Privacy notice

Who we are

Burntwood Spoonies Community ("BSC", "we") is a peer support community for people affected by chronic illness and disability. BSC is currently an unincorporated association without its own bank account or legal registration, so for data protection purposes Sha Taylor acts as data controller on the community's behalf for the information collected on this site. If you have any question about your data, or want to exercise any of the rights below, email tickets@burntwoodspoonies.uk.

What we collect, and why

• Your name and email address — to record your booking and send your confirmation email. We need these to provide what you've paid for (in legal terms, performance of a contract).
• Ticket quantity and amount paid — to manage event capacity and reconcile payments.
• Dietary or access requirements (optional) — solely to arrange catering and access on the night. Please give totals only (e.g. "2 × vegetarian") rather than naming individuals.

Dietary and access notes can include health information, which UK data protection law treats as special category data. We process this only with your explicit consent, which we ask for on the booking form. You can withdraw consent at any time by emailing us — if you do, we will delete your dietary or access notes straight away (your booking itself remains valid).

Payments

Payments are taken by Stripe on their secure payment page. We never see or store your card details, and we do not pass your dietary or access notes to Stripe. Because BSC doesn't yet have its own bank account, ticket payments are currently received into a personal Stripe account belonging to one of our volunteers, as an interim arrangement while the community works towards formal constitution and its own banking — this will move to a BSC account as soon as one is in place. Stripe holds the payment record (your name, email and the amount) under its own privacy notice.

Where your data lives

Bookings are stored in a database on our own server in the EU, accessible only to the BSC volunteers who administer the event. Encrypted backups are kept for up to 14 days. We use no analytics, no advertising and no tracking; the public pages of this site set no cookies at all (one essential cookie is used only by volunteers signing in to the admin area).

How long we keep it

• Dietary and access notes are deleted automatically 7 days after the event.
• The rest of your booking record is deleted automatically 90 days after the event.
• Backups age out within 14 days of any deletion.

After that, only Stripe's payment records remain, kept by Stripe for its own legal and accounting purposes.

Your rights

You can ask us at any time to: see the data we hold about you (access); correct it (rectification); delete it (erasure); restrict or object to our use of it; or withdraw your consent. Email tickets@burntwoodspoonies.uk and we will respond within one month.

If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Version 2026-07-29. If this notice changes, the version shown here (and recorded against your booking when you consented) changes with it.