Elmbridge Community Eco Hub

Privacy Policy

Elmbridge Community Eco Hub (ECEH) (‘The Hub’) collects and processes personal information in order to help us provide our services and meet our community-based objectives.

Our privacy policy covers the use of ECEH website and all other services that ECEH provides, along with our role as a contractor of services from others and a potential employer. The use of our website and all our services is conditional on accepting ECEH’s privacy policy.

If you have any questions or comments for ECEH, please send an email to info@elmbridgeecohub.org.uk

Your rights to access personal information ECEH holds

You have the right to make a Subject Access Request and see personal data ECEH holds on you, have it amended (ie. corrected or updated) or deleted. We will resolve any issues you have within the GDPR required one-month timescale, free of charge.

Please contact us by e-mail if you wish to make a Subject Access Request at  info@elmbridgeecohub.org.uk 

You have the right to lodge a complaint with the Information Commissioner’s Office if you are not satisfied with our service.  Further information and contact details are on their website.


ECEH may from time to time produce an email newsletter or other e-mailed communications for people who prefer email to getting updates on Twitter or Facebook. You can unsubscribe from such communication at any time.  Simply let us know that you wish to unsubscribe. 

What data do we collect and how do we use it?

ECEH collects and processes information in order to:

  • Deliver our services in line with our community, environmental, educational and other objectives
  • Meet our obligations to our members and volunteers, and organisations and individuals from whom we obtain goods and services
  • Satisfy the needs of funders/prospective funders and other partners
  • Market our services to people ie. send information about existing and new services/initiatives
  • Customise people’s experience, for example, providing information that we think is relevant to them
  • Monitor and evaluate our services
  • Satisfy our diversity and other policies
  • Take payment

You may be asked, either when you register with us, or at other times, for information about yourself, such as your name, email address, postal address and telephone number.

When you order certain services, we will need to know your payment details ie. credit/payment card number and expiration date. You are under no obligation to provide this information, but if you don’t then we may not be able to provide you with certain services.

Personal data will be obtained only for one or more specified and lawful purpose and will not be further processed in any manner incompatible with that purpose. It will be adequate, relevant and not excessive in relation to the purpose or purposes for which it is being processed.  No personal information is kept unnecessarily.

ECEH organises personal data so that it can be accessed quickly by the relevant people.  We will not share, sell or rent your personal information to third parties. ECEH may disclose aggregate statistics about our website visitors and people receiving our services to our funders/prospective funders, prospective partners, advertisers and other reputable third parties and for other lawful purposes, but these statistics will not include personally identifying information.

ECEH may disclose personal information if required to do so by law or if it believes that such action is necessary to protect and defend the rights, property or personal safety of ECEH’s people, visitors to the website and users of our other services.

The ECEH website contains external links. When you visit these sites, we suggest that you read their privacy policies if you have any concerns. ECEH is not responsible for the privacy policies or the content of external websites.

We believe all third-party suppliers who assist us to provide our services are GDPR compliant. Please refer to their privacy policies on their websites if you have any concerns. We believe they are all GDPR compliant. If you have any concerns, please let them know, and also send us an email at info@elmbridgeecohub.org.uk   If you have any concerns about personal information being passed to the third-parties who help ECEH supply any of its services, please send us an email at the same address.

Cookies and other website data tracking

The Elmbridge Eco hub website uses cookies. They are pieces of information that a website transfers to your hard drive to store and sometimes track information about you. Most web browsers automatically accept cookies, but if you prefer, you can change your browser to prevent that. However, you may not be able to fully use a website if you do so.

Most web browsers allow some control of most cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.allaboutcookies.org.

The ECEH website may automatically collect non-personal information about you such as the type of internet browsers you use. You cannot be identified from this information and it is only used to assist us in providing an effective service on our site.

WordPress collects some information like what websites link to the ECEH website, the numbers of people visiting the site and what countries they are from.


 ECEH places a great importance on the security of information associated with our service users. We have security measures in place to attempt to protect against the loss, misuse and alteration of customer data under our control. Only authorised personnel have access to user information.

With regard to our website, WordPress use secure server software (SSL) to encrypt information you input. While we cannot ensure or guarantee that loss, misuse or alteration of data will not occur, we use our best efforts to prevent this. We believe all the third parties we use to run the ECEH website are GDPR compliant.

Where is the information stored?

Paper-based materials – ie. monitoring forms you may fill out on one of ECEH’s courses, or records of service use such as Library of Things or the Community Fridge  – are kept securely at our registered office: 1 Hersham Rd, Walton on Thames, KT12 2QY.

Electronic data is also stored in the cloud on our Dropbox files. The organisation’s data is secure and GDPR compliant.

Information submitted by you may be transferred by us to reputable third party suppliers situated outside the European Economic Area (EEA) if necessary for our day to day running of the Hub, ie WordPress used for the ECEH website.

Data breaches

 If we believe your personal data may have been breached, we will contact you at the earliest possible time with details of actions we intend to take and any actions you should take, such as changing passwords.

Business transfer

If ECEH were to cease operating or to merge with another organisation, personal data will only be passed to other parties only on the basis that the data would be used in accordance with this privacy policy. For instance, if ECEH ceases operating, the ECEH website may continue to be run by another organisation. They will only be able to use any personal data for the original purpose for which it was supplied, based on the consent given.

If you have any questions or comments for ECEH, please email us at info@elmbridgeecohub.org.uk


Version 2.0

Version 2 – 8/5/2023