Privacy Policy

Last updated: December 2025

1. Introduction

The St. David’s Past Pupils’ Union (“PPU”, “we”, “our”, “us”) is committed to protecting the privacy of our members, past pupils, supporters and website visitors. This policy explains how we collect, use and protect personal data in accordance with GDPR.

2. What Personal Data We Collect

Information you provide:

  • Name and contact details
  • Email address
  • Graduation year (optional)
  • Information submitted via forms or event registrations

Website data:
Basic analytics, IP address (security only), and browser metadata.

3. How We Use Your Data

We use your data to:

  • Send newsletters and PPU updates
  • Share event information
  • Process event registrations
  • Respond to enquiries
  • Maintain alumni contact lists

We never sell your data.

4. Legal Basis for Processing

Processing is based on consent, legitimate interest, and legal obligations where applicable.

5. Data Retention

We keep personal data only as long as necessary or until you request deletion.

6. Who Can Access Your Data

Authorised PPU committee members only. All handle data responsibly under GDPR.

7. Third-Party Services

We may use GDPR-compliant providers for email communications, event management, hosting and security.

8. Your Rights

You may request access, correction, deletion, restriction, or withdrawal of consent at any time.

Contact: info@stdavidsppu.com

9. Cookies

Our website uses essential and analytical cookies. You may disable cookies in your browser settings.