Privacy policy

Last updated: 2 October 2026. This policy explains what personal information Friends of the Dart collects through this website and the Household River Care Manual (care.friendsofthedart.org), why, who else handles it for us, and your rights.

Who we are

Friends of the Dart CIC is a community interest company registered in England and Wales (company number 15411017). Our registered office is 2 Bridge Farm Offices, Harberton, Totnes, Devon, TQ9 7PP. We are the controller of the personal information described here.

For anything to do with your information, email hello@friendsofthedart.org.

What we collect and why

We only collect what you choose to give us. You can read the website without giving us any personal information.

Contact and volunteer forms

• What: your name, email address and message (and a topic, if you choose one).
• Why: to reply to you, or to follow up your interest in volunteering. A copy of each message is emailed to our team so we can answer quickly.
• Lawful basis: our legitimate interest in responding to people who contact us.
• How long: up to two years after our last contact with you, then deleted.

Newsletter

• What: your email address, and the date, form and internet (IP) address you signed up from, as a record of your consent.
• Why: to send you our newsletter. You confirm by clicking a link in an email before anything is sent, and every newsletter has an unsubscribe link. Our newsletter service may tell us whether emails are opened and which links are clicked, so we can improve them.
• Lawful basis: your consent, which you can withdraw at any time.
• How long: until you unsubscribe.

Household pledges

• What: the pledges you choose, your parish and the first part of your postcode (for example TQ9), and optionally your household size, drainage, how you heard about us, your first name and your email address.
• Why: we report pledges as totals by parish, to show funders and regulators what the community is doing for the river. Your name and email are used only for the things you tick: the newsletter, events, or a single follow-up email after six months. We never publish individual pledges or pass them to the Environment Agency, South West Water or anyone else.
• Lawful basis: your consent.
• How long: your name and email are deleted two years after your pledge, or sooner if you ask. Pledge totals are kept without them.

Donations

• What: donations are made through PayPal, which handles your payment details. PayPal tells us your name, email address and the amount you gave.
• Why: to thank you and to keep our accounts.
• Lawful basis: our legal obligation to keep financial records, and our legitimate interest in thanking supporters.
• How long: six years, as required for financial records.

Spam protection

Our forms use Cloudflare Turnstile to tell people from automated spam. When you use a form, Turnstile checks your IP address and basic details about your browser and connection. It does not identify you, and we only receive a pass or fail. Our lawful basis is our legitimate interest in keeping the forms free of spam.

People who edit the website

If you have an account to edit the site, we hold your name, email address and role.

Who handles your information for us

We use a small number of service providers. Each only uses your information to provide their service to us, under a contract that protects it.

• Hostinger hosts the website and its database on a server in the United Kingdom.
• Cloudflare stores encrypted backups of the website (kept for up to 90 days) in its European Union data centres, and runs Turnstile spam protection.
• MailerLite (Lithuania) sends our newsletter and stores subscribers in the European Union.
• Resend sends emails from the website, such as message notifications to our team and password resets for editors.
• PayPal processes donations. PayPal is responsible for your payment details under its own privacy policy.

Some of these providers are based in, or may access data from, the United States. Where that happens, the transfer is protected by the UK–US data bridge or the UK’s standard contractual clauses.

We do not sell your information, and we do not share it with anyone else unless the law requires us to.

Cookies

This website does not set cookies for visitors, and it has no advertising or analytics trackers. Our fonts are served from our own server, so reading the site does not send your details to anyone else.

Cookies are only used for people who sign in to edit the site, to keep them signed in. Cloudflare Turnstile may store small pieces of information that are strictly necessary for its spam check.

Links to other sites, such as River Hub, YouTube, Google Docs or PayPal, take you to services with their own privacy policies.

Your rights

You have the right to:

• ask for a copy of the information we hold about you;
• ask us to correct it or delete it;
• ask us to limit how we use it, or object to us using it;
• withdraw your consent at any time, for example by unsubscribing from the newsletter;
• ask for your information in a format you can take elsewhere.

Email hello@friendsofthedart.org to use any of these rights. We will reply within one month.

Complaints

If you are unhappy with how we have handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner’s Office: ico.org.uk or 0303 123 1113.

Changes to this policy

We will update this page if the way we use personal information changes, and change the date at the top.