Privacy Policy

Our Aims Regarding Privacy And Data Protection, Including GDPR

We will never sell, rent or otherwise distribute or make public your personal information
We will never send you spam
We will only collect and process your data when necessary
Your privacy and data protection are part of your human rights
We will always look after the data and the people it represents

Data Controller

The data controller of this website is Conwy Scout Association, contact.

Data Protection Officer

Relevant Legislation

Our business, internal computer systems, and website comply with the following data protection and user privacy legislation.

UK Data Protection Act of 1988
EU Data Protection Directive 1995
EU General Data Protection Regulation 2018

As the above legislation is very strict and our website is compliant, it is likely to be compliant with many other countries’ legislation. If you are unsure whether this site complies with your country’s data protection and user privacy legislation, please contact our data protection officer for clarification.

Personal Information We Collect And Why It Is Collected

Any personal information that you provide by filling in forms or making purchases on our website. This includes information provided when registering an account, purchasing services from us, or requesting further services. We may also ask you for information when you report a problem with our site or the services you have purchased.

If you contact us by letter or email, we may retain records of the correspondence. Telephone conversations may be recorded for training purposes.

Details of transactions you carry out through our site and of the fulfilment and administration of your orders.

We also record technical data, such as your operating system, browser type, referring / exit pages and URLs, number of clicks, domain names, and pages viewed, in our server logs. This information is used for marketing and security purposes.

When acting as a data processor, we shall act only on the instructions of our customer, the data controller. If you provide us with personal data about a third party (for example, when registering a domain on their behalf), you warrant that you have obtained the express consent from the third party for the disclosure and use of their personal data.

Visitor Tracking

Like most websites, this website uses Google Analytics to track visitor interaction. This data is used to determine the number of visitors to our website. This allows us to understand how they found our website and track their path through it.

Whilst Google Analytics records your geographical location, the device you use and its operating system, and the browser you use, it does not identify you to GB Hosting. Your IP address is collected by Google, which may identify you, but Google does not provide us with access to it under any circumstances.

Google Analytics uses cookies. For more information, refer to Google Analytics Cookie Usage on their website.

To stop Google Analytics from tracking your visit and any other data whilst you visit our website, disable cookies within your browser.

Our Blog

If you add a comment to any of our blog posts, the name and email address you use with your comments are saved to this website’s database along with your computer’s IP address, together with the time and date you submitted the comment. This information is only used to identify you as a contributor to the blog post and is never passed on to any third party. We only show your name and the date of your comment on the actual public blog post. If your email address is linked to a Gravatar account, your Gravatar photo will be displayed.

Your comments and personal data will remain on this website until we see fit to remove the comment or the linked blog post.

If you wish to have us remove the comment and your personal data, please email us using the email address that you used to comment.

If you are under the age of 16, you MUST always obtain consent from your parent or guardian before posting a comment on our blog.

We recommend that you always avoid entering personally identifiable information into the actual comment field of any blog post you submit to our website.

Contact Forms Email Links

If you use the contact form on our contact page or an email link, the data you provide is stored on this website or transmitted to third parties for processing. The data is compiled into an email and sent to us via Simple Mail Transfer Protocol (SMTP).

All our SMTP servers are protected with TLS (or sometimes called SSL) and SHA-2 256-bit encryption before being sent over the internet. Our local computers and devices then decrypt this email content.

How We Use Your Personal Data

To register a customer account.
To process orders that you have placed with us.
To handle customer service and careers enquiries.
To ensure that content from our site is presented most effectively for you and for your computer.
To provide you with information, products or services that you request from us or which we feel may interest you, where you have consented to be contacted for such purposes.
To carry out our obligations arising from any contracts entered into between you and us.
To allow you to participate in interactive features of our service when you choose to do so.
To notify you about changes to our service.
To carry out marketing and statistical analysis.

For the avoidance of doubt, Conwy Scout Association will never sell your personal data to third parties.

Automatic decision making

We may use the information provided by you to perform automatic decisions about the acceptance of orders you place. This helps us combat fraud and abuse, and this information never leaves our network.

Cookies In Use On Our Websites

Our websites use cookies, as almost all websites do, to help provide you with the best experience we can. Cookies are small text files that are placed on your computer or mobile phone when you browse websites.

Our cookies help us

Make our website work as you’d expect.
Remember your settings during and between visits.
Offer you free services/content.
Improve the site’s speed and security.
Allow you to share pages with social networks like Facebook.
Continuously improve our website for you.
Make our marketing more efficient.

Permitting us to use cookies

If your browser (the software you use to view this website) is set to accept cookies, we will assume you are comfortable with this and will continue to use our website. If you wish to remove or disable cookies on our site, you can learn how below; however, doing so may affect how our site works.

How We Use Cookies

We use cookies to make our website work, including:

Remembering your search settings.
Remembering whether we have already asked you certain questions (e.g., if you declined to use our app or take a survey).

Third-Party Cookies

Our site, like most websites, includes functionality provided by third parties. A common example is an embedded YouTube video. Social media cookies are used to enable you to easily “Like” or share our content on platforms such as Facebook and X. We have included sharing buttons on our site. Disabling these cookies will likely break the functions offered by these third parties.

The privacy implications of this will vary from social network to social network and will be dependent on the privacy settings you have chosen on these networks.

