Contact Us

Use the form on the right to contact us, or email us directly on amanda.secrettruro@gmail.com

Our Privacy Notice is here so that you can see where your data goes when you email us.

         

123 Street Avenue, City Town, 99999

(123) 555-6789

email@address.com

 

You can set your address, phone number, email and site description in the settings tab.
Link to read me page with more information.

Privacy Notice

We are always thrilled when anyone reads our blog, follows us on social media or comments on the website.  It's important for us to let you know that we don't do anything weird with your personal data - so here's a rundown of what we do.

Who even are we?

  • Secret Truro was conceived and is managed by Amanda Williams, who owns Wavemedia (SW) Ltd (a marketing & data protection consultancy Company No: 11576626). The Registered Office for Wavemedia (SW) Ltd is c/o Harland Accountants, Unit 3, South View House, Enterprise Park, St Austell, Cornwall PL25 4EJ.

  • This website is a brochure site which champions local organisations and hopefully does it’s bit to make Truro and even better place to live, work and play. We don’t update this site much since Covid, but check out our socials for news and updates.

  • Amanda is a Data Protection Consultant and all round geek when it comes to GDPR. She achieved a Post Grad Cert in Data Protection Law and Information Governance so you don’t have to. Through Wavemedia (SW) Ltd, Amanda has helped numerous clients, large and small, local and international on their compliance journey.

  • You can contact us by emailing amanda@wavemediauk.net

What data do we collect (er, not that much actually), why and what's the legal basis?

  • We have got cookies set on this website which help us see which pages are popular and that helps us plan our content. This is with your consent. We are working on a better cookie plugin which gives you more control, but we don’t use third party tracking cookies and there aren’t any social media pixels either.

  • If you choose to ‘LIKE’ a blog post, your IP address will be logged so that you can’t ‘like’ multiple times and this action is stored in your browser’s local storage. You are doing this with your consent and can easily unlike the post again if you are uncomfortable with your IP address being logged.

  • If you send us an email, we'll see your name and email address and we'll correspond and have a bit of a chat, with your consent.

  • If you contact us on social media, we'll see your social media profile including your name, with your consent.

  • If we are out and about and take photos with you, we'll ask for your consent first.

  • If you are an organisation we are working with to produce content, we'll collect and process your name and contact details so that we can write a lovely blog post about you.  If this is sponsored content, we'll process your payment information and this will be because we have a contract with you.

  • If you are coming to an event, we will be collecting your name and contact details via Eventbrite on the legal basis of the ‘contract’ we have with you. Some events are run by other organisations and we will make this clear at the time. We will add you to our event email marketing list which will tell you about further events we plan to run. This will be under the legal basis of ‘Legitimate Interest’, and you are advised at event that you can opt out at the time, or unsubscribe at any time. If you unsubscribe, we will keep your data on a ‘suppression list’ in Mailchimp so that we don’t accidentally email you again.

  • If I am running an event with another organisation as a ‘Joint Controller’ I will be passed on your details so that I can run the event/do the training/provide further follow up etc. There will be an agreement between us that we both abide by current Data Protection legislation and you will be provided a copy of this Transparency Notice as soon as possible. It will be possible for you to be part of my Event Email Marketing providing you don’t Opt Out at the time (you may opt out at any time afterwards) and this is done under the legal basis of Legitimate Interest and the PECR Soft Opt in.

  • If you subscribe on our ‘Secret Truro Sessions’ landing page, this will be by your ‘consent’ and we will keep you in touch via Mailchimp. This privacy notice will be hyperlinked and you can unsubscribe at any time.

  • If you book a Training or Consultancy session online, we will collect your contact details and payment will be made via PayPal, or if I invoice you, this will be via Xero.

  • If you become a client of Wavemedia (SW) Ltd, either for marketing or data protection advice, we will collect your business name and contact details, details of your staff so that we can fulfill our contract to you. You’ll be invoiced via Xero.

We're very easy going and if we are using consent as a legal basis, you are free to withdraw it at any time.  You are in control of your personal data and how you interact with us.

Who do we share your data with?

  • We don't sell your data with anyone. Never have done, never will. When you post on our social media profiles or post a comment on this blog, that will be seen by other users.

  • We have just started up an email marketing list, which will be related to our events and Truro news. We run events with other Data Controllers and in this instance, we are Joint Controllers for the data we collect at each event. We may also work with local businesses and present you with their news and/or offers. We will not share your personal data with them, but we will present you with links and information so that you can access their offers yourselves. We use Mailchimp, which is based in the USA and uses Standard Contractual Clauses as a safeguard. You can read more about Mailchimp’s Privacy Policy here. We will not be using custom audiences.

  • If we do Facebook Advertising, this will all be within the Facebook platform.  We won't use custom or lookalike audiences. Because we have a Facebook Page, we are considered ‘Joint Controllers’ with Facebook, so you’ll find a copy of this Notice on our Facebook Page too.

  • Cookies are used on our social media pages so that we can see (a) aggregated data which helps us determine which posts have been popular and (b) help us with our social media advertising. We don’t control the cookies that social media sites set, but you are able to control your ad preferences here:

    Twitter: https://twitter.com/personalization

    Facebook and Instagram: https://www.facebook.com/ads/preferences

  • We don't share personal data with our other writers - they see what the public can see. That's all.

  • If you are a company we are working with to produce content, we would only share your personal data with other companies when you have consented for us to do so.

  • If you are an organisation which has engaged with us for professional advice or training for data protection or marketing, we use platforms such as Trello, Xero, and Microsoft 365 or Google to ensure that the business is efficient.

How long are we keeping your data for?

  • If you send us an email, we'll correspond get to know each other - perhaps even collaborate.  But once that enquiry is dealt with we'll have a good Spring clean of our emails every year.

  • If we're working together and you've either paid for sponsored content, you are a Secret Truro Session Trainer OR you’ve been to one of my events and paid for a ticket, then we'll keep details on our accounting system for 7 years.

  • If you are a client and we provide data protection consultancy, we’ll keep your details on our accounting system for 7 years.

  • If you subscribe to our email marketing list, or are added under the ‘soft opt in’ because you are a customer of ours, or have been to an event, then you can unsubscribe at any time. If you haven’t opened emails in 6 months, we will move your name onto the ‘unsubscribe’ list which we’ll keep so we don’t accidentally email you again.

  • The rest is up to you - if you want to delete comments on social media or on this blog, then you are welcome and we won't mind one little bit.  Promise.

Do we transfer your personal data outside of the EEA?

We make sure that the systems and apps we use are compliant with current data protection legislation.  This means that we've checked that everything has the proper safeguards in place. The website is hosted on SquareSpace which is in the EU.

You have new rights

You have a right to:

  • Be informed

  • Access

  • Rectification

  • Erasure

  • Portability

  • Object to marketing

  • Restriction

  • Right to know about automated processing.

You can get in touch with the ICO directly here

Our ICO Registration Number is: ZA235037

We don't do any automated processing

We won't profile you and troll you around the internet with pictures of handbags.  Or bring about the fall of Western Democracy.  Pinkie Promise.

Thanks for hanging out until the end - hopefully it wasn't too painful.  Get in touch if you want to know more.