As you may gather and store personal information of your Shed members (such as contact details) you must follow the UK Data Protection Act 2018 and the Ireland Data Protection Act 2018.

There are strict rules that must be followed that ensure that information is:

  • used fairly, lawfully and transparently
  • used for specified, explicit purposes
  • used in a way that is adequate, relevant and limited to only what is necessary
  • accurate and, where necessary, kept up to date
  • kept for no longer than is necessary
  • handled in a way that ensures appropriate security, including protection against unlawful or unauthorised processing, access, loss, destruction or damage

Similarly, under all Data Protection Acts members have the right to find out what data that the Shed stores about them, which includes the right to:

  • be informed about how their data is being used
  • access personal data
  • have incorrect data updated
  • have data erased
  • stop or restrict the processing of their data
  • data portability (the reuse of their data for different services)
  • object to how their data is processed in certain circumstances
  • For further information about data protection visit: or