Hebden Royd Town Council (“we”, “us”, “our”) is the data controller for the What’s On Hebden Bridge website.
Hebden Royd Town Council
The Town Hall
St George’s Street
Hebden Bridge
HX7 7BY
Email: info@hebdenroydtowncouncil.gov.uk
The Council has appointed a Data Protection Officer (DPO).
Email: dpo@theprivacyworx.com
This notice explains how we collect and use personal data when you use the What’s On Hebden Bridge website, including creating an account, submitting events, and interacting with the platform.
We collect personal data directly from you when you create an account, submit event listings or contact us. We also collect data automatically through the operation and security of the website. In some cases, we may receive personal data from third parties where event information is submitted on behalf of other individuals or organisations.
We may process your name, email address, telephone number and organisation details, account login and profile information, event details and content you submit, communications between you and the Council, IP address, device and browser information, and online identifiers and behavioural data collected through cookies and analytics tools. This may include personal data about other individuals where users submit event information on their behalf.
User account creation and administration
We process personal data to create and manage user accounts, enable users to submit and manage event listings, and provide account-related support.
Lawful basis: Article 6(1)(b) – performance of a contract or taking steps at the request of the user.
Event submission, review and publication
We process personal data to receive, review, moderate, approve and publish event listings submitted to the platform.
Lawful basis: Article 6(1)(b) – where necessary to provide the submission and listing service requested by the user; and Article 6(1)(e) – where necessary for the performance of a task carried out in the public interest, namely supporting access to local community and cultural information.
User communications and service administration
We process personal data to communicate with users about their accounts, submissions, moderation decisions, technical issues and enquiries.
Lawful basis: Article 6(1)(b) – performance of a contract or steps requested by the user.
Website operation, security and misuse prevention
We process personal data to operate, maintain and secure the website, detect errors, prevent misuse, and protect the integrity of the platform.
Lawful basis: Article 6(1)(e) – task carried out in the public interest.
Analytics and service improvement
We process personal data to understand how the website is used and improve content, performance and user experience.
Lawful basis: Article 6(1)(a) – consent.
We use cookies and similar technologies to operate and improve the website. These include analytics cookies, session and functionality cookies, and tools used for error monitoring and diagnostics.
Analytics cookies may include services such as Google Analytics, Matomo and PostHog, which collect information about how users interact with the site. These technologies may process IP addresses and assign unique identifiers to users.
We also use tools such as Sentry to monitor errors and improve performance.
Where cookies are not strictly necessary, they are only used with your consent. You can manage your preferences using the cookie controls on the website.
We may share personal data with website hosting and support providers, analytics and monitoring service providers, moderators and administrators managing site content, and service providers supporting the operation of the platform. Some third-party providers act as data processors on our behalf, while others may act as independent data controllers. We do not sell personal data.
Some service providers may process personal data outside the UK. Where this occurs, appropriate safeguards are in place in accordance with UK data protection law.
Personal data is retained while your account or listing remains active and for a limited period afterwards to allow for administration, moderation and audit purposes, after which it is securely deleted. Technical and analytics data is retained in line with service provider settings and data minimisation principles.
You have the right to access your personal data, request correction of inaccurate data, request erasure in certain circumstances, request restriction of processing, object to processing, withdraw consent where consent is relied upon, and lodge a complaint with the Information Commissioner’s Office (ICO). Further information is available at www.ico.org.uk.
We do not use automated decision-making or profiling.
In some cases, we may receive personal data from third parties, such as event organisers submitting information about others. Where required by law, we will provide individuals with privacy information unless a statutory exemption applies.