Privacy Notice
Privacy Notice
Goring Gap Active Travel (“GGAT”, “we”, “us”, “our”) Last updated: 9 September 2026
This notice explains how we collect, use, store and protect personal information when you visit www.goringgapactivetravel.co.uk, join our mailing list, contact us, make a donation, or take part in our activities (such as walks, rides, surveys or events). We are committed to handling your information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
Goring Gap Active Travel is a volunteer-run community group promoting walking, wheeling and cycling in and around Goring, Oxfordshire.
For data protection purposes, we act as the “data controller” for the personal information described in this notice.
Contact: info@goringgapactivetravel.co.uk
If you have any questions about this notice or how we handle your information, please get in touch using the details above or via our contact page.
2. Information we collect
We collect only the information needed for the purpose in question:
| Where | What we collect | Purpose |
|---|---|---|
| Contact form | Name, email address, and the content of your message | To respond to your enquiry |
| Mailing list sign-up (hosted on Google Forms) | Name and email address (and any other details you choose to provide) | To send you updates and news about GGAT activities |
| Donations page | Information used by squareup.com/gb/en to process your donation | To process and acknowledge your donation |
| Photos and video at events, walks and rides | Images (and occasionally video) that may show identifiable individuals. Where appropriate, consent is recorded using our Model Release Form. | To illustrate our work on the website, social media and in publicity materials |
| Website usage data | Standard technical data such as IP address, browser type, device type, and pages visited, typically collected via cookies or similar technologies | To operate the site, understand how it’s used, and improve it |
| Social media | If you interact with us via Instagram or Facebook (e.g. comments, messages, tags), that platform’s own privacy policy also applies | To engage with our community |
We do not knowingly collect any special category data (such as health information) except where you voluntarily share it with us, for example to tell us about accessibility needs for an event.
3. How we use your information and our legal basis
| Purpose | Legal basis under UK GDPR |
|---|---|
| Responding to enquiries via the contact form | Legitimate interests (running an effective community group) |
| Sending mailing list updates | Consent — you can withdraw this at any time |
| Processing donations | Legitimate interests / contract (fulfilling your donation), or legal obligation for any related record-keeping |
| Using photos/video of participants | Consent, usually obtained via a model release form at the time the image is taken |
| Website analytics and cookies | Consent (for non-essential cookies) or legitimate interests (for strictly necessary cookies) |
4. Photos, video and the Model Release Form
We frequently take photos and video at our walks, rides and events for use on our website and social media (including Instagram). Where practical, we ask people appearing clearly and recognisably in photos or video to complete our Model Release Form.
If you would prefer not to appear in our photos or videos, please let the photographer or event organiser know at the time, or contact us afterwards and we will remove any image of you that we control where reasonably practicable.
5. Sharing your information
We do not sell your personal information. We may share it with:
- Service providers who host or support our website and forms — for example our website hosting provider, Google (for our mailing-list sign-up form, hosted on Google Forms), and our contact-form provider (WPForms).
- Payment or donation platforms (Square) used to process donations, who will handle your payment details under their own privacy policy.
- Social media platforms (Instagram, Facebook) if you interact with our public pages, subject to those platforms’ own privacy policies.
- Regulators or authorities where we are required to by law.
We do not transfer personal data outside the UK/EEA except where our third-party providers (such as Google) do so as part of their normal service; where this happens, they are responsible for ensuring appropriate safeguards are in place.
6. Cookies
Our website may use cookies or similar technologies to:
- remember your preferences,
- understand how visitors use the site (analytics), and
- allow embedded content (such as Instagram posts) to display correctly.
You can control or delete cookies through your browser settings. Blocking some cookies may affect how the site works. [@@@If you are running a specific analytics tool such as Google Analytics, or a cookie-consent banner, add the details here so visitors know exactly what is set and can manage consent.]
7. How long we keep your information
We keep personal information only for as long as necessary for the purpose it was collected:
- Contact form enquiries: 12 months after resolution
- Mailing list: until you unsubscribe or ask us to remove you
- Donation records: as required for financial record-keeping (6 years)
- Photos/video: until no longer needed for the purpose for which consent was given, or until you ask us to remove them
8. Your rights
Under UK GDPR, you have the right to:
- ask for a copy of the personal information we hold about you (subject access request);
- ask us to correct inaccurate information;
- ask us to delete your information, in certain circumstances;
- object to, or ask us to restrict, our processing of your information;
- withdraw consent at any time (for example, unsubscribing from our mailing list); and
- ask for your data to be provided in a portable format, where applicable.
To exercise any of these rights, please contact us using the details in Section 1.
If you’re unhappy with how we’ve handled your information, you also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO): ico.org.uk or 0303 123 1113.
9. Children’s information
Our activities are open to families and people of all ages, but we do not knowingly collect personal information directly from children without a parent or guardian’s involvement (for example, via the contact form or mailing list). If you believe a child has provided us with personal information without appropriate consent, please contact us so we can address it.
10. Changes to this notice
We may update this notice from time to time, for example if we start using a new tool or service. The date at the top shows when it was last revised. We encourage you to check back periodically.
This notice covers www.goringgapactivetravel.co.uk. It does not cover external sites we link to, including Google Forms, Instagram, Facebook, or any payment/donation provider — please refer to their own privacy policies.