Privacy Policy

For the Pay It Forward Hub Activity & Booking Website

Last Updated: 21 May 2026

1. Who We Are

This website is operated by Boomerang Cardiff on behalf of the Pay It Forward Hub.

We are committed to protecting your privacy and handling your personal information responsibly and in accordance with UK GDPR and Data Protection laws.

2. Information We Collect

We may collect the following information:

  • Names
  • Email addresses
  • Phone numbers
  • Billing details
  • Emergency contact details
  • Children's details where required for activities
  • Medical or accessibility information relevant to participation
  • Booking history
  • IP address and website usage data

3. How We Use Your Information

We use your information to:

  • Process bookings and payments
  • Manage activities and attendance
  • Contact you regarding bookings
  • Provide customer support
  • Maintain safeguarding records
  • Improve our services
  • Meet legal and regulatory obligations

We will only use your data where we have a lawful basis to do so.

4. Payments

Payments may be processed through secure third-party payment providers. We do not store full payment card details on our systems.

5. Sharing Your Information

We do not sell your personal information.

We may share information with:

  • Payment providers
  • IT and website service providers
  • Emergency services where necessary
  • Legal or regulatory authorities where required by law

All third parties are expected to handle your data securely.

6. Data Storage & Security

We take appropriate technical and organisational measures to protect your data against:

  • Unauthorised access
  • Loss
  • Misuse
  • Alteration

However, no online system can be guaranteed to be completely secure.

7. Children's Data

Where activities involve children, parents or guardians are responsible for providing consent and accurate information.

We only collect information necessary for participation, safeguarding, and emergency purposes.

8. Photography & Media

Images or videos captured during activities may be used for:

  • Social media
  • Promotional materials
  • Funding applications and reports
  • Website content

You may opt out by contacting us before attendance.

9. Your Rights

Under UK GDPR, you may have the right to:

  • Access your personal data
  • Correct inaccurate information
  • Request deletion of data
  • Restrict or object to processing
  • Withdraw consent where applicable

Requests can be made by contacting us directly.

10. Cookies

Our website may use cookies and analytics tools to improve user experience and monitor website performance.

You can manage cookies through your browser settings.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Updated versions will be posted on this website.

12. Contact Us

For any questions regarding these Terms or Privacy Policy, please contact:

Boomerang Cardiff

You may also wish to include:

  • Registered charity/company number
  • Email address
  • Telephone number
  • Registered office address
  • ICO registration number (if applicable)