Privacy Policy

We understand the importance of your privacy and are committed to safeguarding the Personal Data we collect from you. Our entities, including the Bluebell Railway Preservation Society (BRPS), Bluebell Railway plc, and the Bluebell Railway Trust (registered Charity no. 292497), operate from Sheffield Park Station, Nr. Uckfield, East Sussex TN22 3QL, tel. (01825 720800).

Legal Compliance: Personal Data is managed in accordance with the UK Data Protection Act 2018, the General Data Protection Regulations (GDPR), and the Privacy and Electronic Communications Regulations (PECR).

The Bluebell Railway will never sell your Personal Data, or otherwise use your data for the benefit of outside parties. We do not use your Personal Data for automated decision making, profiling, screening or other similar processes. We will only use your data for purposes reasonably required in the ordinary course of Bluebell Railway activity. This Privacy & Cookie Policy outlines the types of Personal Data that we may collect, how that Personal Data will be used, disclosed, transferred and stored, and sets out the measures that we take to comply with the above Acts and Regulations.

Personal data collection

We collect and hold personal data that is necessary for our activities and functions, or as permitted by law.

Why we collect personal data:

Providing membership services
Assisting with queries
Processing bookings or applications
Acting as an agent upon request
Surveys, marketing, promotions
Fulfilling legal or regulatory requirements
Analysing services and customer needs
Necessary for employees, volunteers, contractors, and suppliers

How we collect personal data:

Directly from you
Through standard forms, internet, email, or telephone
Third-party contractors or agents

Types of personal data collected:

name
address
email
social media
and other relevant contact details

Sensitive information is collected only with express consent and if reasonably required.

We shall not disclose sensitive data to any other party beyond necessary third-party contractors or agents without your consent. We will hold your Personal Data as current for up to two years after its last active use or to legally required timescales (whichever is the longer), after which your Personal Data will be archived and not used or maintained, unless you contact us further.

Failure to provide personal data

Incomplete or inaccurate Personal Data may affect our ability to provide products and services.

Cookies

When accessing our websites or apps, additional Personal Data may be collected including server/IP address, date/time of visit, pages/documents visited, and user preferences. Cookies are used to monitor usage for customized web pages. You may configure your browser to disable cookies, but this may affect website/app functionality.

We use Google Analytics and Facebook Pixel for anonymized data collection and tracking.

Data handling

Legitimate Interest: We use this legal basis for holding and processing Personal Data where appropriate. Consent is required for ‘new’ individuals’ data from 25 May 2018 onwards.

Use and Disclosure: Personal Data may be disclosed to entities within Bluebell Railway, service providers, and where required by law or with consent.

Handling Personal Data Overseas: By engaging us, you consent to the disclosure of your data outside the UK, ensuring privacy compliance.

CCTV and webcams

CCTV is used for various purposes including crime prevention and public safety. Webcams are for public viewing without recording.

Data integrity and security

We employ security measures to protect Personal Data from misuse, loss, unauthorised access, modification, or disclosure.

Access and correction

You may request access to your Personal Data or request corrections. We’ll respond within a reasonable timeframe and provide explanations for any denial.