Privacy Policy

Who we are

Brecon Beacons Tourism is the organisation responsible for the personal information described in this notice (the “data controller”).

Legal name: Brecon Beacons Tourism
Company number: 06933196
Registered office: St David’s House, 48 Free Street, Brecon, Powys, Wales, LD3 7BN
Email: julie@breconbeaconstourism.co.uk
Telephone: 07584 124 247

You can use these contact details for any privacy question, request or complaint.

Information we collect

The information we hold depends on how you use BBT and the website. It may include:

your name, business name, postal address, telephone number, email address and website;
membership application, administration, invoicing and payment-record information;
member-account information, including your username, account contact details and profile information;
information you send through our contact, event, business-directory, member-news, business-update, support and suggestion forms;
event, business or news content supplied for review or publication, including names, descriptions, dates, locations, links and images where provided;
your newsletter and marketing preferences;
our correspondence with you and notes needed to follow up a request or provide support;
technical information such as IP address, browser and device information, website activity, security logs and cookie identifiers; and
information supplied by a BBT member, business, event organiser or partner, or obtained from an appropriate public source, when we maintain the directory, events calendar and other public information.

Please do not send sensitive personal information unless it is genuinely needed and we have agreed how it should be handled.

How and why we use information

We use personal information only where we have a lawful reason to do so.

Responding and providing support

We use contact details and messages to answer enquiries, respond to requests, provide support and take steps requested before membership or another service begins. We rely on our legitimate interests in running a responsive tourism association and, where relevant, taking steps towards or performing a contract.

Managing membership and member accounts

We use membership, account, administration and payment-record information to process applications, provide member services, manage access to the members area, communicate about membership and keep the records the law requires. We rely on contract, legal obligation and our legitimate interests in managing BBT effectively.

Publishing useful local information

We review and may publish information submitted for the business directory, events calendar, news, guidance or member network. The purpose is to help people discover local businesses, events and practical support. We rely on our legitimate interests in supporting the local tourism network and, where relevant, consent or our membership agreement.

Information intended for publication can be seen, copied or shared by website visitors and search engines. Please provide public business or event contact details rather than private details wherever possible. Tell us promptly if published information needs correcting or removing.

Email updates and newsletters

We use your contact details to send a newsletter or promotional updates when you have asked to receive them. We rely on consent, and you can unsubscribe using the link in an email or by contacting us. Essential membership or service messages are not marketing and may still be sent where needed to manage our relationship with you.

Running, securing and improving the website

We use technical information to keep the website working, protect it from spam and misuse, understand how people use it and improve navigation and content. Essential website and security processing is based on our legitimate interests. We rely on consent for non-essential analytics or similar cookies where the law requires it.

Legal and organisational responsibilities

We may use information to keep financial and company records, respond to legal claims, protect people and BBT, prevent misuse, and meet duties imposed by law. We rely on legal obligation and our legitimate interests as appropriate.

We do not sell personal information. We share only what is needed with:

trusted suppliers who host, maintain, secure or support the website and BBT’s systems;
form, communications and email providers, including WordPress and Ninja Forms, Microsoft 365 and Microsoft Forms, Mailchimp and Mailjet;
website measurement, security and service providers, including Google, Automattic/Jetpack and CleanTalk;
people visiting the website when information has been supplied or approved for public publication;
professional advisers such as accountants, insurers or legal advisers where necessary; and
regulators, public authorities or other parties where disclosure is required by law or is necessary to protect legal rights.

Our suppliers may only use information for the agreed service and must handle it appropriately.

Information processed outside the UK

Some of our service providers operate internationally, so personal information may be processed outside the UK. Where a restricted international transfer is made, we use arrangements intended to meet UK data-protection law, such as UK adequacy regulations or approved contractual safeguards. You can contact us if you would like more information about the safeguards relevant to your information.

Cookies and similar technology

Cookies are small files stored on your device. The website may use:

essential cookies needed for security, forms, member sign-in and core website functions;
analytics cookies used to understand visits and improve the website; and
third-party or embedded-content cookies that may be set when you interact with an external service or embedded content.

Where consent is required, we ask before using non-essential cookies. You can accept, deny or change those choices at any time using the Privacy choices control, which appears with the footer on mobile. You can also block or delete cookies in your browser, although some member or form features may then work differently. Full details are in our Cookie Policy.

How long we keep information

We keep personal information only for as long as it is needed for the purpose for which it was collected, including any legal, accounting, security or dispute requirements. In deciding how long to keep it, we consider the type and sensitivity of the information, the reason we hold it, whether the purpose can be achieved another way and any legal time limit.

Membership and account information is normally kept while the membership or account is active and for a reasonable period afterwards so we can administer records and respond to questions.
Financial and company records are kept for the period required by law.
Enquiries and form submissions are kept for as long as needed to respond, review the submission and maintain an appropriate administrative record.
Published directory, event and news information is kept while it remains useful and accurate, then updated, archived or removed as appropriate.
Newsletter details are kept until you unsubscribe or withdraw consent. We may retain a minimal suppression record so that we respect that choice.
Security logs and analytics information are kept according to operational need and the relevant service settings.

Your data-protection rights

Depending on the circumstances and the lawful basis we use, you may have the right to:

ask for a copy of your personal information;
ask us to correct inaccurate or incomplete information;
ask us to delete information;
ask us to restrict how information is used;
object to certain uses of information;
withdraw consent at any time, where we rely on consent; and
receive information you supplied in a portable format in certain circumstances.

Some rights do not apply in every situation. We may need to confirm your identity before acting on a request. There is normally no charge.

Your right to object: you can object at any time to direct marketing. You may also object where we rely on legitimate interests; we will then stop unless we have a compelling lawful reason to continue or the information is needed for legal claims.

To exercise a right, email julie@breconbeaconstourism.co.uk or use the contact details above.

Complaints

If you are concerned about how we have handled your information, please contact us first so we can look into it and put things right where needed. You also have the right to complain to the Information Commissioner’s Office (ICO). Visit ico.org.uk/make-a-complaint for current guidance.

External links and embedded content

The website links to other organisations and may include content or services provided by them. Their privacy and cookie practices are their responsibility, so please read their notices when you follow a link or use an embedded service.

Children’s information

BBT’s website and services are not designed to collect personal information directly from children. If you believe a child’s information has been sent to us inappropriately, please contact us.

Changes to this notice

We will update this notice when our services, suppliers or legal responsibilities change. The latest version will always appear on this page with its last-updated date.