Welshpool & Llanfair Light Railway Privacy Policy

Privacy Policy 

Introduction

This is the first issue of this policy reissued in updated format. 

 

This document sets out the company’s policy on general data protection. 

 

Legal compliance

In the event of a conflict between this policy and applicable legal and regulatory requirements, the applicable legal and regulatory requirements shall be followed. If this procedure creates a higher obligation, it shall be followed providing full compliance with applicable legal and regulatory requirements is also achieved.

 

This policy has been drawn up on the basis of law and guidance including:

• UK General Data Protection Regulation (UK GDPR)
• Data Protection Act 2018.

 

Scope 

 

Scope 

This policy applies to all persons involved with the Welshpool & Llanfair Light Railway Preservation Co. Ltd. in whatever capacity. 

 

Policy Introduction

 

The Welshpool & Llanfair Light Railway Preservation Company, which runs the Welshpool & Llanfair Light Railway with assistance from its trading subsidiary, W&L Sales Limited, is a charity registered in the UK, charity number 1000378. We take your privacy very seriously and are committed to protecting your personal information.

This policy explains how we may collect and use the information you give us.

You can contact us at:

Data Protection Officer, The Welshpool & Llanfair Light Railway

The Station, Pool Road

Llanfair Caereinion

Powys SY21 0SF

Tel 01938 810441

E-mail info@wllr.org.uk

 

The Welshpool & Llanfair Light Railway’s promise

• We will always store your personal details securely
• We will only hold your information for as long as necessary
• We will tell you how we are using information about you; and when you ask us to stop using your data, we will do so promptly
• We will only contact you in the ways you wish, using what you have told us to help communicate better with you
•  

This policy includes:

• How we collect information
• What personal information we collect 
• How we use your personal information
• What we do to keep your information safe and who has access to it 
• How we keep your information up to date
• How long we keep your information for
• Your right to your information

 

1. How we collect information

We collect information you provide when you:

·        Book travel tickets online with us 

·        Book to join one of our special events

·        Become a member of our railway

·        Donate to us

·        Telephone us, e-mail us, text us or visit our website and enquire about our activities

·        Post content on our social media sites  

·        Sign up to receive updates on the railway and our activities

·        Participate in a customer survey with us and provide us with information about you

 

We may also receive information about you from third-parties; but only if you have given them permission to share your information. Examples of this are if you post about the railway on Facebook, Twitter or other social media services. You can refer to the Privacy Policy of these organisations to understand how they might share information with the Welshpool & Llanfair Light Railway.

 

Our use of cookies

 Cookies are small pieces of information sent by a web server to a web browser, which enable the server to collect information from the browser. The cookie then sits as a small text file on your computer’s hard drive and identifies you to the web server when you return to that website in the future. For Welshpool & Llanfair Light Railway websites, like most websites, this helps us serve you better by already knowing which pages you have seen before and interest you.   

 

2.                What personal information we collect

The type and quantity of information we collect and how we use it depends on why you have provided it. Some information is legally required, notably details to support a Gift Aid claim. 

 

Most personal information you provide to The Welshpool & Llanfair Light Railway is collected because you have purchased a service from us or have consented for The Welshpool & Llanfair Light Railway to have this information. It enables The Welshpool & Llanfair Light Railway to better serve you as a customer, to thank you for your support as a donor or member and to communicate with you about activities at the railway which you may find of interest. 

 

If you are a customer, member, donor or ask to be kept informed of activities at The Welshpool & Llanfair Light Railway, we will collect where relevant:

·        Your full name

·        Your contact details, namely full address, phone numbers, e-mail

·        Your contact preferences

·        Your date of birth

·        Your dietary and mobility requirements where this is relevant to the catering we provide to you or to you being able to access and enjoy the railway, its trains and buildings 

·        Your credit card details (only until we have been able to process the transaction)

·        Details of specific areas of The Welshpool & Llanfair Light Railway’s activities that you are interested in

 

Children’s data

We do not actively collect information from children under 16. If we have supporters who are under 16, we will ask a parent or guardian for consent to collect information about children.

