to enquiries or donations to the Action Group and use that information to communicate with enquirers. We do not provide any information to third parties without your specific consent.
Consent of usage and data breach
A copy of this document is available on our website. We consider Data Protection to constitute a very serious matter and our database design takes into account security and privacy.
We record communication with our website. We will investigate activity which is of concern to us. If we identify a data breach we will notify affected parties as soon as reasonably possible.