Privacy Policy

This Privacy Policy explains how we collect, use, store, and protect your personal information when you shop online with the Brecon Beacons National Park Authority. We are committed to respecting your privacy and keeping your personal data safe and secure.

1. Who We Are

The Brecon Beacons National Park Authority (BBNPA) is the data controller for the purposes of this policy.

Registered Office:
Plas y Ffynnon,
Cambrian Way,
Brecon,
Powys,
LD3 7HP,
United Kingdom
Tel: 01874 624437


2. What Information We Collect

When you place an order through our online shop, we may collect the following personal information:

  • Name
  • Billing and delivery addresses
  • Email address
  • Phone number
  • Payment details (processed securely by our payment provider)
  • Order history and preferences
  • IP address and browser information (for analytics and site functionality)

3. How We Use Your Information

We collect your data to:

  • Process and deliver your order
  • Communicate with you about your order
  • Provide customer service and support
  • Comply with legal obligations (e.g. tax and accounting)
  • Improve our website and customer experience
  • Send marketing emails (only if you’ve opted in)

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Contractual necessity – to fulfil your order
  • Legal obligation – for tax and record-keeping
  • Consent – for marketing communications
  • Legitimate interest – to improve services and prevent fraud

5. Sharing Your Information

We will never sell or share your data for marketing purposes. However, we may share your information with:

  • Trusted third parties who help us fulfil your order (e.g., payment processors, delivery companies)
  • IT and website service providers who support our systems
  • Legal or regulatory bodies when required by law

All third-party service providers are required to keep your data secure and to use it only in line with our instructions.

6. How Long We Keep Your Information

We retain your personal data only as long as necessary for the purposes stated above. For example:

  • Order and payment details: kept for 6 years (legal requirement)
  • Marketing preferences: until you unsubscribe
  • Website analytics: anonymised after 14 months

7. Your Rights

Under UK data protection law, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccuracies in your data
  • Request the deletion of your data (where applicable)
  • Object to or restrict our use of your data
  • Withdraw consent for marketing at any time
  • Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise your rights, please contact us at vcuser@beacons-npa.gov.uk

8. How We Protect Your Data

We implement appropriate technical and organisational measures to safeguard your personal data, including:

  • Secure SSL encryption on our website
  • Payment data handled by PCI-compliant providers
  • Restricted access to personal data within our organisation
  • Regular review of our data handling practices

9. Cookies

Our website uses cookies to:

  • Enable essential functions (e.g. shopping cart)
  • Analyse website usage and improve performance
  • Provide a more personalised experience

You can manage your cookie preferences through your browser settings at any time.

10. Third-Party Links

Our website may contain links to external websites. We are not responsible for the content or privacy practices of these sites. Please review their privacy policies before providing any personal data.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be posted on our website with the effective date clearly shown at the top.

If you have any questions about this Privacy Policy or how we use your personal data, please contact us at:

📧 vcuser@beacons-npa.gov.uk
📞 01874 624437