 

3.                How we use your personal information

We use your personal information in a number of ways, including:

·        To administer your booking to visit the railway and join activities here

·        To administer your donation, including Gift Aid processing

·        To update you about our upcoming activities, events and development projects

·        To invite you to participate in voluntary surveys 

·        To maintain our organisational records and ensure that we have the most up to date preferences on how you wish us to contact you

·        To analyse and improve our website and social media services

·        To analyse your website behaviour

·        To help us work with third parties to ensure we send you targeted communications that are in accordance with the consents you have given

 

4.                What we do to keep your information safe and who has access to it 

We place great importance on the security of your personal information and will always try to take appropriate precautions to protect it. 

 

We establish our website(s) with the industry-recommended security features and carry out regular security reviews and investigations of any potential breaches. 

We ensure that only authorised Welshpool & Llanfair Light Railway staff and contractors have access to your information and that they are appropriately trained to manage your data.

 

Despite all our precautions, no data can be guaranteed to be 100% secure. While we strive to protect your personal information, we cannot guarantee the security of information you disclose to us online, and you must understand that you do so at your own risk. However, any payment card details entered into our website are passed securely and directly to our payment processing providers who meet Payment Card Industry (PCI) security standards. 

 

We do use external organisations to process personal data on our behalf. When engaging a contractor company we check that they meet all relevant regulations and registrations. We also include in the contract the data protection obligations to give maximum protection of your personal information.  If the company processing the data is transferring, processing and storing your personal information outside the European Economic Area (EEA), we will take steps to provide suitable further measures to secure your personal information, such as entering into European Commission approved standard contractual clauses.

 

We may legally be required to disclose your personal information to the police or for other regulatory reasons in certain circumstances. In other circumstances, we will only ever share your personal information if we have your consent to do so. 

 

5.                How we keep your information up to date

We aim to be in contact with our members at least once a quarter and at least once a year with visitors who ask to be kept informed. We will update any changes notified to us promptly. 

You can write to us, e-mail us or call us with any changes.

From time to time, we may use databases such as the Post Office’s National Change of Address register to update our records.  

 

6.                How long we keep your information for

We will hold your personal information on our database on our systems for as long as is necessary for the relevant activity. For instance, we will keep a record of Gift Aid donations you have made for at least six years.  When memberships lapse we will usually retain your record for five years, as lapsed members do often return to membership later. If you ask us to remove your records sooner, we will do so.

If you ask us to stop sending you marketing materials and newsletters, we will keep a record of your contact details and preferences to enable us to comply with the request not to contact you.

 

7.                Your right to your information

We collect and store your personal information so that The Welshpool & Llanfair Light Railway can communicate with our regular visitors and supporters.

 

Although in most cases we will seek consent to process your personal information, we may in some instances process your information without consent when we are legally allowed to do so. This will only be where it is in our legitimate interests to do so and where we are confident that this processing is not likely to prejudice your legitimate interests or rights and freedoms.

 

Where we are processing your personal information based on consent that you have given us, you are entitled to withdraw that consent. You have the right to ask us to stop processing your personal information at any time, subject to us having a legal obligation to retain certain information, for instance for audit.

 

You have the right to request a copy of the information we hold about you, a Subject Access Request (SAR). Our contact details are at the top of this privacy policy.

If the information is incorrect or you disagree with it, you have the right to ask us to correct it or erase it. We will promptly correct any inaccuracies and discuss with you any other changes you request.

 

For more information on these rights please read the relevant guidance issued by the Information Commissioner’s Office (ICO) at: 

 https://ico.org.uk/for-the-public/is-my-information-being-handled-correctly/

 

If you would like to make a complaint about how we process your personal data, please contact our Data Protection Officer, details above.

 

If you are not satisfied with how your complaint is dealt with, you should contact the Information Commissioner’s Office (www.ico.org.uk). Alternatively, you are entitled to make a complaint to the Information Commissioner’s Office without first referring your complaint to us.  

 

DigiTickets Privacy Policy

Who we are

In this privacy policy references to "we", "us" and "our" are to Welshpool & Llanfair Light Railway. References to "our Website" or "the Website" are to wllr.digitickets.co.uk.

