Privacy policy

Who we are

The South East Locomotive Group (“SELG”, “we”, “us”) is a volunteer-run group that preserves and operates Class 33 “Crompton” diesel locomotives at the Spa Valley Railway. We decide how the personal information collected through this website is used, which makes us the “controller” under UK data protection law.

You can contact us about this policy, or about your information, using the details at the end of this page.

What we collect and why

We only ask for what each part of the website needs.

Getting in touch

If you email us, we keep your email address and your message so we can reply. It is in our legitimate interests to answer people who contact the group.

Donations

We record the amount, a payment reference, whether the payment went through and, if you choose to give one, your email address. Your card details are entered on SumUp’s payment page and never reach us. We use this information to keep accurate accounts and to deal with any question about your donation, which is in our legitimate interests.

Membership

When you join online we ask for your name, email address, telephone number and postal address. We also keep your membership level, the dates it started and runs until, and the payment reference and status. We use this to set up and run your membership and to keep the membership register, because we need it to provide the membership you have asked for. Each time someone joins or renews, the website emails these details to our Membership Secretary.

Driver Experience bookings

We ask for your name, email address and telephone number, and we keep the date you chose and the payment reference and status. Our Driver Experience team uses them to reserve your date and to contact you to arrange the day, because we need them to provide the booking you have asked for.

Promo and Sales orders

We ask for your name and email address and, if you want an order posted, your delivery address. We keep what you ordered and the payment reference and status. We use them to supply your order and to answer questions about it, because we need them to provide what you have asked for.

Volunteer sign-ins

Volunteers who update this website have a sign-in. We keep their name, email address and role, and the website emails sign-in links to the address given. This is in our legitimate interests in looking after the website securely.

Technical information

Like most websites, our hosting records basic technical details when you visit, such as your IP address, the pages you ask for and your browser. We use them to keep the website secure and running. We do not use analytics or advertising tools on this website.

Cookies and similar technologies

We do not use analytics, advertising or tracking cookies, so there is no cookie banner to accept.

We use two items kept in your browser that are strictly necessary for features you have asked for:

• If the News Archive and Articles section is password-protected and you enter the password, the website sets a cookie called selg-archive so you do not have to enter it again. It lasts a week and holds no personal information.
• Volunteers who sign in to update the website have a sign-in token stored in their browser’s local storage so they stay signed in. It is linked to their account on the website and can identify the volunteer who is signed in. It is removed when they sign out.

Who we share it with

We share information only with the services that help us run the website:

• SumUp takes card payments on its own payment page. It is responsible for the card details you give it, under its own privacy notice, and tells us whether the payment succeeded.
• Resendsends emails on the website’s behalf, such as telling the Membership Secretary about a new member and sending sign-in links to volunteers.
• Google Fonts supplies the typefaces on this website. When a page loads, your browser contacts Google, which receives your IP address and browser details.
• Our hosting provider stores the website and its database.
• Our volunteers: the Secretary, Membership Secretary, Treasurer and Driver Experience team can see the information they need to do their roles.

We do not sell your personal information. Beyond the above, we share it only if the law requires us to. Some of these services may handle information outside the UK. Where they do, UK data protection law requires safeguards to be in place.

How long we keep it

We keep information only for as long as we need it for the reasons above. We keep membership records while you are a member and afterwards for as long as the group needs them for its records and accounts. We keep payment records for as long as our accounts require. If you would like to know how long we hold something about you, ask us.

Your rights

Under UK data protection law you can:

• ask for a copy of the information we hold about you;
• ask us to correct anything that is wrong;
• ask us to delete it, where we no longer need it;
• ask us to limit how we use it;
• object to our use of it, where we rely on our legitimate interests; and
• ask for the information you gave us in a portable format, where we use it to carry out a contract with you.

To use any of these rights, contact us using the details below. We will reply within one month.

If you are unhappy with how we have handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner’s Office at ico.org.uk (opens in a new tab).

Changes to this policy

If we change how we use your information we will update this page and the date at the top. Our terms and conditions explain the other rules for using this website.