Privacy Policy

Registered users’ account details

Users who register for an account on St. Margaret’s Allotments Association website are asked to provide account details (username, first name, last name, email address, plot number, if applicable, and can add some information about themselves in the profile section of their account “Account Details”).

Association members’ contact details

Users who apply for a plot are asked to provide contact details (names, postal and email addresses, telephone numbers including landlines and mobile phones “Contact Details”) 

Contact details of members, prospective members (on waiting lists) and former members who have recently relinquished their allotments are stored on the website and on the computers of the Chair, Secretary and Treasurer and will be used solely for the purpose of contacting members, for example to send newsletters and collect subscriptions.  

 Individual members may be contacted for other legitimate purposes, for example if there has been damage, the plot is being neglected or other reasonable purposes.

 Contact Details may be shared between other committee members to enable them to perform legitimate duties of the Association but for no other purposes.

Contact Details may be shared with The National Allotment Society (NAS) . As part of our membership of that body we are required under the terms of our subscription to share certain data. NAS has robust data protection and has assured St. Margaret’s Allotments Association that the Contact Details on our members will not be shared with other organisations.

 St. Margaret’s Allotments Association members’ Contact Details will not be shared with other individuals or organisations.

 In line with the Data Protection Act 2018, any Member is welcome to ask the Chair, or the Secretary or the Treasurer as to their respective Contact Details held by the Association at any time by writing to the Association.

Members are advised to inform the Association if their personal Contact Details change; so that records remain updated and members can be informed of Association news and business.

Members can find the full GDPR policy for members in the Association documents section of the Members’ area of the website.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Cookies

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

In particular, we use Turnstile by Cloudflare for human verification when users are filling in forms. 

Who we share your data with

If you request a password reset, your IP address will be included in the reset email.

How long we retain your data

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information. This data is held indefinitely unless you request your account to be deleted.

For users that subscribe to our newsletter, we store their email address indefinitely unless you request your address to be deleted.

For members of the Allotments Association we delete your data from the Association lists 30 days after you leave the Association. We do not delete your website user account or subscription to the newsletter unless you request these to be deleted. You no longer have access to the Members area of the website.

What rights you have over your data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where your data is sent

Visitor comments may be checked through an automated spam detection service.