We are always thrilled when anyone reads our blog, follows us on social media or comments on the website. It's important for us to let you know that we don't do anything weird with your personal data - so here's a rundown of what we do.
Privacy Policies are SO last season darhling, so we're calling this our Transparency Notice (catchy eh?). For the nerds out there (...that'll be me, then) it's based on Article 13 of the GDPR.
Who even are we?
Secret Truro was conceived and is managed by Amanda Williams, who owns Wavemedia (SW) Ltd (a marketing & data protection consultancy). The Registered Office is c/o Whyfield Accountants, Threemilestone, Truro. We have a number of writers who create content to make the blog interesting and fun.
This website is a brochure site which champions local organisations and hopefully does it’s bit to make Truro and even better place to live, work and play.
You can contact us by emailing email@example.com
What data do we collect (er, not that much actually), why and what's the legal basis?
We have got cookies set on this website which help us see which pages are popular and that helps us plan our content. This is with your consent. We are working on a better cookie plugin which gives you more control, but we don’t use third party tracking cookies and there aren’t any social media pixels either.
If you choose to ‘LIKE’ a blog post, your IP address will be logged so that you can’t ‘like’ multiple times and this action is stored in your browser’s local storage. You are doing this with your consent and can easily unlike the post again if you are uncomfortable with your IP address being logged.
If you send us an email, we'll see your name and email address and we'll correspond and have a bit of a chat, with your consent.
If you contact us on social media, we'll see your social media profile including your name, with your consent.
If we are out and about and take photos with you, we'll ask for your consent first.
If you are an organisation we are working with to produce content, we'll collect and process your name and contact details so that we can write a lovely blog post about you. If this is sponsored content, we'll process your payment information and this will be because we have a contract with you.
If you are coming to an event, we will be collecting your name and contact details via Eventbrite. Some events are run by other organisations and we will make this clear at the time.
If you want to post a job on the Job Page, we won’t be collecting any data, but merely act as a signpost to your organisation. We’d post your organisation and any personal data (such as your name and contact details) with your consent.
We're very easy going and if you want to withdraw your consent to any of these, that's all fine with us. You are in control of your personal data and how you interact with us.
Who do we share your data with?
We don't actively share your data with anyone. When you post on our social media profiles or post a comment on this blog, that will be seen by other users.
We don't have an email marketing list at present, if this changes, we'll invite you all in again, but we'd never do anything weird or odd with that data.
If we do Facebook Advertising, this will all be within the Facebook platform. We won't use custom or lookalike audiences. Because we have a Facebook Page, we are considered ‘Joint Controllers’ with Facebook, so you’ll find a copy of this Notice on our Facebook Page too.
We don't share personal data with our other writers - they see what the public can see. That's all.
If you are a company we are working with to produce content, we would only share your personal data with other companies when you have consented for us to do so.
How long are we keeping your data for?
If you send us an email, we'll correspond get to know each other - perhaps even collaborate. But once that enquiry is dealt with we'll have a good Spring clean of our emails every year.
If we're working together and you've paid for sponsored content, then we'll keep details on our accounting system for 7 years.
The rest is up to you - if you want to delete comments on social media or on this blog, then you are welcome and we won't mind one little bit. Promise.
Do we transfer your personal data outside of the EEA?
We make sure that the systems and apps we use are compliant with current data protection legislation. This means that we've checked that everything has the proper safeguards in place. The website is hosted on SquareSpace which is in the EU. I use GMail for mailing out which is also based in Ireland.
You have new rights
You have a right to:
Right to know about automated processing.
You can get in touch with the ICO directly here
Our ICO Registration Number is: ZA235037
We don't do any automated processing
We won't profile you and troll you around the internet with pictures of handbags. Or bring about the fall of Western Democracy. Pinkie Promise.
Thanks for hanging out until the end - hopefully it wasn't too painful. Get in touch if you want to know more.