Friends of Goostrey Station

Data Retention Policy in connection with GDPR

1. The lawful basis for FOGS to hold personal information (data) is a legitimate interest (as defined in GDPR) in providing a service to FOGS members.

2. The Secretary of FOGS will be the Data Controller.

3. Data subjects (those whose data is held) will be FOGS members.

4. Data collected will be restricted to name, address, telephone number(s) and email address as appropriate.

5. Data supplied to or held by FOGS will be used solely for purposes in connection of the running of FOGS, including advising members of meetings, events and other activities which are likely to be of interest to them.

6. Data will not be shared with or made available to third parties and will not be used for marketing or promotional purposes.

7. Data will be held securely by the Data Controller in electronic and/or paper formats.

8. If held electronically it will be protected by password and up-to-date security software.

9. Data will normally be deleted from FOGS records within one calendar month in the event of:-

   a) the receipt of a written notification of resignation

   b) a written request from a member requesting its removal.

10. This Data Retention Policy may be reviewed and amended as necessary from time to time by the FOGS Committee.

8th Jan 2026