Privacy Policy

LAST UPDATED: 28/08/2025

1. Introduction

Bradford North Scouts (BNS) collects and processes personal data relating to current and former Adult Volunteers, Helpers, Young Leaders and Youth Members (Individuals). BNS is committed to being transparent about how it collects and processes the data and to meeting its data protection obligations. Bradford North District Scout Council take the issue of privacy very seriously and we are committed to protecting and respecting our member’s privacy.

2. Who we are?

We are Bradford North Scouts, also known as the Bradford North District Scout Council (“we,” “us,” “our). We are a youth charity, with our mission being to actively engage and support young people in their personal development (providing them “Skills for Life”), empowering them to reach their full potential within society. Being based within Bradford East and Bradford West Parliament constituency’s in West Yorkshire, United Kingdom, we are incorporated by royal charter and are regulated by a member of the UK The Scout Association, (see www.scouts.org.uk for more information).

Every year in June we hold an annual general meeting (“AGM”) where members of the Bradford North Trustee Board (“our Trustees”), are elected. Any member of the District Scout Council can nominate themselves to be elected at the AGM, and every member of the District Scout Council has the right to attend the meeting.

Our charity’s registered address is 5 Coleridge Gardens, Idle, Bradford, West Yorkshire, BD10 9RP.

Our District Trustee Board is the data controller for the information we collect from you. Any personal data that we collect will only be in relation to the work we do with our members and through our relationship with supporters, donors, customers and funders.

3. Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service Privacy Policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

4. Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

5. Cookies

We use CookieYes to manage cookie consent across our site in compliance with GDPr, CCPA, and other global privacy laws. The plugin displays a cookie banner, allows visitors to accept or reject non-essential cookies, automatically blocks cookies until consent is given, and includes a preference center for granular control.

CookieYes uses a single functional cookie, cookieyes-consent, to remember visitors’ choices without storing any personal information.

We may optionally connect to the CookieYes Web App to scan cookies, manage consent logs, and export user consent records for audit purposes.

If you leave a comment on our site you may opt in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

6. Third-Party Plugins and Services

6.1 WordPress Automatic Plugin (ValvePress)
We use the WordPress Automatic Plugin by ValvePress to automatically import and post content from sources such as YouTube, RSS feeds, social platforms, Amazon, and others. The plugin enables content spinning, translation, affiliate link insertion, keyword-based filtering, tagging, post templating, scheduling, and other customisation options.

It primarily retrieves publicly available metadata (titles, descriptions, media, publish dates, source URLs), and does replicate comments that are posted publicly on our posts. These are however limited, with majority of our posts being restricted. When you click on these posts, you will be directed to the post and comment from the relevant source location (i.e., Facebook post – a Facebook comment).

Requests to external services may reveal site IP and technical metadata but not confidential user data. The imported items become part of our site content managed within WordPress. Users retain rights to data deletion and modifications.

6.2 Jetpack (Automattic / WordPress.com)
We use Jetpack plugin, developed by Automattic, to improve site security, performance, content management, and analytics. Jetpack syncs data – including site settings, content metadata, user information (excluding passwords), and login attempt details (with IP and user agent) – to Automattic’s servers to enable its features.

Jetpack also processes visitor data collected through site interactions such as comments, subscriber sign-ups, polls, and technical metadata (IP, browser type, device info, etc.) which are automatically synced to provide features like Site Stats and comment moderation.

To support GDPR compliance, Jetpack includes tools such as analytics opt-out controls, data export/deletion upon request, and a Privacy Policy Helper to generate feature aware content for this policy.

6.3 Contact Form 7 (Rock Lobster, LLC)
We use Contact Form 7 (Rock Lobster, LLC) to manage user submissions via our contact forms. The plugin processes the data submitted by users – included personal details provided in the form, submission timestamps, origin IP address, and browser user agent- stored on our systems. It supports GDPR-friendly features such as minimal data collection and explicit consent via an “acceptance” checkbox.

In regards to our contact forms, we will only ever ask you for relevant information unless given by the user (“the Sender”) via our forms. Each form has an acceptance checkbox, allowing us to use the data, and for data to be sent through our systems (Bradford North Scouts Microsoft365 – outlook).

6.4 EventON Lite
We use EventON Lite to display and manage our event calendar, including features like repeating, virtual, multi-day events, event metadata, and Google Map integration. This system does not take any data from you directly as it is only used to display information for you to use and look at.

6.5 LiteSpeed Cache (Including QUIC.cloud features)
We use LiteSpeed Cache to improve site performance via caching. The plugin may store duplicate copies of web pages locally on the server, but this data is not shared with LiteSpeed employees unless technical support is requested.

Additionally, optional features (e.g., image/page optimalisation via QUIC.cloud and performance reporting) may transmit only site data – not visitor personal information – to remote servers, where it’s retained only for up to seven days.

6.6 Post SMTP
We use Post SMTP to ensure reliable email delivery through authenticated SMTP. The plugin logs emails (metadata and delivery status) to help Post SMTP producers troubleshoot and improve email functionality.

However, note that older versions (< 3.2.0) contained a serious security flaw allowing low-level users to access email logs – potentially exposing email contents and enabling full site takeover. This was patched by the developers in version 3.3.0 (released June 11, 2025). We continue to keep our plugin up to data consistently to avoid this risk.

6.7 Wired Impact Volunteer Management
Data that is collected through the Wired Impact Volunteer Management plugin, is kept only within our website and is used to explicitly declare interest in a volunteer opportunity. It is stored on our website server and is kept there with opportunity to email the user and look at information given. Information is also distributed to the contact and “join.us@bradfordnorthscouts.org.uk” via email onto our outlook system (Bradford North’s Microsoft 365).

6.8 CookieYes – Cookie Consent (CookieYes)
We use CookieYes to manage cookie consent across our site in compliance with GDPr, CCPA, and other global privacy laws. The plugin displays a cookie banner, allows visitors to accept or reject non-essential cookies, automatically blocks cookies until consent is given, and includes a preference center for granular control.

CookieYes uses a single functional cookie, cookieyes-consent, to remember visitors’ choices without storing any personal information.

We may optionally connect to the CookieYes Web App to scan cookies, manage consent logs, and export user consent records for audit purposes.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Who we share your data with

If you request a password reset, your IP address will be included in the reset email.

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where your data is sent

Visitor comments may be checked through an automated spam detection service.

Our Data Protection Policy

To see the full breakdown of our Data Protection Policy, please see the policy below: