Privacy Policy
Who we are
Our website address is: http://bodminrailway.co.uk.
What personal data we collect and why we collect it
Comments
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Media
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Contact forms
Cookies
If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select "Remember Me", your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Analytics
Who we share your data with
How long we retain your data
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
What rights you have over your data
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Where we send your data
Visitor comments may be checked through an automated spam detection service.
Your contact information
Additional information
How we protect your data
What data breach procedures we have in place
What third parties we receive data from
What automated decision making and/or profiling we do with user data
Industry regulatory disclosure requirements
Privacy Policy and Fair Processing Notice
Our approach to data protection is simple and clear. We use your information in a sensible way, which enables us to do our job well, without taking any liberties with your privacy.
- We respect your personal data and take its security very seriously.
- We only hold what data we need for the purpose for which we obtained it.
- We never share your data with any advertisers.
- We delete your data when it’s no longer required to do our job properly.
- You have privacy rights, and we honour them
- We are happy to answer your questions. Our contact details can be found at the end of this notice.
Data Collection
We don’t actively collect data on you, as a visitor to our site. We do have a few systems which log data about visitors for security and statistical uses. This data is collected by pretty much every website out there – whether you know it or not. We’ve got nothing to hide so here’s what we collect.
Analytics.
Analytics are a way of seeing how people are using a website – data like which pages are being visited, what browser you are using or what buttons people like to click on.
We use Google Analytics which stores some data on users’ computers in the form of cookies (see the Our Cookies section further down). Google will store this information. Google’s privacy policy is available at: https://policies.google.com/privacy.
Security
Any online application or website is at risk of being hacked. We use a variety of security techniques to ensure our website is a safe place to visit. Some of those tools log IP addresses, or other information similar to that collected by analytics. IP addresses are like the street names of the internet, and can show actual, real-world locations. These IP addresses can be checked against known lists which record known spammers, and automatically block them from using our site. These IPs can be recorded in logs, which are cleared at sensible intervals (no more than 60 days). Some of these process are managed by external services – which are safe and secure. See Your data and the EEA below.
It’s difficult, and frankly not very interesting for us to look at those IP addresses, but if you do try to hack our site we do get a notification. So if you really don’t want us to see your IP address, don’t try to hack us.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracing your interaction with the embedded content if you have an account and are logged in to that website.
How long we retain your data
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.
Our Cookies
Our cookies aren’t used to collect data about you personally – they’re more like markers to help us recognise repeat visitors in a way which keeps them anonymous. We also use cookies to keep the experience on the site persistent – which is to say, if you click to get rid of that annoying cookie notice, we use a cookie to put a marker on your computer saying “don’t show me the cookie notice, ok?” (more or less).
Click here for a full list of the cookies our site uses.
Your data and the EEA
We don’t transfer your data anywhere, but we need to specifically tell you that we do not transfer or process these data outside the European Economic Area – the area covered by the GDPR regulations.
We do use third party services to process some of the data outlined above – and some of these may be outside the GDPR. These are vetted an either have specific data protections policies, or, on the whole, are part of Privacy Shield (a sort of framework to make sure some areas outside the GDPR comply to standards).
Your rights
You have rights in respect of our processing of your personal data which are:
- To access to your personal data and information about our processing of it. You also have the right to request a copy of your personal data (but we will need to remove information about other people).
- To rectify incorrect personal data that we are processing. To request that we erase your personal data if: we no longer need it;
- if we are processing your personal data by consent and you withdraw that consent;
- if we no longer have a legitimate ground to process your personal data; or
- we are processing your personal data unlawfully
- To restrict our processing of your personal data if it is based upon legitimate interest.
- To object to our processing if our processing is based upon legitimate interest.
- To request that your personal data be transferred from us to another company if we were processing your data under a contract or with your consent and the processing is carried out automated means.
- If you want to exercise any of these rights, please contact us using the details at the end of this notice.
You also have the right to lodge a complaint about our processing with the UK’s Information Commissioner’s Office.
Contact us
Bodmin & Wenford Railway
Bodmin General Station
Bodmin
Cornwall
PL31 1AQ
Our Cookies
Cookie Name: __cfduid
Issued By: Cloudflare
Purpose: Used to identify individual clients behind a shared IP address and apply security settings on a per-client basis. It does not correspond to any user ID in your web application, and does not store any personally identifiable information.
Cookie Name: _ga
Issued By: Google Analytics
Purpose: Registers unique ID that is used to generate statistical data on how the visitor uses the website.
Cookie Name: _gat
Issued By: Google Analytics
Purpose: Used by Google Analytics to throttle request rate. Googles equivalent of saying “don’t bother me so much”
Cookie Name: _gid
Issued By: Google Analytics
Purpose: Registers a unique ID that is used to generate statistical data on how the visitor uses the website.
Cookie Name: cookieconsent_status
Issued By: Bodmin & Wenford Railway
Purpose: This is the one that gets rid of the cookie notice.