Skip to main content

Privacy Policy

Last Updated: 30.1.2025

1. Who We Are

Norfamton is a community-driven platform dedicated to empowering creative communities, advocating for Windrush initiatives, and supporting sustainable revenue generation through e-commerce and donations.

Our website address is: https://norfamton.co.uk.

2. Information We Collect

We collect personal data from visitors, subscribers, customers, and community members in the following ways:

2.1 Comments & Community Interaction

  • When visitors leave comments on the site, we collect the data shown in the comments form, the visitor’s IP address, and browser user agent string for spam detection.
  • An anonymized string (hash) created from your email address may be sent to the Gravatar service. (See their privacy policy here: https://automattic.com/privacy/).
  • After comment approval, your profile picture (if available) may be publicly visible.

2.2 Media Uploads

  • If you upload images, avoid including embedded location data (EXIF GPS) as visitors may extract this information.

2.3 Cookies

We use cookies to improve user experience. Specific uses include:

  • Comments: If you leave a comment, you may opt-in to saving your name, email, and website in cookies. These last for one year.
  • Login & User Preferences:
    • Temporary cookie for checking browser compatibility (expires when closed).
    • Login cookies last for two days, or two weeks if “Remember Me” is selected.
    • Screen preference cookies last for one year.
  • E-Commerce & Checkout:
    • If you add items to your cart, a cookie will store cart details temporarily.
    • If you proceed to checkout, additional cookies may be used to save progress and payment details securely.

You can manage cookie settings through your browser at any time.

2.4 Embedded Content from Third-Party Services

Articles and pages on this site may include embedded content (e.g., videos, social media feeds, donation forms, etc.). Embedded content behaves as if you visited the third-party website directly.

  • These third-party services may collect data about you, track interactions, and use cookies.
  • External services we integrate include YouTube, Instagram, Facebook, Mailchimp, Stripe, PayPal, Printful/Printify (for merchandise orders), and Eventbrite (for event registration).

3. How We Use Your Data

We use collected data for:

  • Providing website functionality, community engagement, and e-commerce services.
  • Managing event registrations and ticketing.
  • Processing merchandise orders and donations.
  • Sending email updates, promotions, and event reminders (via Mailchimp/ConvertKit).
  • Monitoring website traffic and user interactions for performance improvements.
  • Protecting against spam, fraud, and security threats.

4. Who We Share Your Data With

We do not sell or rent personal data. However, we may share data with trusted third-party services to enhance user experience, process payments, and secure transactions:

  • Stripe & PayPal – For payment processing (see Stripe’s Privacy Policy and PayPal’s Privacy Policy).
  • Printful/Printify – For print-on-demand order fulfillment.
  • Mailchimp/ConvertKit – For email marketing and automated workflows.
  • Google Analytics & Facebook Pixel – For website traffic analysis and targeted advertising.
  • Spam Detection Services – To prevent abuse and fraudulent activity.

5. How Long We Retain Your Data

  • Comments and metadata are stored indefinitely for moderation and continuity.
  • Registered users can see, edit, or delete their personal data (except usernames).
  • Transaction data for e-commerce purchases and donations is retained as required by financial regulations.

6. Your Rights Over Your Data

You have the right to:
✅ Request an export of your personal data.
✅ Request deletion of your data (except where retention is required for legal or security purposes).
✅ Opt-out of email marketing via the unsubscribe link in any email.

To request changes or deletions, contact us at: [Insert Contact Email].

7. Security Measures

We take appropriate security measures to protect your personal data, including SSL encryption, firewall protection, and access control for stored data.

8. Where Your Data Is Sent

  • Comments may be processed via an automated spam detection service.
  • Payment transactions and order details are handled securely through Stripe, PayPal, and Printful/Printify.
  • Email and marketing data may be processed by Mailchimp, ConvertKit, and Google Ads.

9. Changes to This Privacy Policy

We may update this policy periodically. Any changes will be reflected on this page, and significant updates will be communicated via email or website notifications.

For any concerns, please contact us.