Privacy policy
This policy is a draft for review by the alumni group's data contact. Sections marked [to be confirmed] must be completed before launch.
Who we are
This anniversary website is operated by [COSRT50 Alumni — group name to be confirmed] ("we", "us", "the alumni group"), an independent volunteer group of former members and colleagues. The alumni group is the data controller for personal data processed through this site; it is not part of COSRT and this site is not an COSRT service. Contact: [alumni group contact email to be confirmed]. Information Commissioner's Office (ICO) registration: [registration number to be confirmed].
What personal data this site handles
- Photographs of identifiable people, published in the photo gallery — archive photographs from the history of COSRT and photographs taken at the alumni group's anniversary celebration in October 2026.
- Names and credits where photographs are captioned with the names of people shown or credited.
- Contact details (your name and email address) if you email us about the event, or to request changes to photographs.
Why we use this data (lawful bases)
- Consent — photographs taken at the October 2026 celebration, which is organised by the alumni group, are published on the basis of the photography notice given before and during the event, with an opt-out available on the day.
- Legitimate interests — archive photographs of historical interest are published by the alumni group to document and celebrate COSRT's fifty-year history. We balance this interest against the interests of the people shown, and remove photographs on request.
Where the site is hosted
The site is a static website served by GitHub Pages, a service of GitHub, Inc. (United States). GitHub acts as a processor for the technical delivery of the site. GitHub is certified under the EU–US Data Privacy Framework. No user accounts are used and no visitor registration takes place. The site shares no visitor data with COSRT.
Cookies and tracking
This site sets no cookies, uses no analytics or tracking tools, and loads no third-party scripts or fonts. All code needed to run the site is served from this site itself.
How long we keep photographs
[Retention period to be confirmed with the data lead] Photographs are removed earlier on request (see below).
Your rights
Under the UK GDPR and the EU GDPR you have the right to access personal data we hold about you, to ask for it to be corrected or erased, to object to or restrict processing, and to complain to the Information Commissioner's Office (UK) or your local supervisory authority (EU).
Requesting a photograph is removed
If you are identifiable in a photograph on this site and would like it removed or amended, email [alumni group contact email to be confirmed] with a link or description of the photograph. We will review and remove it. You do not need to give a reason.
Changes to this policy
Any changes will be published on this page.