Privacy Policy

Effective Date: October 20, 2025

Friends of Belle Vue Park Penarth ("we", "us", or "our") is a registered charity dedicated to enhancing Belle Vue Park as a community hub in Penarth, Wales. We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, sign up for our mailing list, join our membership scheme, or interact with us in other ways.

1. Information We Collect

We collect personal information that you voluntarily provide to us, such as:

• Email addresses when you subscribe to our mailing list.
• Names, email addresses, and other details (e.g., contact information, preferences) when you join our membership scheme via our Google Forms link.
• Usage data automatically collected when you visit our website, including IP address, browser type, pages visited, and time spent on pages (via cookies and Google Analytics).

We do not collect sensitive personal information (e.g., health data, ethnic origin) unless explicitly provided for a specific purpose, such as event accommodations, and only with your consent. We do not knowingly collect data from children under 13 years old.

2. How We Collect Information

Personal information is collected directly from you through:

• Our mailing list signup form on the website, processed via Google Apps Script.
• Our membership scheme form, hosted on Google Forms.
• Cookies and tracking technologies on our website (see section 4).

We may also receive information from public sources or third parties if you interact with us via social media (e.g., Facebook).

3. How We Use Your Information

We use your personal information for legitimate interests or with your consent, including:

• Sending updates, newsletters, and event notifications via our mailing list.
• Managing membership, including voting rights and committee communications.
• Improving our website and services through analytics.
• Responding to inquiries and contact requests.
• Complying with legal obligations, such as charity reporting.

We process data only for the purposes stated and retain it only as long as necessary (e.g., mailing list data until you unsubscribe; membership data for the duration of your involvement plus any legal retention periods).

4. Cookies and Tracking Technologies

Our website uses cookies to enhance your experience:

• Essential Cookies: For site functionality, such as remembering your cookie consent (stored in localStorage).
• Analytics Cookies: We use Google Analytics (including Google Analytics 4) to collect anonymous usage data, such as page views, visitor numbers, and session duration. This helps us understand how our site is used and improve it. Google Analytics uses cookies like _ga (expires after 2 years) to distinguish users and sessions. Data is pseudonymized and not used to identify individuals personally.

You can manage cookies via your browser settings or opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout. For more on Google's privacy practices, see Google's Privacy Policy.

5. Data Storage and Security

Your data from the mailing list signup is stored securely in Google Cloud services (e.g., Google Groups or Sheets), protected by multi-factor authentication (MFA) and other security measures. Membership data from Google Forms is also stored in Google Cloud. We use encryption, access controls, and regular reviews to protect data. Google complies with UK GDPR for data processing. We do not transfer data outside the UK/EEA without adequate safeguards.

In case of a data breach, we will notify affected individuals and the Information Commissioner's Office (ICO) as required by law.

6. Sharing Your Information

We do not sell or rent your data. We may share it with:

• Service providers like Google (for storage and analytics) under data processing agreements.
• Legal authorities if required by law.
• Volunteers or committee members for event planning (on a need-to-know basis).

7. Your Rights

Under UK GDPR, you have rights to:

• Access your data.
• Rectify inaccurate data.
• Erase data (right to be forgotten).
• Restrict processing.
• Object to processing (e.g., for marketing).
• Data portability.
• Withdraw consent at any time.

To exercise these rights, contact us at chair@friendsofbellevue.org.uk. We will respond within one month. You can also complain to the ICO at ico.org.uk.

8. Changes to This Policy

We may update this policy periodically. Changes will be posted here with a new effective date. We encourage you to review it regularly.

9. Contact Us

If you have questions about this Privacy Policy, contact us at:

Email: chair@friendsofbellevue.org.uk

Facebook: Message us on Facebook