Privacy Policy
Last updated: [23.09.2025] 15:38
1. Introduction
GMB Union (“we”, “our”, “us”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our Hinkley members’ website.
We act as a Data Controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. What Data We Collect
We may collect and process the following categories of personal data:
-
Identity Data – name, date of birth, membership number.
-
Contact Data – email address, phone number, postal address.
-
Employment Data – job title, employer, workplace.
-
Union Membership Data – GMB membership status, subscription payments, branch affiliation.
-
Technical Data – IP address, login details, browser type, device type, operating system.
-
Usage Data – information about how you use our website, including pages visited and resources accessed.
-
Communication Data – records of messages, enquiries, or feedback submitted via the website.
3. How We Use Your Data
We use your personal data for the following purposes:
-
To provide secure access to member-only resources.
-
To manage your GMB membership and benefits.
-
To keep you informed about union news, events, campaigns, and services.
-
To respond to enquiries or requests for support.
-
To comply with legal obligations and regulatory requirements.
-
To maintain website security and monitor usage.
-
To improve the functionality and content of the website.
4. Legal Basis for Processing
We process your personal data under the following lawful bases:
-
Contract – where processing is necessary to deliver membership services.
-
Legal Obligation – to comply with applicable laws (e.g., employment or trade union legislation).
-
Legitimate Interests – for the effective running of the union and website (e.g., ensuring security).
-
Consent – where you have opted in (e.g., to receive newsletters or marketing).
5. Sharing Your Data
We do not sell your personal data. However, we may share it with:
-
Internal GMB representatives and officials to support members.
-
Service providers (e.g., IT support, hosting providers) under strict confidentiality agreements.
-
Regulators, law enforcement, or legal advisors where required by law.
Any data sharing is carried out in compliance with UK GDPR requirements.
6. International Data Transfers
Where personal data is transferred outside the UK, we ensure adequate safeguards are in place, such as standard contractual clauses or reliance on UK adequacy decisions.
7. Data Retention
We keep personal data only as long as necessary for the purposes described above or as required by law. Membership records are retained in line with GMB’s retention schedule and deleted or anonymised when no longer needed.
8. Your Data Protection Rights
Under UK GDPR, you have the following rights:
-
Right of access – to request a copy of your data.
-
Right to rectification – to have inaccurate data corrected.
-
Right to erasure – to request deletion of your data (subject to legal limits).
-
Right to restrict processing – to limit how your data is used.
-
Right to data portability – to receive your data in a machine-readable format.
-
Right to object – to object to processing under legitimate interests or direct marketing.
-
Right to withdraw consent – where processing is based on consent.
You can exercise these rights by contacting us (see Section 12).
9. Security of Your Data
We implement appropriate technical and organisational measures to protect your personal data, including:
-
Secure servers and encrypted communications (SSL).
-
Restricted access controls for authorised representatives only.
-
Regular monitoring, auditing, and testing of our systems.
10. Cookies and Tracking
Our website may use cookies and similar technologies to:
-
Improve website functionality.
-
Analyse traffic and usage patterns.
-
Remember your preferences.
You can control or disable cookies through your browser settings. For more information, see our [Cookie Policy].
11. Children’s Privacy
Our website is not intended for children under 16. We do not knowingly collect data from children without parental consent.
12. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact:
GMB Hinkley Privacy Officer
📧 Email: iuli675@gmail.com
📞 Tel: 07517099518
📮 Address: GMB Union, Hinkley Point C, HAN
13. Complaints
If you are unhappy with how we handle your data, you may contact the Information Commissioner’s Office (ICO):
Website: www.ico.org.uk
Tel: 0303 123 1113
14. Updates to This Policy
We may update this Privacy Policy from time to time. Any changes will be published on this page with the “Last updated” date.
