Privacy Policy

Glastonbury TrainLink is committed to protecting and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This Privacy Policy explains how we collect, use, and protect your personal data when you visit our website glastonburytrainlink.org.

Information We Collect

We may collect and process the following information:

Personal Data: Name, email address, telephone number, postal address, or any details you provide voluntarily (e.g., through contact forms, account creation, or newsletter sign-up).
Technical Data: IP address, browser type, device identifiers, operating system, and information about how you use our site.
Cookies and Tracking: We use cookies and similar technologies to enhance your experience and analyse website usage. For more details, see our Cookie Policy.

How We Use Your Data

We process your personal data for the following purposes, under lawful bases defined in the UK GDPR:

To provide our services (performance of a contract).
To respond to your enquiries and communicate with you (legitimate interests).
To improve our website, monitor usage, and ensure security (legitimate interests).
To send marketing communications (with your consent, which you can withdraw at any time).
To comply with legal or regulatory obligations.

Data Sharing and Transfers

We will not sell or rent your personal data. We may share data with:

Trusted third-party service providers (e.g., hosting, analytics, email services) under strict confidentiality agreements.
Legal authorities, if required by law.
Successors in the event of a business merger, sale, or transfer.

If we transfer data outside the UK, we will ensure appropriate safeguards are in place (e.g., adequacy decision, standard contractual clauses).

Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including to meet legal, accounting, or reporting requirements.

Your Rights Under UK GDPR

You have the following rights regarding your personal data:

Right of access – request copies of your personal data.
Right to rectification – request correction of inaccurate or incomplete data.
Right to erasure – request deletion of your data in certain circumstances.
Right to restrict processing – request limitation on how we process your data.
Right to data portability – request transfer of your data to another organisation.
Right to object – object to processing based on legitimate interests or direct marketing.
Rights in relation to automated decision-making and profiling.

To exercise any of these rights, please contact us at info@glastonburytrainlink.org

Data Security

We take appropriate technical and organisational measures to protect your personal data. However, no online transmission or storage system is completely secure.

Children’s Privacy

Our website is not intended for children under 13, and we do not knowingly collect their data.

Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact us at:
Email: info@glastonburytrainlink.org

If you are not satisfied with our response, you also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection (www.ico.org.uk).

Legal Disclaimer

The contents of this Privacy Policy are provided for general information purposes only and do not constitute legal or professional advice. While we take reasonable steps to ensure the information is accurate and up to date, we make no representations, warranties, or guarantees, whether express or implied, regarding the completeness, accuracy, or reliability of this Privacy Policy.

By accessing and using this website, you acknowledge and agree that:

We shall not be held liable for any loss, damage, or inconvenience arising from your reliance on this Privacy Policy or from your use of our website.
This Privacy Policy may be updated or amended from time to time, and it is your responsibility to review it periodically.
Nothing in this Privacy Policy excludes or limits our liability for death or personal injury caused by our negligence, for fraud or fraudulent misrepresentation, or for any other liability that cannot be excluded or limited under applicable UK law.

This Privacy Policy and any disputes or claims arising from it are governed by the laws of England and Wales, and the courts of England and Wales shall have exclusive jurisdiction.