Privacy & cookies

This website is run by Leamington High Line CIC (community interest company no. 15586799), the community group working to turn Leamington's disused railway viaduct into a linear garden. We are the data controller for the information described on this page, and we are registered with the Information Commissioner's Office (registration reference ZC263794).

Our contact details

• Name: Leamington High Line CIC
• Email: hello@leamingtonhighline.org
• Postal address: Unit 14c Althorpe Street, Leamington Spa, CV31 2AU
• Website: leamingtonhighline.org

If you have any questions about this page or how we handle your information, email us. We are not required to have a data protection officer; a named director looks after data protection and answers requests.

We only collect what we need to run the project, and we collect almost all of it directly from you. In brief:

• If you contact us: your name, email address and message.
• If you join the Friends: your name, email address, postcode, the membership you chose, your payment history and your choices about the Friends wall and our updates.
• If you donate through GoFundMe: the name, message and amount you give there, which GoFundMe shows to the director who runs the campaign.
• If you join one of our supporters' WhatsApp groups: the name and phone number WhatsApp shows, and the messages you post.
• If you visit the site and accept cookies: anonymous statistics about how the site is used.

We never collect card or bank details (Stripe, our payment provider, or GoFundMe holds those), and we never buy information about you from anyone else. The information we receive indirectly is payment confirmation from Stripe, so that we know a Friends payment has gone through, and the donor details GoFundMe shows us. The sections below explain each case in more detail.

If you use the contact form, we store the name, email address and message you give us so that we can reply. Our lawful basis for this is our legitimate interest in answering an enquiry you have chosen to send us. The message is stored on Google Cloud (Firebase), which we use to run this site, and a copy is emailed to the committee through Resend, our email service, where the directors who answer enquiries read it. We don't share your message with anyone else or use it for marketing. The website's copy is deleted within 12 months. The email copy is kept as our record of correspondence for as long as the CIC exists, unless you ask us to delete it, which you can do at any time.

Friends is our membership scheme. This section explains what we hold about you if you join.

What we hold. Your name, email address and postcode; the tier you chose, the amount and whether you pay monthly or yearly; the dates you joined and, if it comes to it, cancelled; a record of each payment; whether you asked to be named on the Friends wall; and whether we have added you to our updates list. We do not hold your card or bank details: those are held by Stripe, our payment provider, and never pass through our website.

Why we hold it. To run your membership: taking your payments, recognising you as a Founding Friend, sending you the Friends updates that are part of the membership, and meeting our accounting duties. In legal terms this is processing needed to perform our agreement with you, and keeping the payment records afterwards is a legal obligation under company and tax law. If you donate a larger amount privately rather than through the website, we hold the same details under the same terms, and we only add you to the updates list if you have said we may.

Who can see it. Only the directors who run the scheme and the site's administrators. We never sell or share your details, and nobody receives them for marketing.

Who helps us process it. Stripe (payments, receipts and the "Manage your membership" portal), Resend (our emails), and Google Cloud, through Firebase (where our copy of the Friends list is stored). Each of them handles your information only on our instructions, under a written data processing agreement. Stripe and Resend are based outside the UK; transfers to them are covered by the UK's approved standard contractual clauses.

Keeping your details up to date. You can change your name, email address, postcode and payment method at any time through the "Manage your membership" link in your emails, or by asking us at hello@.

The Friends wall. If you choose Yes when you join, your first name and last initial (for example "Sam P."), or the name for the wall you type when you join, appear under your tier on the Friends wall on this website, and on any real wall we put up on the High Line in future. Nothing else about you is published. As a Founding Friend your name stays on the wall even if you cancel your membership. This is done with your consent, and you can withdraw it at any time by replying to any of our emails or writing to hello@; your name comes off the wall the same day.

Emails. Friends receive updates by email. Every one carries an unsubscribe link, and using it stops the emails and nothing else: your membership and payments continue. Cancelling your membership is separate and is done through the "Manage your membership" link.

How long we keep it. For as long as you are a Friend and for six years after your last payment, because we must keep financial records for that long. After that we remove your name and contact details and keep only the anonymised amounts. Cancelled Friends come off the updates list straight away. Founding Friends on the wall stay on it after cancelling, so we keep the name shown there (first name and initial) for as long as the wall exists, unless you ask us to remove it.

From time to time we raise money through a GoFundMe campaign. GoFundMe is a separate organisation with its own privacy policy, and it is responsible for the information you give it, including your card details, which never reach us. What we see is what GoFundMe shows the campaign organiser: your name (unless you donated anonymously), the amount, any message you left and, where GoFundMe passes it on, your email address. We use that only to thank you and to account for the money, on the basis of our legitimate interest in thanking someone who has chosen to donate. We keep no copy of your details outside GoFundMe, and this website shows only the campaign total.

We run one or two WhatsApp groups for people who have asked to keep in touch with the project or to volunteer. If you join one, the other members and the directors who run the group can see the name and phone number your WhatsApp profile shows, as in any WhatsApp group, and the messages you post. We use the group only to share news and arrange activities; we never copy numbers from it into mailing lists or spreadsheets, and we only email people who have asked for emails. You can leave a group at any time, which removes you from it. WhatsApp itself handles your messages under its own privacy policy.

We use Google Analytics to understand how visitors use the site: which pages are popular, and how people find us. This helps a small volunteer team put its effort where it matters. The information is anonymous usage data; it is processed by Google on our behalf and we rely on your consent to collect it.

Google Analytics only runs if you choose Accept on the cookie banner. If you do, it sets these cookies:

• _ga: distinguishes visitors; kept for up to 2 years.
• _ga_SHZ34KXLQC: remembers your browsing session; kept for up to 2 years.

If you decline, no analytics cookies are set and nothing about your visit is sent to Google. The site works exactly the same either way. We don't use any advertising or social-media tracking cookies.

Your choice is remembered in your browser's local storage (that's not a cookie, and nothing about it leaves your device).

You can change your choice at any time with the Manage cookies button below (also in the footer of every page). Choosing Decline after previously accepting stops the analytics and removes its cookies. You can also delete cookies through your browser's settings.

The website's information is stored in Google Cloud (Firebase), Stripe or Resend, each protected by access controls and two-step verification, and only named administrators can reach it. GoFundMe donor details stay on GoFundMe, and WhatsApp groups live on the phones of the directors who run them, which are kept locked. Apart from email correspondence with you, we never keep copies in spreadsheets, on paper or in personal inboxes. When a retention period ends, the record is deleted or anonymised as described in each section.

Under UK data protection law you have rights over your information, including:

• Access: to ask for a copy of the personal information we hold about you.
• Rectification: to ask us to correct information you think is wrong, or to complete information you think is incomplete.
• Erasure: to ask us to delete your information in certain circumstances.
• Restriction: to ask us to limit how we use your information in certain circumstances.
• Objection: to object to how we use your information in certain circumstances.
• Portability: to ask us to pass the information you gave us to you or to another organisation in a usable form, in certain circumstances.
• Withdrawing consent: where we rely on your consent (the Friends wall and cookies), you can withdraw it at any time.

There is no charge for exercising your rights. Email hello@leamingtonhighline.org and we will reply within one month.

If you have any concerns about how we use your information, please tell us first at hello@leamingtonhighline.org and we will do our best to put things right.

You can also complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, by phone on 0303 123 1113, or through ico.org.uk (opens in a new tab).

We will update this page when our practices change and note the date here. Last updated: 17 October 2026.