Privacy Policy

1. Who We Are

What's On Merthyr (whatsonmerthyrtydfil.co.uk) is a local events guide for Merthyr Tydfil, Wales. We publish information about events, venues and things to do in the Merthyr Tydfil area. You can contact us at [email protected].

2. What Data We Collect

We collect personal data in the following circumstances:

• Event submissions — when you submit an event via our Submit an Event form, we collect your name, email address, event details (title, date, time, venue, description, ticket link, price) and any other information you choose to provide.
• Venue submissions — when you submit your venue via our List Your Venue form, we collect your name, email address, phone number, venue name, address, website, social media links, venue type, capacity and description.
• Event update requests — when you suggest a correction to an event listing, we collect the field you are correcting and the correction text. No personal details are required.
• Contact form — when you contact us via the contact page, we collect your name, email address and message.
• Email correspondence — if you email us directly (e.g. to send an event image), we collect your email address and any personal information contained in your message.

We do not collect any data passively through accounts, logins or tracking beyond standard web server logs (see Section 5).

3. How We Use Your Data

We use the data you provide solely for the following purposes:

• To review and publish event or venue listings on this website.
• To contact you about your event or venue submission if we need clarification.
• To update event listings based on correction requests.
• To respond to enquiries sent via the contact form or email.

We do not use your data for marketing, profiling or any automated decision-making. We do not sell, rent or share your personal data with third parties for commercial purposes.

4. Form Submissions & Third-Party Processors

Our forms (Submit an Event, List Your Venue, Contact, Event Update) are processed by Web3Forms (web3forms.com), a third-party form submission service. When you submit a form, your data is transmitted securely to Web3Forms and forwarded to our email address. Web3Forms may temporarily store submission data as part of this process. Please refer to the Web3Forms Privacy Policy for details.

This website is hosted on Cloudflare Pages. Cloudflare may process standard web server data (IP addresses, request logs) as part of providing hosting and security services. Please refer to the Cloudflare Privacy Policy for details.

5. Web Server Logs

Like all websites, our hosting provider (Cloudflare) automatically collects standard server log data when you visit our site. This may include your IP address, browser type, operating system, referring URL, pages visited and timestamps. This data is used for security, performance monitoring and diagnosing technical issues. It is not used to identify you personally and is retained in accordance with Cloudflare's data retention policies.

6. Event & Venue Information Published on the Site

When an event or venue is published on this website, certain details from your submission may be publicly visible, including the event name, date, time, venue, description, ticket link, price and organiser name. We will not publish your personal contact details (email address, phone number) unless you explicitly ask us to.

If you wish to have a published event or venue listing amended or removed, please contact us at [email protected].

7. Legal Basis for Processing

We process your personal data on the following legal bases under UK GDPR:

• Legitimate interests — to operate and maintain a local events directory that benefits the Merthyr Tydfil community.
• Contract / pre-contract steps — to publish event and venue listings as requested by you.
• Consent — where you have voluntarily submitted information to us via our forms.

8. Data Retention

We retain form submission emails for as long as necessary to process your request and for a reasonable period afterwards for reference. Event and venue listings may remain on the site indefinitely unless you request removal. You can request deletion of your data at any time by contacting us.

9. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict our processing of your data.
• Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights, please contact us at [email protected].

10. External Links

Our event listings and venue pages may contain links to third-party websites (e.g. ticketing platforms, venue websites). We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated date. Continued use of this website after changes are posted constitutes your acceptance of the revised policy.

12. Contact

If you have any questions about this Privacy Policy or how we handle your data, please contact us at [email protected].