Privacy Notice

This privacy notice explains how we, The City of Arcades, collect and use your personal data. We are committed to protecting your privacy and handling your personal information in an open and transparent manner, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

The City of Arcades is a campaign delivered by FOR Cardiff, a not-for-profit membership organization that works to promote Cardiff's city centre.

  • Data Controller: FOR Cardiff

  • Contact Details: info@forcardiff.com

2. The Data We Collect

We may collect, use, store, and transfer different kinds of personal data about you. This includes:

  • Identity Data: Your name.

  • Contact Data: Your email address, and telephone number (if provided).

  • Technical Data: Internet Protocol (IP) address, browser type and version, operating system, and information about how you use our website.

  • Usage Data: Information about your preferences, interests, and how you interact with our website, campaigns, events, and competitions.

  • Marketing Data: Your preferences for receiving communications from us.

  • Visual Data: Photos and video images taken at our events, with your consent where possible.

3. How We Collect Your Data

We use different methods to collect data from and about you, including:

  • Direct Interactions: You may give us your personal data when you:

    • Sign up for our newsletter.

    • Enter competitions or respond to surveys.

    • Contact us directly via email, phone, or a submission form.

  • Automated Technologies: As you interact with our website, we may automatically collect technical and usage data through cookies and similar technologies.

  • Third Parties: We may receive data about you from third parties, such as analytics providers and event management partners.

4. How We Use Your Data

We will only use your personal data when the law allows us to. Most commonly, we use your data to:

  • Promote the City of Arcades: To inform you about events, offers, and news from businesses within the Cardiff city centre arcades.

  • Send Communications: To send you our newsletters and other communications you have signed up for.

  • Improve Our Services: To analyse website usage, understand user behaviour, and improve our website and campaigns.

  • Marketing: To inform you about events and promotions that may be of interest to you.

  • Promote Cardiff: To use photos and videos from events for promotional purposes. We will always seek consent where appropriate.

  • Fulfil Legal Obligations: To comply with legal or regulatory requirements.

5. Lawful Basis for Processing

We rely on the following legal bases for processing your personal data under UK GDPR:

  • Legitimate Interests: Where the processing is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests. For example, to provide you with relevant information as a campaign follower.

  • Consent: Where you have given us clear consent for us to process your personal data for a specific purpose, such as signing up for a newsletter.

  • Legal Obligation: Where the processing is necessary to comply with a legal or regulatory obligation.

6. Who We Share Your Data With

We may share your personal data with trusted third parties, including:

  • Service Providers: Partners who help us operate our events and website.

  • Law Enforcement/Authorities: If we are legally required to do so.

We will not sell your personal data.

7. Data Security and Retention

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way. We will only retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including for satisfying any legal, accounting, or reporting requirements.

8. Your Data Protection Rights

Under UK data protection law, you have the following rights:

  • Right of Access: You have the right to ask us for copies of your personal information.

  • Right to Rectification: You have the right to ask us to correct information you think is inaccurate or incomplete.

  • Right to Erasure: You have the right to ask us to erase your personal information in certain circumstances.

  • Right to Restriction of Processing: You have the right to ask us to restrict the processing of your information in certain circumstances.

  • Right to Object to Processing: You have the right to object to our use of your personal data in certain circumstances.

  • Right to Data Portability: You have the right to ask that we transfer the information you gave us to another organization, or to you, in certain circumstances.

To exercise any of these rights, please contact us at info@forcardiff.com.

9. How to Complain

If you have any concerns about our use of your personal information, you can make a complaint to us at info@forcardiff.com.

You also have the right to lodge a complaint with the UK's supervisory authority for data protection issues, the Information Commissioner's Office (ICO).

ICO Contact Details:

  • Website: ico.org.uk

  • Helpline: 0303 123 1113

10. Changes to This Privacy Notice

We may update this privacy notice from time to time. Any changes will be posted on this page. We encourage you to review this notice periodically to stay informed about how we are protecting your personal data.

Last reviewed: August 2025.