Privacy Policy

Introduction

This policy explains how WeyFurs ("we", "us", "our") collects, uses, and stores personal data when you use our website or contact us. WeyFurs is a volunteer-run community organisation based in Guildford, Surrey, UK.

We are committed to protecting your privacy and handling your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

If you have any questions about this policy, please contact us.

Personal Data We Collect

We only collect personal data that you actively provide to us. This may include:

• Contact form submissions: your name, email address, subject, and the content of your message.
• Support/safety reports: if you report a conduct concern to us, we retain a record for moderation purposes.

We do not collect payment information, run advertising trackers, or sell any data to third parties.

How We Use Your Data

We use the personal data you provide solely for the following purposes:

• Responding to your enquiries and messages.
• Community moderation, reviewing and acting on conduct reports.
• Safety administration, maintaining records of conduct incidents as required for community safety.

We do not use your data for any marketing or advertising purposes without your explicit consent.

Sharing Your Data

We do not sell or share your personal data with third parties except in the following circumstances:

• Legal obligation: if required to do so by law or a competent authority (e.g. police, court order).
• Safety: if disclosure is necessary to protect the safety of any individual.

Data Retention

Contact messages and moderation records are stored in our secure, access-controlled database and are retained only for as long as reasonably necessary:

• General enquiries: up to 12 months after the conversation is resolved.
• Safety/conduct records: retained for as long as necessary to protect the community.

Access to stored data is restricted to authorised WeyFurs administrators only.

Cookies

This website uses a single session cookie to maintain your login state if you are a site administrator. This cookie contains no personally identifiable information and is deleted when you close your browser or log out.

We do not use advertising cookies, analytics tracking cookies, or third-party tracking cookies of any kind.

Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:

• Encrypted HTTPS communications.
• Access-controlled admin panel protected by hashed credentials.
• Server-side input validation and CSRF protection.

However, no system is completely secure. We cannot guarantee the absolute security of data transmitted over the internet.

Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access: you may request a copy of personal data we hold about you.
• Right to rectification: you may ask us to correct inaccurate data.
• Right to erasure: you may request deletion of your data, subject to legal/safety obligations.
• Right to restrict processing: you may ask us to limit how we use your data.
• Right to complain: you may lodge a complaint with the Information Commissioner's Office (ICO).

To exercise any of these rights, please contact us. We will respond within 30 days.

Contact & Questions

For any questions about this Privacy Policy or your personal data, please use our contact page. We will always try to address your query promptly and helpfully.

If you are unsatisfied with our response, you can also contact the Information Commissioner's Office at ico.org.uk.