Society for Disabled Artists privacy statement

Who are we?
We are the National Committee of the Society for Disabled Artists.  We are a not-for-profit organisation. Charity number 278870.  SODA groups are self governing and will have their own privacy policy.

How to contact us
Data requests and any other queries should be sent to

What governs how we use and protect your personal data?
All personal data will be obtained, stored and processed in strict accordance with the General Data Protection Regulation (GDPR).  Further information on this can be found at

How do we collect your personal data?
We do not collect any data via our website.  
Data would be collected only directly from you via emails, on paper or over the telephone.

What do we use your personal data for?
Any personal data we collect is used solely to administer the running of the charity and its membership.

For members of SODA (including committee members, group members and lone members) this data will consist of your contact details and records of your subscription payments.  This will be used so that we may advise you of meetings or other SODA events, send out the members’ magazine and collect subscriptions.

For others (eg. carers, volunteers, demonstrators, customers and service providers) only such information as is essential to maintain our relationship with you will be kept and only for so long as it is relevant.

We do not contact anyone (even previous donors) for fundraising.  We do not contact people who have previously bought pictures.  We do not provide your personal data to anyone outside of SODA except where they are providing a service for us and then it may be used only for that purpose.

What third parties do we provide your data to?
Before using any third parties to provide a service we are obliged to check that they will operate in a way that is compliant with GDPR.  We currently use or plan to use the following third parties to handle members data;
1) Printers to produce the members’ magazine which contains some personal data
2) Mail Green will be used for some mass mailing to all SODA members.  They will see only your name and address plus the contents of the letter which will never contain any other personal data.
3) email service providers for the purpose of sending emails and maintaining contact lists

What is the legal basis for collecting data?
Members contact data is deemed to be held for ‘legitimate interests’ (as defined by the GDPR)  i.e. to help run your society.  As a result we are not required to obtain explicit consent from members to use their data in this way.  

Any other data held on members, or any data held on others, is held with the providers ‘consent’ (as defined by the GDPR).  In this case, when you provide the data, you will be asked to sign the form on which the data is collected in order to give your consent.  At the same time you should be shown this privacy statement.

How long will the data be held for?
Data about you will be held for such time as you are connected with SODA either as a member, carer, volunteer,  customer, or a service provider.  Once that association ends your data will be deleted within 90 days (subject to statutory requirements).

Your rights
You have the following rights in relation to your data;
1) To be informed of the information shown above at the time the data is collected and of any proposed changes to those details (In which case consent will be re-sought before your data is used in a new way).
2) To request a copy of the data held on you and receive it free of charge within 30 days
3) To require alterations to any inaccurate data held on you
4) To withdraw consent to use any data previously given, in which case we will delete it (but this might restrict the service we can provide to you).
5) To be informed of any security breach for the data relating to you

If you are unhappy with the way we are handling your data please take it up with us first.  However, if you are still not happy, you can contact the Information Commissioner’s Office to make a complaint (