Data Protection Policy

Data Protection Policy Statement

Sefton Support Group believes that all records required for the protection of clients and for the effective and efficient running of the charity should be collected, maintained, and kept in accordance with the Data Protection Act 1998 / GDPR update.

Sefton Support Group will ensure that all storage and processing of personal data held in manual records and on computers within the organisation comply with the Act. According to the Data Protection Act 1998 (DPA) and GDPR, personal data should:

  • Be obtained fairly and lawfully.
  • Be held for specified and lawful purposes.
  • Be processed in accordance with the person’s rights under the DPA.
  • Be adequate, relevant, and not excessive in relation to its purpose.
  • Be kept accurate and up to date.
  • Not be kept for longer than is necessary for its given purpose.
  • Be subject to appropriate safeguards against unauthorised use, loss, or damage.
  • Be transferred outside the European Economic Area only if the recipient country has adequate data protection.

Under the Data Protection Act 1998 / GDPR, Sefton Support Group is the data controller and is responsible for securely managing all data requirements.

Training

All new staff and volunteers are encouraged to read the policies on data protection and confidentiality as part of their induction process. All staff and volunteers who use the computer system receive thorough training in its use.

This is the Data Protection Policy of Sefton Support Group.