Legal

Data protection declaration

Draft

Community Sparx CIC's own Data Protection Declaration, published here as a web page rather than a PDF. It was on the old site but, unlike the privacy policy and both sets of terms, was missed when the legal pages were first converted — this restores it.

This page has not been checked by a solicitor in its current form. It is published so the site can be reviewed as a whole, and it must not be relied on until Community Sparx CIC has confirmed it.

The wording is Community Sparx CIC's own, taken from their 2019 document, converted word for word.

Where the original wording had been overtaken by changes in the law, we have drafted a replacement. Those passages are marked Amended draft where they appear, so they can be told apart from the original at a glance. What was changed:

Named the law that applies — UK GDPR and the Data Protection Act 2018 — since the document was written before the UK left the EU and referred to the EU regime, the same correction made to the privacy policy.

These are our drafting, not a solicitor's. Retention periods in particular are proposals and need checking against what actually happens.

Community Sparx ("we," "us," or "our") is committed to safeguarding the privacy and security of the personal data we collect from our end users based in the UK and Europe. This Data Protection Declaration outlines how we collect, use, disclose, store, and protect your personal data in accordance with applicable data protection legislation.

Amended draft

The document originally named "the General Data Protection Regulation (GDPR) and the UK Data Protection Act" here — the EU regime, and written before the UK left it. The law that actually applies is the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the same correction made to our privacy policy.

Data Collection

We collect and process the following types of personal data:

Contact Information (e.g., name, email address, phone number)
Demographic Information (e.g., age, gender, location)
Usage Data (e.g., website activity, IP addresses, browser type)
Any other information you provide to us voluntarily

Purpose of Data Processing

We collect and process personal data for the following purposes:

To provide and improve our services
To communicate with you and respond to your inquiries
To comply with legal and regulatory obligations
To analyse and understand user behaviour and preferences

Data Sharing

We do not sell, rent, or trade your personal data without your explicit consent. We may share your data with trusted third parties for the purposes outlined above, subject to strict confidentiality and security measures. These third parties include:

Service providers (e.g., hosting providers, payment processors)
Legal and regulatory authorities (where required by law)

Data Storage and Retention

We store your personal data on secure servers located within the UK. We do not transfer your data outside of the UK without your explicit consent. We retain your personal data for as long as necessary to fulfil the purposes outlined in this declaration or as required by law.

Data Security

We implement appropriate technical and organisational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. These measures include:

Encryption of sensitive data
Regular security assessments
Access controls and authentication procedures

Your Rights

You have the following rights regarding your personal data:

The right to access and obtain a copy of your data
The right to rectify any inaccurate or incomplete data
The right to request the erasure of your data
The right to restrict or object to the processing of your data
The right to data portability

To exercise your rights or if you have any questions about our data protection practices, please contact us at info@communityscheme.org.

Updates to This Declaration

We may update this Data Protection Declaration from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the updated declaration on our website and, where appropriate, by other means.

Contact Us

If you have any questions or concerns about this Data Protection Declaration or our data protection practices, please contact us at:

Community Sparx CIC
4 Sadlers Close, Hardwick
Cambridge
CB23 7YE
info@communityscheme.org