The GDPR Policy was agreed by the Board to ensure that all parties are aware of the approach and procedures for the protection of data held by the Board