Information collected and its use

The information we collect via the Website may include:

1. Any personal details you knowingly provide us with through forms and our email, such as name, address, telephone number etc.
2. In order to effectively process credit or debit card transactions it may be necessary for the bank or card processing agency to verify your personal details for authorisation outside the European Economic Area (EEA). Such information will not be transferred out of the EEA for any other purpose.
3. Your preferences and use of email updates, recorded by emails we send you (if you select to receive email updates on products and offers).
4. Your IP Address, this is a string of numbers unique to your computer that is recorded by our web server when you request any page or component on the Website. This information is used to monitor your usage of the Website.
5. Information about your device such as your web browser, screen resolution and operating system. This information is used to ensure we continue to support the different devices used by our customers.
6. Data recorded by the Website which allows us to recognise you and your preferred settings, this saves you from re-entering information on return visits to the site. Such data is recorded locally on your computer through the use of cookies. Most browsers can be programmed to reject, or warn you before downloading cookies, information regarding this may be found in your browsers 'help' facility.

We do not store any credit card details.

What we do with your information

Any personal information we collect from this website will be used in accordance with the Data Protection Act 1998 and other applicable laws. The details we collect will be used:

1. To process your order, to provide after sales service (we may pass your details to another organisation to supply/deliver products or services you have purchased and/or to provide after-sales service);
2. In certain cases we may use your email address to send you information on our other products and services. In such a case you will be offered the option to opt in/out before completing your purchase.

We may need to pass the information we collect to other companies for administrative purposes. We may use third parties to carry out certain activities, such as processing and sorting data, monitoring how customers use the Website and issuing our e-mails for us. Third parties will not be allowed to use your personal information for their own purposes.

Cookie Policy

Like many websites we use cookies to store and then retrieve small bits of information on your computer when you visit. This information is used to make the site work as you expect it to. It is not personally identifiable to you, but it can be used to give you a more personalised web experience.

Some of the information stored is put there by other companies whose software we have added to the site, and this can also impact your experience of other websites you may visit after leaving ours.

If you continue to use this site without taking action to prevent the storage of this information, you are effectively agreeing to this use.

If you want to learn more about the general uses of cookies, including how to stop them being stored by your computer, please visit Cookiepedia - all about cookies.

Below is a list of the different types of cookies used on this site, and an explanation of what they are used for. If you would like any more information, please get in touch.

Cookie	Name	Expiration Time	Purpose
Shopping Basket	PHPSESSID	24 minutes	This cookie is used to keep track of what items are in a user's shopping basket.
Cookie Consent	dtAnalyticsConsent	1 year	This cookie is used to monitor the users consent for analytical cookies on our site. No user data is collected without this being enabled.
Google Analytics	_ga _ga_container-id	2 years	These cookies are used to collect information about how visitors use our site. We use the information to compile reports and to help us improve the site. The cookies collect information in an anonymous form, including the number of visitors to the site, where visitors have come to the site from and the pages they visited. Read Google's overview of privacy and safeguarding data
	_gid	24 hours
	_gat_tracker-name	1 minute
Microsoft Clarity	_clck	1 year	These cookies are used to collect information about how visitors use our site. We use the information to compile reports and to help us improve the site. The cookies collect information in an anonymous form, including the number of visitors to the site and how they interact with the website. Read Microsoft Clarity's Cookie Overview and Data Retention Policy.
	_clsk	1 year
	CLID	1 year
	ANONCHK	1 year
	MR	1 year
	MUID	1 year
	SM	1 year
New Relic	__cfduid	1 year	This cookie is used to collect information about visitor's experience of the site in terms of performance. This helps us to monitor that our systems are working quickly and effectively, and to identify any problematic areas. Visit the New Relic website

Your Rights

You have the right to request a copy of any information that we currently hold about you. In order to receive such information please send your contact details including address to the following address:
Welshpool & Llanfair Light Railway
The Station, Llanfair Caereinion, Welshpool, Powys
SY21 0SF

Other websites

This privacy policy only covers this website. Any other websites which may be linked to by our website are subject to their own policy, which may differ from ours.