Who we are
This website is operated by the Bidwell Brook Partnership (“we”, “us”). You can contact us at info@bidwellbrook.org. This policy explains how we use cookies and how we keep your data secure. It applies to bidwellbrook.org and any sub-pages.
Comments
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Media
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Cookies
What are cookies?
Small text files placed on your device to make the site work, remember choices, and (with your permission) help us improve it.
How we use cookies
- Strictly necessary (always on): required for core functions such as page navigation, load balancing, and remembering your cookie choices.
- Analytics (optional): to understand site usage and improve content (e.g., GA4 or Matomo). These run only if you consent. IPs are anonymised and data is aggregated.
- Third-party media/maps (optional): embedded content (e.g., YouTube/Vimeo/Mapbox/Google Maps, or form tools like reCAPTCHA). These set cookies only if you consent.
Your choices
On your first visit we ask for consent (per UK GDPR and PECR). You can change or withdraw consent anytime via Cookie settings (link in footer). You can also block/delete cookies in your browser; the site may not work as intended without required cookies.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Security
We take reasonable technical and organisational measures to protect your data:
Incident response: if we become aware of a personal-data breach, we assess risk and, where required, notify the ICO and affected users.
HTTPS/TLS across the site; HSTS enabled.
Data minimisation: we collect only what we need (e.g., contact form submissions: name, email, message). Please don’t send sensitive information via forms/email.
Access controls: least-privilege access, strong authentication, and audit trails for admin accounts.
Patching & backups: servers, CMS and plugins are kept up to date; regular off-site backups.
Hosting & email: data is processed by our hosting/email providers [insert provider names] under appropriate data processing terms. Some services may store data outside the UK; where relevant we use UK/EU adequacy decisions or Standard Contractual Clauses.
Third-party services: where we use processors (e.g., analytics, form/security tools), they act on our instructions under contract.
Your rights (UK GDPR)
You can request access, correction, deletion, restriction, or portability of your personal data, or object to processing. To exercise these rights, contact info@bidwellbrook.org. You can also complain to the Information Commissioner’s Office at ico.org.uk.
Changes to this policy
We may update this page to reflect changes in the site or the law. Significant changes will be highlighted on this page.
Last updated: 13 November 2025