Privacy Policy

Winchester Walking Weekend

Last updated: April 2026

1. Who We Are

Winchester Walking Weekend is a walking event organised by the Winchester Group of the Ramblers. This privacy policy explains how we collect, use, and protect personal data in connection with the Winchester Walking Weekend website and booking process.

For questions about this policy or your data, please contact us via the website.

2. What Data We Collect and Why

2.1 Walk Booking Data

When you complete a booking form to reserve a place on a walk, we collect the personal details you provide: your name email address and, if provided your phone number. This data is used solely to:

Inform the walk leader of who is attending their walk, so they can plan and manage the group safely.
Alert you to any changes to a walk's arrangements — for example, if a walk is cancelled, rerouted, or its meeting point or time changes.
Contact you by phone or SMS if you have provided a phone number, should urgent notification of a change be necessary.

We do not use your booking data for marketing, profiling, or any purpose beyond organising and communicating about the walk you have booked.

Legal basis (UK GDPR): Legitimate interests — processing your details is necessary to fulfil the purpose for which you have submitted them (joining a walk), and that purpose is clear at the point of submission.

2.2 Browser Storage (localStorage)

The site uses your browser's localStorage to:

Maintain your login session (stored as a JWT — a secure login token), and
Remember your display preferences.

These are strictly necessary for the site to function correctly. Nothing stored in localStorage is shared with third parties. This storage is held locally in your browser; we do not transmit it to any server for any purpose beyond authentication.

Because localStorage is strictly necessary for site functionality, it does not require your consent under PECR (the UK Privacy and Electronic Communications Regulations).

2.3 Website Analytics

The site uses Cloudflare Web Analytics to collect anonymous page view statistics. This service:

Does not use cookies,
Does not use device storage of any kind, and
Collects only aggregated, anonymous data (e.g. page views) that cannot be used to identify you.

Because no cookies or device storage are used, and no personal data is processed, this does not require consent under PECR or UK GDPR.

3. What We Do Not Collect

We want to be clear about what this site does not do:

No advertising trackers — we do not use Google Ads, Meta Pixel, or any similar third-party advertising technology.
No behavioural profiling — we do not build profiles of your browsing habits or interests.
No unnecessary third-party data sharing — your data is not sold or passed to third parties, except as described in section 4 below.

4. Third Parties

Third Party	Purpose	Data Shared
Cloudflare Web Analytics	Anonymous page view statistics	No personal data

No other third parties receive your personal data.

5. How Long We Keep Your Data

Booking data is retained only for as long as is necessary to organise the walk you have booked. Once the event has passed and there is no longer an operational need to hold the information, it will be deleted.

6. Your Rights Under UK GDPR

You have the following rights in relation to your personal data:

Right of access — you can ask what data we hold about you.
Right to rectification — you can ask us to correct inaccurate data.
Right to erasure — you can ask us to delete your data where there is no lawful reason to retain it.
Right to restriction — you can ask us to restrict processing in certain circumstances.
Right to object — you can object to processing based on legitimate interests.

To exercise any of these rights, please contact us via the website.

If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: ico.org.uk
Helpline: 0303 123 1113

7. Security

We take reasonable technical and organisational measures to protect the personal data we hold. Login sessions are managed using JWTs stored in your browser's localStorage and are not transmitted beyond what is necessary for authentication.

8. Changes to This Policy

We may update this policy from time to time. The date at the top of this page will always reflect when it was last revised. We encourage you to check back periodically.