Privacy Policy
(GDPR Compliant v1.4)
This privacy policy sets out how The Fountainhead Residents Association [FHVRA] uses and protects any information that you share with FHVRA when you use this website or any of our services. It is intended to provide a clear, transparent, and GDPR compliant privacy policy.
If you have any questions about this Privacy Policy, please feel free to contact us.
FHVRA is committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified when using this website, then you can be assured that it will only be used in accordance with this privacy statement and for the purpose you specifically requested.
FHVRA may change this policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes.
This policy is effective from 4th January 2018.
The legal basis for privacy in connection with our services is provided by the EU General Data Protection (GDPR) regulation and the upcoming ePrivacy regulation.
This privacy policy will be updated from time to time to reflect the changes in our service and product offering or in applicable laws.
Data security
All data transmitted to and from our digital services are secured using SSL/TLS 1.0 encryption with the exception of email as there is no standardised method of encrypting email.
No digital service we use requires the compulsory use of email and you may opt out of using email services to communicate with us.
Data minimization
We aim to never collect or store any information that is not required for the delivery of the services to which you subscribe. Any information that we do collect is and will always be explicitly accounted for in this Privacy policy.
Fingerprinting and IP address logging
We do not store your IP address beyond the raw server logs that are required for the correct operation of our services. We do not fingerprint you in any way and do not mine the device and software that you use to access our services (such as browser and personal computer) for information that can lead to your identification. We do not obtain in any way and do not store any information about you that you do not provide to us explicitly. We do store some personally identifiable information as required for delivery of some of our services, as explained below.
Personally identifiable information (PII)
The only pieces of personally identifiable information (PII) that we will request to store is your email address, full name and house address. We will never share your PII with a 3rd party without your explicit permission to provide you with access to that service.
However, we make extensive use of third-party services to manage our operations and store data and these may require PII. These are listed alphabetically below with links to their respective privacy policies:
Basecamp, for project management.
WPEngine, for web-site hosting.
WordPress, for a digital services platform.
Google Email, for the transmission, reception, and processing of email communication.
We are not responsible for the privacy policies of the third-party service providers but do check from time to time that our partners and suppliers are compliant with local privacy and data protection laws and that may include GDPR, ePrivacy, Privacy Shield, and Safe Harbor.
Non-personally identifiable information (n-PII)
Information is considered to be non-personally identifiable (n-PII) if it cannot be linked to you unless your email address or other personally identifying information is provided with it. We collect and store the following (n-PII):
Conversation and notes made during face to face interactions
Email contents
Transient email data
Cookies
For authentication and tracking purposes we use so-called session cookies in all the digital services we provide. The data that is saved to your computer serves exclusively for anonymous web reporting and server resource management. It may, optionally and with your permission be used to simplify the processes of logging into our digital services. This cookie will not be used to compile a user profile.
Third-party services as listed above will store and use cookies in a variety of ways and means. Please familiarise yourself with the relevant cookie usage rules and opt-outs available for each of the services you use.
Compliance with court orders
We will obey a valid court order or subpoena if these require us to provide the information that we store to law enforcement authorities or a court of law. We will only do so upon legal scrutiny and confirmation of the validity of such a requirement in the country where we are deemed to provide digital services.