Policies
Cookie Policy
Buckingham Park Community Centre
Jubilee Square, Buckingham Park, Aylesbury HP19 9DZ
Last updated: July 2026
What are cookies?
Cookies are small text files placed on your device by websites you visit. They are widely used to make websites work efficiently and to provide information to the site owner.
Cookies on our website (buckinghamparkcc.com)
Our main website is hosted on Squarespace and may use the following types of cookies:
Strictly necessary cookies
These are essential for the website to function and cannot be switched off. They are usually set in response to actions you take such as filling in forms or setting privacy preferences.
Analytics cookies
Squarespace may collect anonymised usage data to help us understand how visitors use our site — for example, which pages are most visited and how long people stay. This data does not identify you personally.
Third-party cookies
Our website may include embedded content (such as maps or social media links) that set their own cookies. We do not control these cookies — please refer to the relevant third-party privacy policies for details.
You can control cookies through your browser settings. Note that disabling certain cookies may affect how the website functions.
---
Cookies on our hirer portal (members.buckinghamparkcc.com)
The hirer portal uses a small number of cookies that are strictly necessary for it to function. We do not use advertising or tracking cookies on the portal.
| Cookie name | Purpose | Duration |
| `next-auth.session-token` or `__Secure-next-auth.session-token` | Keeps you logged in to your hirer account | 30 days or until you sign out |
| `next-auth.csrf-token` or `__Host-next-auth.csrf-token` | Security token to prevent cross-site request forgery attacks | Session (deleted when browser closes) |
| `next-auth.callback-url` or `__Secure-next-auth.callback-url` | Remembers where to redirect you after signing in | Session |
These cookies are strictly necessary — the portal cannot function without them and they do not require your consent under UK PECR. They are never used to track you across other websites or for advertising purposes.
## How to manage cookies
You can control and delete cookies through your browser settings:
- Chrome — Settings → Privacy and security → Cookies and other site data
- Firefox — Settings → Privacy & Security → Cookies and Site Data
- Safari — Preferences → Privacy → Manage Website Data
- Edge — Settings → Cookies and site permissions
Please note that clearing session cookies from the hirer portal will sign you out of your account.
Changes to this policy
We may update this policy from time to time. Any changes will be posted on this page with an updated date.
Contact us
If you have any questions about how we use cookies, please contact us:
Email: info@buckinghamparkcc.com
Phone: 01296 435239
Post: Buckingham Park Community Centre, Jubilee Square, Buckingham Park, Aylesbury HP19 9DZ
Privacy Policy
Buckingham Park Community Centre
Jubilee Square, Buckingham Park, Aylesbury HP19 9DZ
Last updated: July 2026
1. Who we are
Buckingham Park Community Centre ("we", "us", "our") is operated by Buckingham Park Parish Council. We are committed to protecting your personal information and being transparent about how we use it.
If you have any questions about this policy, please contact us at:
info@buckinghamparkcc.com | 01296 435239
2. What information we collect
On our website (buckinghamparkcc.com)
Usage data — pages visited, time spent, browser type and device information, collected anonymously via cookies (see our Cookie Policy)
Contact form submissions — your name, email address and message if you contact us through the website
On our hirer portal (members.buckinghamparkcc.com)
Account information — your name and email address, collected when you sign in via Google or magic link email
Booking information — details of your regular hall hire slots including the hall, day, time and any notes
Financial information — invoice history pulled live from our Xero accounting system. We do not store card details or payment information — all payments are processed separately
Documents you upload — files such as public liability insurance certificates and booking forms, stored securely in Google Drive
Session data — a temporary session token stored in your browser to keep you logged in
3. How we use your information
We use your information to:
Provide you with access to your hirer account and booking details
Send you invoices and payment information via Xero
Review and approve documents you upload
Respond to booking requests and enquiries
Send you a magic link sign-in email when you request one
Comply with our legal and financial obligations
We do not use your information for marketing without your consent, and we do not sell your data to third parties.
4. Legal basis for processing
We process your personal data under the following lawful bases:
Contract — processing necessary to manage your hall hire agreement with us
Legitimate interests — running the community centre and managing hirer relationships efficiently
Legal obligation — retaining financial records as required by law
5. Who we share your information with
We use the following trusted third-party services to operate our systems:
| Service | Purpose | Privacy Policy |
Vercel | Hosting the hirer portal | vercel.com/legal/privacy-policy |
| Google (OAuth & Drive) | Sign-in and document storage | policies.google.com/privacy |
| Xero | Invoicing and accounting | xero.com/uk/legal/privacy |
| Resend | Sending sign-in and notification emails | resend.com/legal/privacy-policy |
| Neon / Vercel Postgres | Database storing your account and booking data | neon.tech/privacy-policy |
We do not transfer your data outside the UK or EEA except where the above services operate internationally under appropriate safeguards.
6. How long we keep your information
Account and session data — retained while you are an active hirer and for up to 2 years after your last activity
Booking records — retained for 7 years in line with our financial record-keeping obligations
Uploaded documents — retained until you or an administrator deletes them
Invoice data — retained in Xero for 7 years as required by HMRC
7. Your rights
Under UK GDPR, you have the right to:
Access — request a copy of the personal data we hold about you
Rectification — ask us to correct inaccurate data
Erasure — ask us to delete your data where there is no legal reason to keep it
Restriction — ask us to limit how we use your data
Portability — request your data in a portable format
Objection — object to processing based on legitimate interests
To exercise any of these rights, please email info@buckinghamparkcc.com.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
8. Security
We take reasonable technical and organisational measures to protect your personal data, including encrypted connections (HTTPS), secure cloud storage, and access controls on the hirer portal. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
9. Changes to this policy
We may update this policy from time to time. We will post any changes on this page with an updated date at the top. If changes are significant, we will notify active hirers by email.