Anonymous visitor statistics cookies

We use cookies to compile visitor statistics such as how many people have visited our website, what type of technology they are using (e.g. Mac or Windows, which helps to identify when our site isn’t working as it should for particular technologies), how long they spend on the site, what page they look at, etc. This helps us to continuously improve our website. These so-called analytic programs also tell us, on an anonymous basis, how people reached this site (e.g., from a search engine) and whether they have been here before, helping us allocate more money to developing our services for you rather than to marketing spend.

Advertising cookies

Cookies are widely used in online advertising. Neither we, advertisers, nor our advertising partners can gain personally identifiable information from these cookies.

You can learn more about online advertising at https://www.youronlinechoices.com. You can opt out of almost all advertising cookies at http://www.youronlinechoices.com/uk/your-ad-choices, although we would prefer that you didn’t, as ultimately adverts help keep much of the internet free. It is also worth noting that opting out of advertising cookies will not mean you won’t see adverts, just simply that they won’t be tailored to you any longer.

Turning cookies off

You can usually disable cookies by adjusting your browser settings. Doing so, however, will likely limit the functionality of our websites and many others worldwide, as cookies are a standard feature of most modern websites.

It may be that your concerns around cookies relate to so-called “spyware”. Rather than switching off cookies in your browser, you may find that anti-spyware software achieves the same objective by automatically deleting cookies considered to be invasive. Learn more about managing cookies with antispyware software.

Links To Other Websites

Our websites may contain links to other websites of interest. However, once you use these links to leave our site, we have no control over the other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and review the applicable privacy statement on the website.

How We Store Your Personal Information

When you submit a comment to one of our blog posts, some of your personal information will be stored on our website’s database. As our website is built on WordPress, comments are stored within WordPress and are identifiable.

GDPR recently added the requirement for Pseudonymisation, which many web application developers are currently addressing. We will look to implement it on our website as soon as possible.

Our Website’s Server

Our website is hosted in the United Kingdom on our own servers in a data centre in Nottinghamshire, within the European Economic Area. The following are some of our server’s security features.
• 24h 7days a week 365 days a year onsite Technicians.
• Biometric Security, CCTV and firewalls.
• Advanced Fire Protection.
• Redundant Power Supplies, UPS and Generators.
• Timeline Backups.
• All traffic between this website and your browser is encrypted and delivered over HTTPS.

The personal data that we collect from you will be stored on our servers inside the European Economic Area (“EEA”). Occasionally, we may have to transfer personal data outside of the EEA. For example, domain registration data must be sent to our domain registrar outside the EEA. By submitting your personal data, you agree to the transfer, storage, or processing of your data outside the EEA. We will take all reasonably necessary steps to ensure your data is handled securely and in accordance with the GDPR and our data protection policies.

We retain your personal data only for as long as we need it to fulfil the purposes for which we initially collected it, unless required by law. We will retain and use information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements as follows:

Invoice data is retained for a minimum of 7 years, as required by UK Law.
Log files are rotated every 12 weeks. However, anonymised data may be kept for longer.

Infrastructure backups are retained for 12 months. Web Hosting data is kept for 30 days.

In the rare event that backups containing personal information are restored after deletion, we will make every reasonable effort to prevent forgotten data from being inadvertently restored and to ensure all traces of the data are removed within 180 days, unless additional retention obligations apply.

Your Rights

Unless subject to an exemption under the GDPR, you have the following rights with respect to your personal data:

The right to request a copy of your personal data which we hold about you.
The right to request that we correct any personal data if it is found to be inaccurate or out of date.
The right to object to our use of your personal data and request that your personal data be erased where it is no longer necessary for us to retain such data. This is known as your right to be forgotten. Please note that there may be legal reasons for retaining your data, but please inform us if you believe we are retaining or using your personal data incorrectly. You can make this request by completing the form on our Data Access Request Page.
You have the right to ask us not to process your personal data for marketing purposes. We will usually inform you (before collecting your data) if we intend to use your data for such purposes or if we intend to disclose your information to any third party for such purposes. You can exercise your right to prevent such processing by following the Unsubscribe link at the bottom of any emails we send, contacting Customer Services, or emailing us.
The right to lodge a complaint with the Information Commissioner’s Office. Please see https://ico.org.uk/concerns/for further information.

Third Parties

Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

Google

(includes: Adwords, Google Analytics, YouTube, Drive, Data Studio, Google My Business, and Google Plus)

Site analytics, targeting and exclusion from PPC advertising, purchasing data, and reporting on anonymised data.

Contact form 7

Contact forms and contact form analytics.

GB Hosting (Esthetig Ltd)

Management of our servers.

Facebook, X, & Instagram

Targeting and exclusion from PPC advertising, purchasing data.

Microsoft: Bing and Office 365

Site analytics, PPC targeting and exclusion, and purchasing data.

WP Spamshield

WP SpamShield is used to block comment spam. To detect the language, it sends the comment to the service via HTTPS. Other data about the commentator (such as IP or email address) is not sent. This setting is optional and not included in the default configuration.
Restriction: Only for comments

Data Breaches

We will always report any illegal breaches of this website’s database or the databases of the third parties we use to all relevant persons and authorities within 72 hours of the breach if it is apparent that theft of any personal data that can identify you has taken place.

Changes To Our Privacy Policy

We reserve the right to change this privacy policy from time to time to reflect legal requirements and industry developments. We will not inform our clients or website users of these changes directly. Instead, we recommend that you check this privacy policy page regularly for changes. All changes will be noted in the change log below.