Trans Pennine Trail — Website Privacy Notice

Last updated: 17 December 2025

1) Who we are

The Trans Pennine Trail (TPT) National Office is part of Barnsley Metropolitan Borough Council (“Barnsley Council”). We manage, promote and develop the Trail in partnership with local authorities, stakeholders, volunteers and communities across the route.

Our website is operated for the Trans Pennine Trail National Office. Web development/hosting support is provided by our external supplier CDP (Chandler Digital Printing/Web).

Controller: Barnsley Metropolitan Borough Council (on behalf of the Trans Pennine Trail National Office)

Contact (TPT National Office): info@transpenninetrail.org.uk

Council Information Governance (IG): informationrequests@barnsley.gov.uk

Council Data Protection Officer (DPO): DPO@barnsley.gov.uk

For general information about how Barnsley Council protects personal data, please see the Barnsley Council Privacy Notice.

2) The personal data we collect on the website

Depending on how you use the site, we may collect:

• Contact details (e.g., name, email address, phone number) when you submit forms (such as “Contact us”, route feedback, incident reporting or event enquiries), or when you contact local authority officers whose details are published on the site.

• Donation details (if you choose to donate to support the Trail), such as contact details and transaction information handled by our payment service provider.

• Order details (if you purchase maps or merchandise via our online shop), including contact and delivery information, and payment details processed by our payment provider.

• Photos/videos and consent records where you send media to us or are featured in content about Trail improvements or events. In some cases, this content is jointly managed with Sustrans under our data sharing agreement.

• Technical data such as IP address, device/browser type, pages visited, referring site and cookie identifiers, collected via cookies and similar technologies (see Section 5).

We aim to minimise the data we collect and will not ask for information we do not need.

3) How we use your personal data (purposes & lawful bases)

We process personal data only where we have a lawful basis under UK GDPR and the Data Protection Act 2018. Typical purposes include:

• Responding to enquiries and delivering website services (Article 6(1)(b) contract or 6(1)(e) task in the public interest for council services, as applicable).

• Administering donations and supporter communications (Article 6(1)(b) contract; and 6(1)(c) legal obligation for financial records).

• Processing online shop orders (Article 6(1)(b) contract).

• Publishing Trail-related content (e.g., photos/videos of events and improvements) with consent (Article 6(1)(a)), including where content is jointly controlled with Walk, Wheel, Cycle Trust (formerly Sustrans).

• Publishing local authority officers’ contact details to support transparency and public engagement (Article 6(1)(e) task in the public interest).

• Keeping the site secure and improving performance (Article 6(1)(f) our legitimate interests in operating an effective, secure public website).

Where special category data is involved (rare on our website), we only process it where a UK GDPR condition applies and we have an appropriate policy in place.

4) Sharing your data

We may share personal data when necessary and lawful, for example:

• Service providers (processors) who help us deliver the website and related services (e.g., CDP for website development/hosting; payment, email and analytics providers). We require them to keep data secure and act only on our instructions.

• Partners where a joint activity applies (e.g., Sustrans in relation to photos/videos of Trail improvements and events, under our joint controller agreement).

• Other council teams or public bodies where the law permits/obliges us to do so (for example, safeguarding or security).

We will only share the minimum necessary data and will seek your agreement where required.

5) Cookies and similar technologies

Our website uses cookies to:

• enable core functionality (e.g., session management, preferences),

• understand how the site is used so we can improve it, and

• support features like embedded maps, media or forms.

You can control cookies through your browser settings. Where analytics or marketing cookies are used, we will request consent via a cookie banner before setting them. For general guidance, see the ICO’s advice on privacy notices and cookies.

6) International transfers

Some providers we use may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place (e.g., UK International Data Transfer Agreement (IDTA) or standard contractual clauses), and we assess risk in line with Council policies.

7) How long we keep your data

We keep personal data only for as long as necessary to fulfil the purposes set out above, then securely delete or anonymise it in line with Council retention policies. Typical examples:

• Contact form enquiries: usually up to 12 months from last contact;

• Newsletter subscriptions: until you unsubscribe;

• Donation and financial records: typically 6 years (plus current financial year), to meet legal obligations;

• Online shop orders: in line with financial and contractual requirements.

8) Your rights

Under data protection law, you have rights to:

• access your data,

• rectify inaccuracies,

• erase your data (where applicable),

• restrict or object to processing,

• data portability (for information you provided to us), and

• withdraw consent at any time (where consent is our lawful basis).

To exercise your rights, contact the Council’s Information Governance Team at informationrequests@barnsley.gov.uk or our DPO@barnsley.gov.uk.

9) How to complain

If you have concerns about how we have handled your personal data, please contact the Council’s IG team or DPO first. If you remain dissatisfied, you can complain to the UK Information Commissioner’s Office (ICO). Details are provided in the Barnsley Council Privacy Notice.

10) Children’s privacy

We do not knowingly collect children’s personal data through this website. If you believe a child has provided us with personal data, please contact us so we can delete it promptly.

11) Updates to this notice

We may update this notice to reflect changes in the law or how we operate the website. Significant changes will be highlighted on this page with a new “Last updated” date.