This page sets out the Privacy Policy of the Pontypool and Blaenavon Railway Company (1983) Ltd, the operator of the Pontypool and Blaenavon Railway (marketed as Blaenavon’s Heritage Railway). It details how and why we use your information, together with your rights.

​

What does this policy cover? 

​

This policy covers how the Pontypool and Blaenavon Railway Company (1983) Ltd. collects personal information that you voluntarily provide via this website.

​

What is personal information?

​

Personal information is any information that identifies you. For example, your name, email address, contact details, etc. are classed as personal information.

​

Why do you collect information?

​

We collect your information to enhance your experience when using the website, and in to deliver products and services purchased that is via this website.

 

We respect your personal information and take its security very seriously. Therefore, we:

​

• Only hold what data we need for the purpose for which it was obtained

• Will delete your personal data when it is no longer required

• Do not share your personal data with advertisers

• Adhere to your rights as set out in General Data Protection Regulation (GDPR) 2016/679

• Are happy to answer any questions you may have about our usage of your data

 

What information do you collect?

​

We may collect the following information from you when you use our site and/or buy goods from our Online Store:

​

• Your name and address.

• Contact details (including address, email, and telephone numbers).

• Information specific to the delivery of certain products and services. For example, we may ask a very generalised age and health question when booking a Heritage Railway Experience; or ask for a child’s age and gender when you book a Steam Santa Special visit to ensure an appropriate generalised gift.

 

What do you use my information for?

​

We require this information to understand your needs and provide you with better service. Specific purposes include:

​

• To deliver goods and services purchased via our website.

• To understand basic information about our customers to better improve our goods and services.

• To communicate alterations to advertised times, services and facilities where appropriate

• Send you email notifications that you have specifically requested

• Respond to enquiries received from you.

• Internal record keeping.

 

How do you protect my information?

​

We implement a variety of security measures to maintain the safety of your personal information whenever you submit or access your personal information.

​

• Only persons authorised by the Pontypool and Blaenavon Railway Company (1983) Ltd.’s Board of Directors have access to your personal information.

• Any information that we hold on you may only be accessed by us for the purpose(s) for which it was obtained.

• All payments made on our Online Store are encrypted via a Secure Socket Layer (SSL) to mitigate the risk of your details being stolen.

• Your information, whether public or private, will never be sold, exchanged, transferred, or given to any other company for any reason whatsoever without your consent, other than for the purpose of delivering a purchased product or service requested.

 

What are my rights?

​

The GDPR grants you the following rights regarding the data that we hold on you:

​

• To ask for a copy of the information we hold about you and have it corrected if it is wrong

• To ask us to delete any personal data we hold about you

• To object to your data being used for specific purposes

​

If you have any cause for complaint about our use of your personal data, please contact us to resolve the matter. We may withhold such personal information to the extent permitted by law. If you are not satisfied with the railway’s response, you have the right to lodge a complaint with the Information Commissioner’s Office.

​

What are your Information Commissioner's Office registration details?

​

Registration number: ZA793168

Date registered: 09 October 2020

Registration expires: 08 October 2022

Payment tier: Tier 1

Data controller: Pontypool And Blaenavon Railway Company (1983) Limited(The)

​

Address: 33 Broad Street, Blaenavon, Pontypool, Torfaen, NP4 9NF

Other names: The Pontypool and Blaenavon Railway / Blaenavon's Heritage Railway

​

Data Protection Officer: Mr Jamie Warner

​

How do I accept your privacy policy?

​

By using this website, you provide your consent to our privacy policy. If you do not wish to give your consent, then please leave this website now.

​

Any future changes to this policy will be communicated on this page, and it is your responsibility to review this policy frequently. Your continued use of this website following any changes made will be deemed as your acceptance of those changes.

​

The Pontypool and Blaenavon Railway Company (1983) Ltd. can take no responsibility for the privacy policies of any external website linked to this site.

​

I have further questions about your privacy policy. How do I contact you?

​

If you have any further questions about this policy, please contact us here.