The Jane Austen Society is committed to respecting your privacy. This notice explains how we use any personal information we collect about you and your rights in relation to it. Please read it carefully.
Who we are
We are: the Jane Austen Society of the United Kingdom.
Our website address: https://janeaustensociety.org.uk
Registered address: 20 Parsonage Road, Henfield BN5 9JG
Charity number: 1200422
Data Protection Officer: Sharron Bassett firstname.lastname@example.org
What personal data we collect and why we collect it
Forms are sent via email and their content is encrypted in transit.
We keep form submissions as necessary for customer service purposes, but we do not use the information submitted through them for marketing purposes.
Personal information collected during the membership signup process is stored on the website database and emailed to the membership administrator.
Additionally, some basic activities such as the dates you make purchases, login to the site, or cancel/resume your subscriptions with us are stored on the website database.
Members of our website administrative team will have access to the information you provide us, such as your membership subscriptions, payment dates and amounts, and username / email address. Any additional information added in your Member Profile will also be visible to the administrators.
Personal information collected during the event registration process is stored on the website database and emailed to the events administrator.
Members of our website administrative team will have access to the information you provide us.
We accept payments through PayPal. When processing payments, some of your data will be passed to PayPal, including information required to process or support the payment, such as the purchase total and billing information.
PayPal privacy statement: https://www.paypal.com/uk/webapps/mpp/ua/privacy-full
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Embedded content from other websites
Pages on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
We use Twitter, Instagram and FaceBook feed plugins to display social media content on our website. As a result, our website makes requests to these service providers’ servers in order to display posts, images and videos.
Instagram data policy: https://help.instagram.com/519522125107875
Facebook data policy: https://en-gb.facebook.com/policy.php
We may also embed video content from Vimeo and YouTube:
The website uses web fonts provided by Google but these are hosted locally so no personal data is collected by Google’s content delivery network.
No personal details are stored in the website database by our security plugins.
Some data (including username, IP address, hostname, location) is temporarily stored in security logs on the server and/or sent via email to alert the website administrator of critical problems or suspicious activities on the site.
Who we share your data with
Except as set out here, we do not share, or sell, or disclose to a third party, any information collected through our website.
How long we retain your data
For users that are registered on our website, we store the personal information they provide in their user profile indefinitely. All users can see, edit, or delete their own personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
What rights you have over your data
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Where we send your data
The website is hosted at SiteGround in datacentres located in London (UK), and backed up in Eemshaven (NL). It is protected by 256-bit encryption. SSL certificate provided by Let’s Encrypt from the Internet Security Research Group (ISRG).
Siteground security details: siteground.com/datacenters/
Emails sent to Jane Austen Society administrators from website forms reside in the data centres of IONOS, which adhere to GDPR: ionos.co.uk/terms-gtc/privacy-policy/
Website administrator emails reside in the data centres of Zoho.com, which adhere to GDPR: www.zoho.com/mail/help/zoho-mail-gdpr-compliance.html
Website database backups are encrypted and stored at Amazon S3 – server located in London – and at Microsoft’s OnDrive – data centres located in GB – for up to 1 year.
AWS data privacy statements: aws.amazon.com/compliance/data-privacy/
Microsoft’s privacy commitment: microsoft.com/en-gb/trust-center/privacy
If you have any privacy-specific concerns, please contact us.
How we protect your data
We have various measures in place to protect the website from malicious attack, including firewall protection, malware scanning, bot/spam blocking and encryption.
What data breach procedures we have in place
The website has internal reporting systems and contact mechanisms to alert us to any malicious activity on the site.