Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Stroud Climbing Commons Services Ltd (trading as The Climbing Commons) is required to inform you how we process the personal data we hold about you. You may request at any time that we delete your information from our records.

The Climbing Commons is committed to protecting and respecting your privacy. This policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed.

Data Controller:
The Climbing Commons
1st Floor, The Sanctuary
Brimscombe Mill, Brimscombe
Stroud, GL5 2QN

INFORMATION WE MAY COLLECT FROM YOU

We may collect and process the following data:

• Contact Information: Name, username, password, email address
• Usage Information: Access logs via mobile key or Clava app check-in
• Billing Information: Name, address, email, and payment details (processed securely by third-party providers)
• Communications: Emails or messages sent to us
• Technical Data: IP address, browser type, device info, and website usage
• Images and audio of identifiable individuals: CCTV recordings for safety incident reviews and crime reporting.

If you contact us via our website or email (hello@theclimbingcommons.org), we will store your message and contact details.

HOW WE USE YOUR DATA

We use your data to:

• Provide access to our climbing facilities and services
• Manage bookings, memberships, and payments
• Respond to enquiries
• Improve our services and user experience
• Send service updates and (if opted in) newsletters
• Monitor, review and reporting of safety issues 

LAWFUL BASIS FOR PROCESSING

We process your data under the following lawful bases:

• Contract: To provide services you have signed up for
• Legitimate Interests: To improve and manage our services
• Consent: For marketing communications (you can withdraw at any time)

DISCLOSURE OF YOUR INFORMATION

We do not sell or rent your personal data.

We may share your data with trusted third parties where necessary to deliver our services including:

• Clava (Fittr Ltd): Booking system, member management, access control
• Stripe (Payment processors): Secure handling of payment information
• Mailerlite: Email communications and newsletters
• Weavly: Forms
• Activities Industry Mutual (AIM): Insurance claims handling
• Police: Crime reporting 

Each provider processes your data in accordance with their own privacy policies.

WHERE WE STORE YOUR DATA

Your data may be stored on secure servers provided by platforms such as Google Firebase.

We take appropriate technical and organisational measures to protect your personal data.

DATA RETENTION

We retain your data only for as long as necessary to:

• Provide our services
• Meet legal and accounting obligations

When no longer required, your data will be securely deleted.

YOUR RIGHTS

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Restrict or object to processing
• Request transfer of your data (data portability)
• Withdraw consent at any time
• Lodge a complaint with the Information Commissioner's Office

CONTACT

If you have any questions about this policy or your data, please contact:
📧 hello@theclimbingcommons.org

Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

Cookies

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select "Remember Me", your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.