Privacy Policy

Privacy Policy for Made in Bootle
Last updated: March 2026

Made in Bootle is owned and managed by Visit Southport, part of Sefton Metropolitan Borough Council. This Privacy Policy explains how we collect, use, and protect personal data when you use madeinbootle.com. We are committed to handling personal data in accordance with UK GDPR and the Data Protection Act 2018.

I. Data Controller Contact Details
Visit Southport (Sefton Council)
Southport Town Hall
Lord Street
Southport
PR8 1DA
United Kingdom
Email: [email protected]

II. Data Protection Officer
Information about Sefton Council’s Data Protection Officer is available here.

III. What Data We Collect and Why
1. Website Hosting and Technical Access Data
When you visit our website, technical information is automatically collected to ensure the security and functionality of the service.

Data collected:
IP address
Browser type and version
Operating system and device information
Pages visited and access times

Purpose: Provision of a stable, secure website.
Legal basis: Legitimate interests.
Recipients: Jimdo (website hosting provider).
Storage: Server log files are typically stored for 7 days by the hosting provider.

2. Contact Forms
If you contact us via our website:
Data collected:

Name
Email address
Message content
Technical metadata (e.g., IP address, browser information)

Purpose: Responding to enquiries and providing support.
Legal basis: Legitimate interests and/or pre‑contractual steps.
Recipients: Jimdo and email service providers.

3. Newsletter Sign‑Ups
If you subscribe to our newsletter:
Data collected:

Email address
Subscription preferences

Purpose: Sending newsletters and updates.
Legal basis: Consent.
Recipients: Newsletter/email service provider.
You may unsubscribe at any time.

4. Event Registration Forms
When registering for an event:
Data collected:

Name
Email address
Event‑specific information

Purpose: Managing registration and communication.
Legal basis: Contract performance and legitimate interests.
Recipients: Jimdo and email service providers.

5. Surveys and Feedback (Typeform)
We use Typeform to run surveys and feedback forms.
Data collected:

Survey answers
Name and email address (if provided)
IP address and device details
Timestamps

Purpose: Service evaluation and improvement.
Legal basis: Consent and legitimate interests.
Recipients: Typeform (EU‑based).

6. Analytics (Jimdo Statistics and any additional tools enabled)
Data collected:

Pages visited
Usage behaviour
Device and technical data
Time spent on site

Purpose: Improving website performance and content.
Legal basis: Legitimate interests (Jimdo Statistics) and consent where required for other analytics.
Recipients: Jimdo and any analytics providers used.

7. Cookies and Embedded Content
Embedded content loads only after consent is provided through the cookie banner.
This may include:

YouTube or Vimeo videos
Google Maps
Social media embeds (Instagram, Facebook, TikTok, X/Twitter)

Data collected:

IP address
Device information
Usage behaviour related to the embedded content

Purpose: Displaying and delivering embedded external content.
Legal basis: Consent.
Recipients: Relevant service providers (e.g., Google, Meta, Vimeo).

IV. Storage Periods
Personal data is stored only for as long as necessary for the purpose for which it was collected or as required by law. Unless Sefton Council’s internal retention schedules specify otherwise, the following periods apply:

Contact form submissions: Up to 12 months
Newsletter data: Until you unsubscribe
Event registration data: Up to 12 months after the event
Survey responses: Up to 12 months
Server logs: 7 days
Analytics data: Up to 24 months (provider default)
Cookies: As set out in your cookie banner or consent tool


V. Transfers to Third Countries
Some external service providers may process data outside the UK or EEA.
Where this occurs, transfers are protected using:

UK adequacy regulations
Standard Contractual Clauses
Additional organisational and technical safeguards

More information can be found in the privacy policies of the individual providers.

VI. Your Rights Under UK GDPR
You have the following rights regarding your personal data:

Access: Request copies of your personal data.
Rectification: Correct incomplete or inaccurate data.
Erasure: Request deletion where legally appropriate.
Restriction: Limit how your data is processed.
Objection: Object to certain processing activities.
Withdraw consent: At any time, without affecting prior lawful processing.
Data portability: Receive your data in a structured, machine‑readable format.
Complain to a supervisory authority: The Information Commissioner’s Office (ICO) at www.ico.org.uk.

To exercise your rights, contact:
[email protected]

VII. Changes to This Policy
We may update this Privacy Policy periodically. The latest version will always be published on this page.