Privacy Policy — Amdram Network

Who We Are

Amdram Network is operated by The Lone Developer, a sole trader. You can contact us regarding any privacy matters at [email protected].

What This Policy Covers

This Privacy Policy explains how we collect, use, and protect your personal data when you use Amdram Network. It applies to all users of the website, including those who register an account to manage an amateur dramatics group.

We are committed to handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

What Data We Collect

Account Registration

When you register an account, we collect:

Your name
Your email address
Information about your amateur dramatics group

Contact and Email Communications

If you submit a contact form or sign up for marketing communications, we collect:

Your name
Your email address
The content of any message you send us

Automatically Collected Data

When you visit our website, we automatically collect certain technical data, including:

Your IP address
Browser type and version
Pages visited and time spent on the site
Referring URLs
Device type and operating system

This data is collected via Google Analytics and through standard server session handling.

How We Use Your Data

Purpose	Data Used	Lawful Basis
Creating and managing your account	Name, email	Performance of a contract
Sending transactional emails (e.g. password resets)	Name, email	Performance of a contract / Legitimate interests
Sending marketing emails (newsletters, updates)	Name, email	Consent
Analysing website usage and improving the service	Analytics data (via Google Analytics)	Legitimate interests
Maintaining website security and session management	Session cookie data	Legitimate interests

You may withdraw your consent to marketing emails at any time by clicking the unsubscribe link in any email we send, or by contacting us directly.

Session Cookie

A session cookie is set by the website to maintain your login state and ensure the site functions correctly. This cookie is temporary and is deleted when you close your browser. It does not track you across other websites.

Google Analytics

We use Google Analytics to understand how visitors use our website. Google Analytics sets cookies to collect anonymised data about your visit, such as pages viewed and time spent on the site.

Google Analytics data is processed by Google and may be transferred to servers outside the United Kingdom. Google has certified compliance mechanisms in place for international data transfers.

You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.

Email Service Provider

We use Resend to send transactional and marketing emails. When you register an account or opt in to marketing, your name and email address are processed by Resend in order to deliver emails to you. Resend acts as a data processor on our behalf and is bound by appropriate data processing agreements.

For more information, see Resend's Privacy Policy.

Data Sharing

We do not sell your personal data to third parties. We share your data only with the third-party service providers listed in this policy (Google Analytics and Resend) and only to the extent necessary to provide our service.

We may disclose your personal data if required to do so by law, or in response to a valid request from a law enforcement authority.

Data Retention

We retain your personal data for as long as your account is active or as necessary to provide our services. If you delete your account, we will remove your personal data from our systems within 30 days, except where we are required to retain it for legal or compliance reasons.

Analytics data collected via Google Analytics is retained in accordance with Google's standard data retention settings, which we have configured to a maximum of 26 months.

Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

Right of access — you may request a copy of the personal data we hold about you
Right to rectification — you may ask us to correct inaccurate or incomplete data
Right to erasure — you may ask us to delete your personal data in certain circumstances
Right to restriction — you may ask us to limit how we use your data
Right to data portability — you may request your data in a structured, machine-readable format
Right to object — you may object to processing based on legitimate interests or for marketing purposes
Right to withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at the email address listed above. We will respond within one calendar month.

Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Access to personal data is restricted to authorised personnel only.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

Complaints

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the UK's data protection authority:

Information Commissioner's Office (ICO)

Website: ico.org.uk

Helpline: 0303 123 1113