Privacy Policy | JW Supporting Communities

1. Who I Am

JW Supporting Communities is operated by Jake Wells as a sole trader ("I", "me", "my"), based in the UK.

I connect local sponsors, whether people or businesses, with community groups who need a website, and I build, host and update those websites. This policy explains how I collect, use, store and protect personal data when you visit this website, get in touch, sponsor a community, or apply for support for your group.

I am the data controller for the personal data I collect about you, which means I am responsible for deciding how and why it is used, and for keeping it safe.

2. What Data I Collect

If you get in touch or sponsor a community: your name, email address and phone number; your business name if you sponsor as a business; the community you would like to support; how you would like to be credited (a name, a business name, a logo and a link, or anonymous); and any message you send me.

If you apply for support for a group: your name and contact details, the group's name, what it does, who runs it, whether it has an existing website, and anything else you choose to tell me. If I build or update your group's website, I will also handle the content you send me, such as text, logos and photos.

Payments: sponsorship payments are taken by Stripe. Card details are entered on Stripe's secure pages, and I never see or store full card numbers.

Collected automatically: your IP address and browser type may be processed by the services that deliver this site (see Section 5). I do not use analytics or advertising trackers.

I do not collect more than I need. If something is not necessary to set up a sponsorship, build or update a website, or reply to you, I do not ask for it or keep it.

3. How I Use Your Data

Your data is used only for specific, legitimate purposes: replying to your enquiry; matching sponsors with communities; setting up and taking monthly sponsorship payments; adding the agreed sponsor credit to a community's website; building, hosting and updating community websites; keeping basic financial records for HMRC; and running the service well.

Your data is never sold or used for marketing without your clear consent. I do not run mailing lists or advertising, and I do not share your details with anyone for their own marketing.

4. Lawful Basis for Processing

Under UK GDPR, I rely on: Contract (setting up and running a sponsorship, or building and hosting a community's website); Legitimate interest (replying to enquiries and applications); Legal obligation (keeping financial records for HMRC); and Consent (for anything else, such as publishing your name, business name or logo as a public credit, or using a testimonial with your name attached). You can withdraw consent at any time.

5. Who I Share Your Data With

Personal data is shared only where necessary:

Formspree, which processes messages sent through the contact form
Tally, which hosts the sponsor and community application forms
Stripe, which takes sponsorship payments
Cloudflare, which hosts this website and the community websites I build
Domain registration providers, where I register a domain for a community
HMRC or UK regulators, where legally required

Public credits. If you sponsor a community, the credit we agree, for example your name, business name, logo and link, is published on that community's website, and so is visible to anyone. Individuals can choose a first name only, or to be anonymous.

Your data is never sold, rented or shared with marketing companies or data brokers.

6. How Long I Keep Your Data

Sponsor and community contact details are kept for the duration of the arrangement plus two years. Financial and payment records are kept for six years, as required by HMRC for sole traders. A sponsor's public credit is removed from a community's website within a reasonable time after the sponsorship ends, or sooner if you ask. Enquiries and applications that do not lead anywhere are kept for 12 months. When data is no longer needed, it is securely deleted, and you can ask for earlier deletion at any time (Section 11).

7. Your Rights

Under UK GDPR you have the right to: access a copy of the data I hold about you; have inaccurate data corrected; have data erased where it is no longer needed or you withdraw consent; restrict processing while you contest its accuracy; receive your data in a portable format; object to processing based on legitimate interest; withdraw consent at any time; and complain to the ICO if you believe your data has been mishandled (ico.org.uk, 0303 123 1113). There is never a charge to exercise any of these rights, and I will always respond within a month.

8. Cookies & Website Usage

This website uses only what is strictly necessary to function, plus the contact form. No advertising or tracking cookies are used, and nothing follows you across other websites. Full detail is in the Cookie Policy.

The contact form is provided by Formspree, a third-party service that processes submissions so they reach me by email. See their own privacy policy for how they handle data in transit. The sponsor and community forms are provided by Tally, and payments by Stripe, and each has its own privacy policy on its website.

9. How I Keep Your Data Secure

This website uses HTTPS encryption throughout. Personal data is accessible only to me, as there is no team or subcontractor with access to sponsor or community records. Payment details are handled directly by Stripe, and full card numbers are never seen or stored by me.

If a data breach ever occurred that put your rights at risk, I would notify the ICO within 72 hours and let you know as soon as reasonably possible.

10. Children's Data

This website and its forms are not directed at children, and I do not knowingly collect personal data from anyone under 18. Community websites may include photos of children, and the group that publishes them is responsible for having permission to do so. If you believe a child's data has been published without permission, please get in touch and it will be removed promptly.

11. Contact Me About Your Data

If you have any questions about this policy, want to exercise your rights, or have any concern about how your data is handled, get in touch: 07452 752398 or jake@jwcommunitywebsites.co.uk.

You also have the right to complain to the UK's regulator, the Information Commissioner's Office: ico.org.uk, 0303 123 1113, or by post to Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. I would always appreciate the chance to sort out any concern directly first.

12. Changes to This Policy

This policy may be updated from time to time to reflect changes in how the service runs, or in the law. The "Last updated" date above will change when that happens, and sponsors and communities will be told directly if a change materially affects how their data is used.

JW Supporting Communities is operated by Jake Wells as a sole trader.

Want to get involved?

Sponsor a community, or ask for a website for your group.

Get in Touch