Lesbury Community Shop

serving the wider community of Lesbury, Hipsburn and Bilton villages

Opening hours until 31st August 2026: Monday to Friday - 7.30am to 3pm, Saturday: 8.00am to 3:00pm, Sunday: 8.00am to 3:00pm

Opening hours from 1st September  2026: Monday to Friday - 7.30am to 3pm, Saturday: 8.00am to 3:00pm, Sunday: 8.00am to 1:00pm

Privacy Statement

Last Updated: 8th August 2026

We are committed to protecting and respecting your privacy. This Privacy Statement explains how we collect, use, and safeguard personal data provided by visitors to our website, in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are
We are Lesbury Community Shop Ltd.
• Contact Email: managementgroup@lesburyshop.co.uk
• Postal Address: Lesbury Community Shop Ltd, Lesbury, Alnwick NE66 3AX

2. Information We Collect and How We Use It
We collect personal data directly from you via your website interactions and form submissions:
A. General Contact Enquiries

  • Data Collected: Name, email address, message details, and any optional fields on our contact form.
  • Purpose: To respond to your direct queries and manage ongoing business relations.
  • Lawful Basis: Legitimate Interests (to reply to inbound communication effectively)

B. Volunteer Applications

  • Data Collected: Full name, contact info, background details, availability, and motivation provided in the volunteer application form.
  • Purpose: To match you to available volunteer positions and coordinate onboarding.
  • Lawful Basis: Consent (which you provide by filling out and submitting the form) or Legitimate Interests (to manage volunteer recruitment).

C. Financial Payments

  • Data Collected: Name and transaction amount. We do not store your payment details.
  • Purpose: To securely process payments and donations via our online portal.
  • Lawful Basis: Performance of a Contract (to complete the transaction you requested).

3. Cookies and Website Analytics
Our website uses cookies to improve user experience, securely handle payments, and analyse site performance.

  • Necessary Cookies: We load cookies from Stripe to process checkout transactions and prevent malicious fraud. These do not track you and are essential to site operations.
  • Analytics Cookies: We use Google Analytics to gather anonymous information about how visitors navigate our pages (e.g. page views, session duration). This data helps us improve our forms and layouts.
  • Control: Google Analytics cookies will not be set unless you explicitly click "Accept" on our website cookie banner.

4. Third-Party Data Processors
We do not sell your information. We share data only with the trusted technical platforms required to run our business services:

  • Krystal Hosting Ltd: Hosts our entire website infrastructure. All servers, files, databases, and website logs are securely stored in 100% UK-based data centres, keeping your personal data within UK jurisdiction.
  • Stripe, Inc: Acts as our secure third-party payment gateway. Your full payment card information is processed directly by Stripe and never touches or saves to our web servers.
  • Google LLC (Google Drive / Sheets): Our online forms automatically push submitted entry data straight into secure spreadsheet archives on Google Sheets to help our volunteers to process.

5. International Data Transfers
While your core website infrastructure is hosted locally in the UK with Krystal, our use of Google (for Sheets and Analytics) and Stripe means some backend data may be processed on servers outside the UK (such as the US). We ensure that these providers adhere to strict data safety measures, utilizing Standard Contractual Clauses (SCCs) or equivalent UK-approved mechanisms to protect your privacy.

6. Data Retention
We will hold your data only for as long as necessary to complete the task it was collected for (e.g., maintaining communication, reviewing application cycles, or complying with statutory financial record-keeping laws in the UK). When data is no longer needed, it is permanently deleted or anonymised.

7. Your Statutory Rights

Under the UK GDPR, you hold specific rights regarding your personal information:

  • Right to Access: You can request copies of the data we hold on you.
  • Right to Rectification: You can ask us to fix inaccurate or incomplete information.
  • Right to Erasure ("Right to be Forgotten"): You can ask us to delete your personal data under certain conditions.
  • Right to Withdraw Consent: Where data processing relies on consent, you may withdraw it at any time.

To exercise any of these individual rights, please drop an email directly to our contact listed in Section 1.

8. How to Raise a Complaint
If you believe we have processed your information unlawfully, please contact us first so we can fix it. If we cannot resolve your issue, you retain the full legal right to lodge an official complaint directly with the UK supervisory authority:
• Authority: Information Commissioner's Office (ICO)
• Helpline: 0303 123 1113