Privacy Policy

Privacy Policy

Ogwen Valley Mountain Rescue Organisation

Last updated: 27 January 2026

1. Who we are

Ogwen Valley Mountain Rescue Organisation (OVMRO) is a UK voluntary mountain rescue charity.

Website: https://ogwen-rescue.org.uk

For the purposes of UK data protection law, OVMRO is the data controller for personal data processed via this website.

2. What personal data we collect

We may collect and process the following categories of personal data.

a) Website enquiries and contact

  • Name
  • Email address
  • Message content
  • Any personal data you choose to provide

b) Online shop orders and donations

When you place an order or make a donation via our website, we collect:

  • Name
  • Billing address
  • Delivery address (where applicable)
  • Email address
  • Order and transaction details

Payment card details are not stored by us. Payments are processed securely by third-party payment providers.

c) Gift Aid Donations

Where you choose to make a Gift Aid declaration, we collect:

  • Full name
  • Home address (as required by HMRC)
  • Your Gift Aid declaration confirming your eligibility

d) Website usage and security

  • IP address
  • Browser and device information
  • Pages visited and timestamps

This data is used for site administration, security, and performance monitoring.

3. How we use your data

We use personal data to:

  • Respond to enquiries and communications
  • Process and fulfil online shop orders
  • Administer donations and Gift Aid claims
  • Meet legal, accounting, and regulatory obligations
  • Maintain website security and prevent misuse

We do not sell personal data.

4. Lawful bases for processing

Under UK GDPR, we rely on the following lawful bases:

  • Consent – where you contact us or choose to receive communications
  • Contract – to process orders and donations
  • Legal obligation – for financial records and Gift Aid claims
  • Legitimate interests – for website operation, security, and administration

5. Payments and third-party services

Our website is built using WordPress, and the online shop is provided via WooCommerce.

We use trusted third-party service providers for:

  • Payment processing
  • Website hosting and backups
  • Email delivery
  • Security monitoring

These providers process personal data only where necessary and in accordance with their own privacy policies.

6. Gift Aid and HMRC

Gift Aid data is processed solely to support Gift Aid claims submitted to HM Revenue & Customs (HMRC).

Gift Aid information:

  • Is processed under legal obligation
  • Is not used for marketing
  • Is retained in line with HMRC record-keeping requirements

7. Cookies

This website uses cookies to:

  • Ensure core site functionality
  • Support the operation of the online shop
  • Improve security and performance

Where required, cookie consent controls are provided.

8. Data retention

We retain personal data only for as long as necessary:

  • Order and donation records: retained for legal and accounting purposes
  • Gift Aid records: retained in line with HMRC requirements
  • Security and access logs: retained for a limited period

9. Your rights

Under UK GDPR, you have the right to:

  • Access your personal data
  • Request correction or deletion
  • Restrict or object to processing
  • Withdraw consent where processing is based on consent
  • Lodge a complaint with the Information Commissioner’s Office (ICO)

Requests can be made using the contact details above.

10. Data security

We take appropriate technical and organisational measures to protect personal data, including secure hosting, access controls, and regular system updates.

No method of internet transmission or storage is completely secure, but reasonable safeguards are in place.

11. Children’s data

This website is not directed at children, and we do not knowingly collect personal data from children.

12. Changes to this policy

This policy may be updated from time to time. The current version will always be published on this page.