Privacy Policy

1. Who we are

Cornwall infoHub ("we", "us", "our") is a community resource operated on behalf of Churches Together in Cornwall. We aggregate publicly available events, news and announcements from faith communities across Cornwall. Our website is located at https://1lk1bqo8ed.c40.airoapp.ai.

For any privacy-related enquiries, please contact us via the contact form on this site.

2. What data we collect

2a. Data you give us directly

• Newsletter subscriptions: your email address, collected when you subscribe via the Subscribe page.
• Church listing requests: your name, email address, church name, location and any message you include when submitting the "Add Your Church" form.

2b. Data collected automatically

• Server logs: standard web-server access logs (IP address, browser type, pages visited, timestamps). These are retained for up to 30 days for security and diagnostic purposes.
• Cookies: we use a single session cookie to maintain your browsing session. We do not use advertising, tracking or analytics cookies.

2c. Publicly available church data

We automatically collect events and news from the public websites of churches and faith communities in Cornwall. This data is already publicly published by those organisations. We do not collect personal data about individual church members through this process.

3. How we use your data

• Email address (newsletter): to send you our weekly digest of Cornwall church events and news. You can unsubscribe at any time using the link in any newsletter email.
• Church listing requests: to respond to your enquiry and, if appropriate, add your church to our directory.
• Server logs: to maintain the security and performance of this website.

We do not sell, rent or share your personal data with third parties for marketing purposes.

4. Legal basis for processing (UK GDPR)

• Newsletter subscriptions: your consent (Article 6(1)(a) UK GDPR). You may withdraw consent at any time.
• Church listing requests: legitimate interests (Article 6(1)(f)) — responding to enquiries about our community directory.
• Server logs: legitimate interests — maintaining the security and integrity of our service.

5. Data retention

• Newsletter email addresses: retained until you unsubscribe or request deletion.
• Church listing enquiries: retained for up to 2 years, then deleted.
• Server logs: retained for up to 30 days.

6. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict processing
• Withdraw consent at any time (for newsletter subscriptions)
• Lodge a complaint with the Information Commissioner's Office (ICO)

To exercise any of these rights, please contact us via the contact form.

7. Third-party services

• Google Maps: the Church Map page loads the Google Maps JavaScript API. Google's own Privacy Policy applies to data processed by that service.
• Email delivery: newsletter emails are sent via a third-party email relay. Your email address is transmitted to that service solely for the purpose of delivering your newsletter.

8. Cookies

We use one strictly necessary session cookie to maintain your browsing session. This cookie is deleted when you close your browser. We do not use any analytics, advertising or tracking cookies, and we do not use any cookie consent banner because no non-essential cookies are set.

9. Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss or disclosure. All data is stored on servers within the UK/EEA.

10. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of the site after changes are posted constitutes acceptance of the updated policy.