50 Years of COSRT — Alumni

Privacy policy

This policy is a draft for review by the alumni group's data contact. Sections marked [to be confirmed] must be completed before launch.

Who we are

This anniversary website is operated by COSRT50 Alumni ("we", "us", "the alumni group"), an independent volunteer group of former members and colleagues. The alumni group is the data controller for personal data processed through this site; it is not part of COSRT and this site is not an COSRT service. Contact: Tricia Evans <tricia@asdellevans.co.uk>. Information Commissioner's Office (ICO) registration: [registration number to be confirmed].

What personal data this site handles

  • Photographs of identifiable people, published in the photo gallery — archive photographs from the history of COSRT and photographs taken at the alumni group's anniversary celebration on 2 October 2026.
  • Names and credits where photographs are captioned with the names of people shown or credited.
  • Contact details (your name and email address) if you email us about the event, or to request changes to photographs.
  • Aggregate page-view statistics — for each page view, the page address, referrer, screen size, browser type and an approximate country. This is collected without cookies and is not linked to your identity (see "Cookies and tracking" below).

Why we use this data (lawful bases)

  • Consent — photographs taken at the 2 October 2026 celebration, which is organised by the alumni group, are published on the basis of the photography notice given before and during the event, with an opt-out available on the day.
  • Legitimate interests — archive photographs of historical interest are published by the alumni group to document and celebrate COSRT's fifty-year history. We balance this interest against the interests of the people shown, and remove photographs on request.

Where the site is hosted

The site is a static website served by GitHub Pages, a service of GitHub, Inc. (United States). GitHub acts as a processor for the technical delivery of the site. GitHub is certified under the EU–US Data Privacy Framework. No user accounts are used and no visitor registration takes place. The site shares no visitor data with COSRT.

Cookies and tracking

This site sets no cookies and loads no third-party scripts or fonts. All code needed to run the site is served from this site itself.

Page views are counted with self-hosted GoatCounter, an open-source analytics program running on a server operated by the alumni group (stats.minus1.com). It uses no cookies and stores no persistent identifiers. For each page view it records the page address, the referring page, screen size, browser type, and an approximate country (derived from the IP address, which is not stored). To tell apart visits that happen around the same time it computes a one-way hash of the IP address and browser string with a salt that rotates daily; the hash cannot be used to recover an IP address or to recognise anyone on a later day. The statistics stay on the alumni group's own server and are never shared with COSRT or any other party. The automatic display used at the event venue is excluded from counting.

[Confirm the page-view analytics wording with the data contact]

How long we keep photographs

[Retention period to be confirmed with the data lead] Photographs are removed earlier on request (see below).

Your rights

Under the UK GDPR and the EU GDPR you have the right to access personal data we hold about you, to ask for it to be corrected or erased, to object to or restrict processing, and to complain to the Information Commissioner's Office (UK) or your local supervisory authority (EU).

Requesting a photograph is removed

If you are identifiable in a photograph on this site and would like it removed or amended, email Tricia Evans <tricia@asdellevans.co.uk> with a link or description of the photograph. We will review and remove it. You do not need to give a reason.

Changes to this policy

Any changes will be published on this page.