Gortalowry House Privacy Notice

This is a working document and may be change as required

Management committee

Members the management committee personal date is held on both paper and computer as we circulate information by email. And for details like the Charity commission and for Company House. Likewise we will ask you to sign consent forms giving us permission for this.

Staff Details

Staff details are maintained and some of this is of a sensitive nature, given the need for staffs checks to be maintain, these records are held both digitally and on paper and on the phone. And in place like supervision records and staff meetings. Whilst this is of a contractual nature we will advise staff of all data held on them and in good practice we will ask staff to sign a consent form.


Gortalowry House does not retain list of users, just the organisation which book the rooms as as such is not part of GDPR

Gortalowry House will take responsibility for information on its website( details are given by the groups) and its facebook page, however GH cannot take responsibility for other people’s comments Any person wish to see the information held on them or their child as only to ask and it will be given. You can contact us with a “Subject Access Request” if you want to ask us to provide you with any other information we hold about you. If you are interested in any particular aspects, specifying them will help us to provide you with what you need quickly and efficiently. We are required to provide this to you within one month. There is not usually a fee for this, though we can charge a reasonable fee based on the administrative cost of providing the information if a request is manifestly unfounded or excessive, or for requests for further copies of the same information.

Retention of records

All financial records have to be maintained for 7 years Staffing records will be held for three years after that person has left the organisation.

Gortalowry House will not share your records with any other organisation without your expressed permission in writing. There will be no sharing of data digitally