Privacy Policy
For the Pay It Forward Hub Activity & Booking Website
Last Updated: 21 May 2026
1. Who We Are
This website is operated by Boomerang Cardiff on behalf of the Pay It Forward Hub.
We are committed to protecting your privacy and handling your personal information responsibly and in accordance with UK GDPR and Data Protection laws.
2. Information We Collect
We may collect the following information:
- Names
- Email addresses
- Phone numbers
- Billing details
- Emergency contact details
- Children's details where required for activities
- Medical or accessibility information relevant to participation
- Booking history
- IP address and website usage data
3. How We Use Your Information
We use your information to:
- Process bookings and payments
- Manage activities and attendance
- Contact you regarding bookings
- Provide customer support
- Maintain safeguarding records
- Improve our services
- Meet legal and regulatory obligations
We will only use your data where we have a lawful basis to do so.
4. Payments
Payments may be processed through secure third-party payment providers. We do not store full payment card details on our systems.
5. Sharing Your Information
We do not sell your personal information.
We may share information with:
- Payment providers
- IT and website service providers
- Emergency services where necessary
- Legal or regulatory authorities where required by law
All third parties are expected to handle your data securely.
6. Data Storage & Security
We take appropriate technical and organisational measures to protect your data against:
- Unauthorised access
- Loss
- Misuse
- Alteration
However, no online system can be guaranteed to be completely secure.
7. Children's Data
Where activities involve children, parents or guardians are responsible for providing consent and accurate information.
We only collect information necessary for participation, safeguarding, and emergency purposes.
8. Photography & Media
Images or videos captured during activities may be used for:
- Social media
- Promotional materials
- Funding applications and reports
- Website content
You may opt out by contacting us before attendance.
9. Your Rights
Under UK GDPR, you may have the right to:
- Access your personal data
- Correct inaccurate information
- Request deletion of data
- Restrict or object to processing
- Withdraw consent where applicable
Requests can be made by contacting us directly.
10. Cookies
Our website may use cookies and analytics tools to improve user experience and monitor website performance.
You can manage cookies through your browser settings.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Updated versions will be posted on this website.
12. Contact Us
For any questions regarding these Terms or Privacy Policy, please contact:
Boomerang Cardiff
You may also wish to include:
- Registered charity/company number
- Email address
- Telephone number
- Registered office address
- ICO registration number (if applicable)
