Privacy Policy

Last updated: 6 October 2026

This policy explains how Visit Pontefract ("we", "us", "our") collects, uses, and protects personal data when you use this website.

1. Who we are

Visit Pontefract is a local discovery guide. Our website is https://www.visitpontefract.com.

2. What data we collect

  • Account data — name and email address when you register or log in.
  • Suggestions — place details and your contact information when you submit a suggestion via the "Suggest a place" form.
  • Newsletter — your email address if you subscribe to our newsletter.
  • Analytics — anonymised usage data (pages visited, time on site) to help us improve the site. No personally identifiable data is stored.
  • Server logs — standard web server logs (IP address, browser type, pages requested) for security and diagnostic purposes. Logs are retained for 30 days.

3. How we use your data

  • To operate and improve this website.
  • To review and follow up on place suggestions you submit.
  • To send newsletters if you have subscribed (you can unsubscribe at any time).
  • To maintain site security and prevent abuse.

We do not sell, rent, or trade your personal data with third parties.

4. Legal basis for processing

We process your data on the basis of:

  • Consent — for newsletter subscriptions and suggestion submissions.
  • Legitimate interests — for analytics and security logging.
  • Contract — to provide account-based features you request.

5. Cookies

We use strictly necessary session cookies to keep you logged in and protect forms against CSRF attacks. We do not currently use third-party tracking or advertising cookies.

6. Data retention

  • Account data is retained while your account is active. You can request deletion at any time.
  • Suggestion data is retained to maintain records of place credits.
  • Newsletter subscriptions are retained until you unsubscribe.

7. Your rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your data (subject to legal retention requirements).
  • Object to or restrict certain types of processing.
  • Data portability.
  • Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us using the details below.

8. Third-party services

We may use the following third-party services, each with their own privacy policies:

  • Google Fonts — for web typography. Google may log requests for font files.
  • Mapping services — for the interactive map feature.

9. Security

We take reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS), hashed passwords, and CSRF protection on all forms. No method of transmission over the internet is 100% secure.

10. Changes to this policy

We may update this policy occasionally. The date at the top of the page will always reflect the most recent version.

11. Contact

If you have any questions about this policy or wish to exercise your data rights, please contact us at: hello@www.visitpontefract.com