Nick Chard is the Data Protection Officer (DPO). A DPO determines how and why personal data can be processed.

​

1. What data we collect from you
We collect several pieces of personal data from our users. These include:

• Email addresses, phone numbers, and physical addresses.

• Organisation names, logos, and contact information.

We use this data when we advertise your organisation on the CASSS website.

 

2. Your email address and contact details
When you give us your email address, we will only use it to send you updates that may be of interest to you.

​

3. Your company information
If you agree to be listed as an organisation on the CASSS website, you need to provide several pieces of data, including your company’s contact information. We use this data to inform members of the public about who they can get in touch with at your company.

You will always be informed if the personal data you provide will be displayed on the CASSS website.

​

4. Cookies and analytics
You can read our full cookie policy to find out how we use cookies to track user journeys using Google Analytics.

 

5. What we do with your data
CASSS staff have access to the data they need to manage the information on the website. We will not:

• Sell or rent your data to third parties.

• Share your data with third parties for marketing purposes.

We will share your data if required to do so by law. We will also share your data with our IT suppliers who provide notification and mailing list management services.

 

6. Giving feedback about the CASSS website
You may be asked to provide feedback or take part in research. We use this data to improve our systems. The legal basis for processing this data is your consent.

 

7. How long we keep your data
We will store your data as long as your organisation is listed on the website. Unlisted organisational data will be deleted after 3 years. If you request earlier deletion, will we do so immediately.

​

8. Where your data is processed and stored
Your personal data may be transferred outside the EEA. If this happens, we will use the US Privacy Shield scheme.

​

9. How we protect your data and keep it secure
We maintain systems and processes to prevent unauthorised access or disclosure. All third parties that process personal data for CASSS are required to keep that data secure.

10. Children’s privacy protection
The CASSS website is not designed for children aged 13 or younger.

11. Your rights You have the right to:

• Ask for information about how your personal data is processed.

• Ask for a copy of all personal data you’ve given us.

• Ask for mistakes in your personal data to be corrected.

• Ask for your personal data to be erased if it is no longer needed.

• Object to how your data is processed.

• Ask that we only process your data in certain circumstances.

• Ask CASSS which third parties have access to or receive their personal data.

If your personal data is processed on the basis of consent, you can withdraw consent at any time.

​

12. Questions, concerns, and complaints
If you have questions or concerns, or if you wish to speak to the Data Protection Officer (DPO) at CASSS, please email cass.southend@gmail.com

 

13. Making a complaint to an independent body
You can complain to the Information Commissioner's Office (ICO).

• Email: casework@ico.org.uk

• Telephone: 0303 123 1113

• Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

​

14. Changes to this notice
We may modify or amend this privacy notice at any time.
Last updated: 19th August 2026