Legal

Privacy Policy

Last updated: March 2026

1. Who we are

Hemp Cymru is the trading name of HCO Sir Penfro Limited, a private company limited by guarantee incorporated in England and Wales on 23 March 2026. Our company number is 17108287. Our registered office is The Old Post Office, 12 Quay Street, Haverfordwest, Pembrokeshire, SA61 1BG.

We operate the website at hempcymru.org. For any privacy-related queries, contact us at hello@hempcymru.org.

2. What data we collect

We collect only the data you choose to provide to us directly, for example when you register interest in donating, register for an event, or contact us by email. This may include your name and email address.

We do not use advertising trackers, social media pixels, or any third-party analytics that collect personal data. Our website analytics are provided by Plausible Analytics, a privacy-first tool that collects no personal data and uses no cookies.

3. How we use your data

Data you provide is used only for the purpose for which you provided it: to respond to your enquiry, confirm your event registration, or notify you when donations open. We do not sell, share, or transfer your personal data to third parties for marketing purposes.

4. Legal basis for processing

Where we process personal data, we do so on the basis of your consent or our legitimate interest in communicating with people who have expressed interest in our work. You may withdraw consent at any time by contacting us at hello@hempcymru.org.

5. Data storage and security

Your data is stored on servers located within the European Economic Area. Our hosting infrastructure is provided by Vercel. Data is processed via Vercel's serverless infrastructure in London, UK (lhr1). Static assets are served from Vercel's global CDN edge network, with the nearest node to the visitor used automatically. We take reasonable technical and organisational measures to protect your data against unauthorised access, loss, or disclosure.

6. Your rights

Under UK GDPR, you have the right to access, correct, or request deletion of any personal data we hold about you. You also have the right to object to processing, request restriction of processing, and the right to data portability. To exercise any of these rights, contact us at hello@hempcymru.org.

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been handled unlawfully.

7. Changes to this policy

We may update this policy as the organisation grows and new services are introduced. Material changes will be noted at the top of this page with a revised date.