Wessex RFCA Privacy Policy
We collect the following data when you interact with CRFCA, DRM, and RFCAs websites:
- Feedback or enquiries, including your email address.
- Subscription preferences and how you engage with our emails (e.g., open rates and clicks).
- Your IP address and web browser details.
- Site usage information via cookies.
This data helps us:
- Improve the website and our services.
- Respond to your feedback.
- Provide you with local services and Defence-related research information.
Website Visitors
We use WordPress.com to host our website. WordPress collects non-personally identifiable information such as visitor behaviour. We do not track individuals. For details, visit WordPress’s privacy notice.
Data Storage
Your data is stored securely in the European Economic Area (EEA). By submitting your data, you agree to this. We use Mailchimp for email campaigns and gather statistics about email opens and clicks to improve our newsletters.
Security
While we take measures to keep your data secure, we cannot guarantee complete security during transmission. Any data you send is at your own risk, but we have security measures in place to protect it once received.
Social Media and Email
- Private messages via social media are not shared with other organisations without your consent.
- Emails sent to us may be monitored for security and compliance.
Job Applicants and Employees
We only use your information for recruitment purposes. Data from unsuccessful applicants is kept for 12 months before being deleted. Employee data is retained and securely stored according to retention schedules.
Association Members
We store your personal data securely and may share it with other relevant parties for RFCA-related activities, such as event invitations. Your data will never be shared with third-party marketing companies.
Data Protection
Wessex RFCA seeks your consent to store, retain, and process your data for the Association Members’ Database. Your information will be handled according to the General Data Protection Act 2018 and UK GDPR. We will only use your data for communication or to ensure accuracy in our business dealings. We will retain your data as long as you remain a member, and you can withdraw consent at any time. Your data will not be shared with third parties unless you agree. You can access your information upon request. For more details, refer to our full Privacy Policy.
Data Hosting
The Association Membership Database is hosted on the Kahootz Enterprise Platform, which is fully accredited and meets the UK Government’s 14 Cloud Security Principles.
Independent Audit
Kahootz undergoes independent audits and meets several security standards, including:
- Annual ISO 27001 inspections by UKAS-accredited auditors.
- An annual IT Health Check by a CHECK-accredited testing partner.
- Regular Cyber Essentials Plus Scheme tests to prevent cyberattacks.
- Continuous monitoring of service availability and uptime by an independent third party.
Disclosures
We may disclose your data if required by law or to share with other reserve, cadet, and service units for event invitations. We do not share your information for marketing or commercial purposes.
Your Rights
You can request to see the information we hold about you, and you can opt-out of email alerts or change your preferences at any time.
External Links
Our websites may link to other sites, which have their own privacy policies. This privacy policy only applies to CRFCA, DRM, and RFCAs websites.
Complaints
If you have concerns about how we handle your data, please contact us. We take complaints seriously and welcome suggestions for improvement.
Changes to Privacy Notice
We regularly review our privacy notice. The most recent update was on 11 March 2025.
For more information or to request a copy of this privacy policy, please contact us via email or by post.
Contact Us:
Wessex RFCA
Mount House
Mount Street
TAUNTON
TA1 3QE
Email: wx–hss@rfca.mod.uk