Privacy Notice

How Thames Valley Chapter handles your personal data.

Who we are

Thames Valley Chapter is a volunteer-run ISC2 chapter. We are the data controller for the information described here. This chapter is a community organisation and is separate from ISC2's own member platform.

What we collect and why

• Contact & membership details (name, email, membership type, certifications) — to administer the chapter roster, communicate with you, and report anonymised activity to ISC2.
• Event RSVPs and dietary requirements — to run events and cater for them. Dietary information can reveal health, religious or philosophical details (a "special category" under UK GDPR); we collect it only with your consent, use it solely for catering, and never publish it.
• CPE, working-group and mentoring information — where you choose to take part, to support your professional development.

Lawful basis

We rely on your consent for optional information (dietary needs, mentoring, marketing email) and on our legitimate interest in running the chapter for core roster administration. You can withdraw consent at any time.

Retention

We keep your data only as long as needed to run the chapter. Prospect enquiries that don't lead to membership are removed after a reasonable period, and records are reviewed periodically.

Your rights

You have the right to access, correct, or erase your data, to restrict or object to processing, and to data portability. To exercise any of these — or to withdraw consent — contact us at phil@helixsolutions.uk. You can also complain to the UK Information Commissioner's Office (ico.org.uk).

Sharing

We do not sell your data. We share it only with chapter officers who need it to run the chapter, and with service providers (e.g. email) acting on our instructions.