Guernsey Heart Support Group – Privacy Policy

Introduction and background

The Guernsey Heart Support Group is committed to compliance with all Guernsey Data Protection Legislation in respect of personal data.

The type of personal information we collect

We collect and process the following information:

  • Personal identifiers, contacts and characteristics
  • Residential Address
  • Email Address

How we get your personal information and why we have it

Most of the personal information we process is provided to us directly by you for one of the following reasons:

  • Fundraising  
  • Membership services
  • Funding requests

We use the information that you have given us in order to

  • To contact you about membership events and fundraising
  • To approve and satisfy funding requests made by you

We do not share the information with third parties.

The lawful bases we rely on for processing this information are:

(a) Your consent. (You are able to remove your consent at any time, you can do this by contacting

(b) We have a contractual obligation.

(c) We have a legal obligation.

Stricter rules apply to sensitive personal data (or special categories of personal data), such as information about a person’s health, ethnic origin or religious beliefs as well as information about criminal offences. We can only collect this information if you have given explicit consent.  

How we store your personal information

We may hold your Personal Data both in hard copy files and on IT systems.

All Personal Data obtained will be retained securely and only used for the purposes set out in the relevant laws and in accordance with the purposes for which it was collected.

All hard copy documentation and electronic documentation will be stored securely and returned or erased from the company records following a set period after the termination of our relationship with you.

This is generally six months after the relationship has terminated unless a longer period is required in order to comply with laws & regulation.

Your data protection rights

Under data protection law, you have rights including:

Your right of access – You have the right to ask us for copies of your personal information.

Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.

Your right to object to processing – You have the the right to object to the processing of your personal information in certain circumstances.

Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact us at if you wish to make a request.

How to complain

If you have any concerns about our use of your personal information, you can make a complaint to us at

You can also complain to the ODPA if you are unhappy with how we have used your data.

The OPDA can be contacted here:

Comments are closed.