PRIVACY POLICY.
This Privacy Policy explains how The Missing 13 collects, uses, stores, and protects your personal information in line with the General Data Protection Regulation (GDPR), which came into force on 25 May 2018.
The Missing 13 is committed to protecting your privacy and handling your data transparently and responsibly. We take full responsibility for compliance with data protection laws and the appropriate management of any personal data we collect.
What data we collect and why
When you engage with us - via our website, email, events, or other touchpoints - we may collect the following types of personal data:
-
Name
-
Email address
-
Phone number
-
Organisation (if relevant)
-
Postal address (where applicable)
We collect this information in order to:
-
Respond to your enquiries or requests
-
Provide updates, newsletters, or information you’ve opted in to receive
-
Manage participation in any projects, initiatives, or events linked to The Missing 13
-
Improve our website and services
We only collect data that is necessary for our operational and communication purposes.
How we store your data
All personal data is stored securely in password-protected systems, including encrypted databases and company laptops. In limited cases, we may hold manual records (e.g. sign-up sheets or correspondence) at our office, which are securely stored and accessible only to authorised team members.
Data sharing
We do not sell, rent, or share your personal data with third parties. Your data will never be passed on without your explicit consent unless legally required to do so.
Data retention
We retain your information for as long as you remain an active contact of The Missing 13 or for a maximum of six (6) years from our last meaningful interaction. After that period, data will be securely deleted or anonymised.
Your rights
Under GDPR, you have the following rights regarding your personal data:
-
Access – You may request a copy of the data we hold about you.
-
Correction – You may ask us to correct any inaccurate or outdated information.
-
Deletion (‘Right to be Forgotten’) – You may request that we delete your data at any time.
-
Objection – You may opt out of receiving any non-essential communication from us.
-
Data Portability – You may request to transfer your data to another service provider.
We will respond to all data requests within one month of verifying your identity. We do not charge for handling data access or deletion requests.