Privacy Policy

Bowden Pillars Future CBS
Bowden House, Totnes, TQ9 7PZ
Email: hello@bowdenpillarsfuture.land

Last updated: 27.02.2026

1. Who We Are

Bowden Pillars Future CBS (“we”, “us”, “our”) is a Community Benefit Society based in Totnes, United Kingdom.

We are the data controller responsible for your personal data under UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What Personal Data We Collect

We collect personal data in the following ways:

A. Website Forms and Interactions

When you use our website forms, we may collect:

1. Contact and Enquiry Forms

  • First and last name

  • Email address

  • Message content

  • Any files voluntarily uploaded

2. Volunteer and Team Applications

  • Name

  • Email address

  • Message content

  • Supporting documents uploaded

3. Newsletter Sign-Up

  • Name (where provided)

  • Email address

Newsletter communications are managed through Squarespace and Mailchimp. You may unsubscribe at any time using the link in our emails.

4. Donations and Loan Offers

  • Name

  • Email address

  • Donation amount

  • Recurring payment status

Payments are securely processed by Stripe. Bowden Pillars Future CBS does not store full payment card details. Stripe processes payment data in accordance with its own privacy policy and may act as an independent data controller for payment transactions.

5. Friends & Supporters Submission Form

Where you voluntarily submit information for publication, we may collect:

  • First name (and optionally last name)

  • Organisation (optional)

  • Email address (not published)

  • Short biography or message

  • Reasons for supporting the project

  • Uploaded image or photograph

This information is published publicly on our website only where explicit consent has been provided. You may request removal at any time.

6. File Uploads

Where forms allow file uploads, we process only the information voluntarily included within those files.

B. Survey Data – Bowden Pillars Regenerative Village Initial Survey

We collect personal data via our online survey to assess feasibility, interest, and community needs relating to the Bowden Pillars Regenerative Village project.

Survey data may include:

  • Name

  • Email address (required for follow-up communication)

  • Age

  • Household structure

  • Number of children or dependents

  • Employment information

  • Housing preferences

  • Postcode district (first half only, e.g. TQ9)

  • Household income band

  • Preferences and views regarding sustainability and community living

The survey is hosted via Google Forms. Google acts as a data processor in relation to this information.

Survey responses are retained for up to five (5) years for planning and project development purposes.

C. Equality and Diversity Information

Where collected (for example via surveys), equality and demographic information is:

  • Voluntarily provided

  • Used for monitoring inclusion and accessibility

  • Analysed in aggregated form where possible

We do not intentionally collect health data or identity documents via our website.

D. Children’s Data

Our website and survey are intended for individuals aged 18 or over.

We do not knowingly collect personal data from children. If we become aware that data has been submitted by someone under 18 without appropriate consent, we will delete it.

E. Automatically Collected Information

When you visit our website, we may automatically collect:

  • IP address

  • Browser type

  • Device information

  • Pages visited

  • Time spent on site

This is collected via Google Analytics and website cookies to help us understand website usage and improve user experience.

Google Analytics may transfer data outside the UK. Appropriate safeguards are in place in accordance with UK GDPR.

3. Legal Basis for Processing

We rely on the following lawful bases:

  • Consent – for newsletters, supporters listings, equality monitoring, and optional data.

  • Legitimate Interests – for assessing feasibility, demand and community needs relating to the Bowden Pillars Regenerative Village project through surveys and research activities.

  • Contractual Necessity – where processing is required to fulfil agreements.

  • Legal Obligation – where required for accounting or regulatory purposes.

  • Where equality or demographic data constitutes special category data under UK GDPR, we rely on explicit consent and/or substantial public interest where applicable.

You may withdraw consent at any time by contacting us.

4. Data Sharing

We do not sell your personal data.

We may share data with trusted service providers where necessary, including:

  • Squarespace (website hosting)

  • Mailchimp (email newsletters, if used)

  • Stripe (payment processing)

  • Microsoft 365 (data storage and communications)

  • Event platforms such as Eventbrite or Dandelion Events

  • Google (Google Forms – survey hosting and processing)

These providers act as data processors on our behalf.

We may also disclose personal data where required to comply with a legal obligation or lawful request from public authorities.

5. International Data Transfers

Some of our service providers are based outside the UK (including the United States).

Where personal data is transferred internationally, we ensure appropriate safeguards are in place, such as:

  • UK International Data Transfer Agreements

  • Standard Contractual Clauses

  • Providers participating in recognised data protection frameworks

6. Data Retention

We retain personal data only as long as necessary for the purposes for which it was collected.

Examples:

  • Enquiries: up to 24 months

  • Newsletter subscribers: until you unsubscribe

  • Financial records: minimum 6 years (legal requirement)

  • Survey data: up to 5 years

  • Volunteer/consultant data: duration of engagement + reasonable archive period

7. Your Rights

Under UK data protection law, you have the right to:

  • Access your personal data

  • Request correction of inaccurate data

  • Request erasure (“right to be forgotten”)

  • Restrict processing

  • Object to processing

  • Data portability

  • Withdraw consent at any time

To exercise these rights, email:
hello@bowdenpillarsfuture.land

If you are not satisfied with our response, you may lodge a complaint with the Information Commissioner’s Office (ICO):

www.ico.org.uk

8. Data Security

We implement appropriate technical and organisational measures to protect personal data, including:

  • Secure website hosting

  • Password-protected systems

  • Access controls

  • Secure payment processing

  • Encrypted cloud storage

9. Cookies

Our website uses cookies and similar technologies to:

  • Ensure proper website functionality

  • Analyse website traffic

  • Improve user experience

You can manage cookie preferences via your browser settings or our cookie banner (where applicable).

A separate Cookie Policy may apply.

10. Updates to This Policy

We may update this Privacy Policy from time to time.
The latest version will always be available on our website.