Privacy Policy

Welsh Lawn Bowls processes personal data in compliance with UK GDPR and the Data Protection Act 2018. This Privacy Policy explains how we handle your information as the governing body for lawn bowls in Wales. Data protection is managed by our secretary, with no dedicated Data Protection Officer required.

Who We Are

Welsh Lawn Bowls is the national governing body for lawn bowls in Wales.

  • Registered address: 17 Hawthorn Avenue, Cimla, Neath, SA1 3NW

  • Secretary (Data Protection Contact): Steve Benjamin, email: secretary@welshbowls.co.uk

  • Website: www.welshbowls.co.uk | www.wlb.wales

We are exempt from registration with the ICO and do not have an appointed Data Protection Officer.

Data We Collect

We collect data necessary for membership, competitions, and administration:

Stakeholder Group Examples of Personal Data Lawful Basis
Members Name, address, email, phone, DOB, payment details, competition results, handicap Contract, Legitimate Interests
Clubs Club details, committee contacts, affiliation fees Contract, Legal Obligation
Participants Name, emergency contacts, medical info (if provided), performance data Contract, Consent (special category)
Website Visitors IP address, cookies, contact form data Legitimate Interests, Consent
Volunteers/Staff Employment details, Professional Information, DBS checks Contract, Legal Obligation 
 
 

Why We Use Your Data

  • Membership administration and event coordination (Contract)

  • Competition management including results and rankings (Legitimate Interests)

  • Communications about events, updates, and Welsh bowls news (Legitimate Interests)

  • Safety and safeguarding, especially for juniors (Legal Obligation)

  • Financial management and affiliation fees (Contract)

How We Share Data

We share data only when necessary:

  • Affiliated clubs and county associations for competitions

  • Service Providers e.g. Microsoft (Emails, Documentation)

  • British Isles Bowls Council and World Bowls for international events

  • Authorities if required by law (e.g., safeguarding concerns)
    No data is sold or shared for marketing by third parties.

Your Rights

You have these rights under UK GDPR:

  • Access your data (Subject Access Request)

  • Rectification of inaccurate data

  • Erasure (“right to be forgotten”)

  • Restriction of processing

  • Data portability (for contract data)

  • Object to processing (including marketing)

  • Withdraw consent anytime
    Contact the secretary to exercise rights. Response within 1 month.

Data Retention

  • Membership data: 3 years after the end of membership

  • Competition results: Indefinitely

  • Financial records: 7 years (legal requirement)

  • Website analytics: 26 months

    Secure deletion when no longer needed.

Security & Cookies

We use:

  • Password protection and SSL encryption

  • Access controls and regular backups

  • Cookie banner for consent (essential cookies always active)
    See our Cookie Policy for details.

Children’s Data

For juniors under 18:

  • Parental consent required for processing

  • Safeguarding Officer: Ann Sivapatham

  • Data shared only for participation and safety.

Complaints

Contact the secretary first. If unsatisfied, complain to the Information Commissioner’s Office: ico.org.uk/complaints, 0303 123 1113.

Last updated: December 2025

Scroll to Top