At Project Britannia ("we", "us", or "our"), we are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

1. Information We Collect

We may collect and process the following personal data:

• Personal Identification Information: Name, email address, phone number, postal address, payment information when you register, donate, or purchase memberships.
• Technical Data: IP address, browser type and version, time zone setting, browser plug-in types, operating system, and other technology on the devices you use to access our website.
• Usage Data: Information about how you use our website and services.
• Communication Data: Any correspondence you send to us.

2. How We Use Your Information

We use your personal data for the following purposes:

• To provide and maintain our services
• To process transactions and send you related information
• To manage your account and membership
• To communicate with you, including responding to your inquiries
• To improve our website and services
• To comply with legal obligations

3. Legal Basis for Processing

Under UK GDPR, we rely on the following legal bases for processing your personal data:

• Contractual necessity: When processing is necessary for the performance of a contract with you (e.g., providing membership services).
• Legitimate interests: When processing is necessary for our legitimate interests (e.g., improving our services, preventing fraud).
• Consent: Where you have given clear consent for us to process your personal data for a specific purpose (e.g., marketing communications).
• Legal obligation: When processing is necessary for compliance with a legal obligation.

4. Data Sharing and Disclosure

We do not sell or rent your personal data to third parties. We may share your information with:

• Service Providers: Third-party vendors who provide services on our behalf (e.g., payment processors, hosting providers).
• Legal Requirements: When required by law or to protect our rights.
• Business Transfers: In connection with any merger, sale of company assets, or acquisition.

All third-party service providers are required to maintain appropriate security measures and may only process your personal data for specified purposes.

5. International Transfers

We primarily store and process data within the UK and European Economic Area (EEA). If we transfer data outside these areas, we ensure appropriate safeguards are in place as required by UK GDPR.

6. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Typical retention periods include:

• Membership data: 7 years after account closure for tax and legal compliance
• Website analytics: 26 months
• Contact form submissions: 2 years

7. Your Rights Under UK GDPR

You have certain rights regarding your personal data:

• Right to access: You can request copies of your personal data.
• Right to rectification: You can request correction of inaccurate or incomplete data.
• Right to erasure: You can request deletion of your personal data in certain circumstances.
• Right to restrict processing: You can request restriction of processing in certain circumstances.
• Right to data portability: You can request transfer of your data to another organization.
• Right to object: You can object to certain types of processing.
• Right to withdraw consent: Where we rely on consent, you can withdraw it at any time.

To exercise these rights, please contact us at [email protected].

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include encryption, access controls, and regular security assessments.

9. Cookies, Web Analytics, and Security Technologies

We use only essential cookies and technologies that are necessary for the secure and proper functioning of our website. These technologies do not require user consent under UK privacy law.

• Essential Cookies: Our website uses essential cookies to support features like login sessions, secure donations, and membership management. These cookies are strictly necessary for providing the services you request and do not track or profile you for advertising purposes. You may disable them in your browser settings, but some parts of the website may not function properly.
• Cloudflare Security: We use Cloudflare to enhance the security and performance of our website. Cloudflare may temporarily process IP addresses and technical data to prevent threats such as DDoS attacks or bot abuse. This processing is considered essential and falls under our legitimate interests as defined under UK GDPR.
• Web Analytics: We use Cloudflare Web Analytics in a privacy-first configuration that does not use cookies or collect personally identifiable data. It helps us understand general website usage patterns without tracking individual users. Since no personal data is processed and no tracking cookies are involved, this does not require user consent under the UK GDPR or PECR.

10. Children's Privacy

Our services are not directed to individuals under 16. We do not knowingly collect personal data from children under 16 without parental consent.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by posting the new policy on our website and updating the "Last Updated" date.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact our Data Protection Officer at:

Email: [email protected]