Who is responsible
Leominster Heritage is an independent research project initiated and curated by Montez Architecture Ltd from 3 Church Street, Leominster, HR6 8NE. Montez Architecture Ltd handles enquiries and contributions submitted through this website and is responsible for the processing described in this notice. Data-protection enquiries can be made through the contact form.
Information collected, purpose and lawful basis
- Contact enquiries
- Name, email, subject and message are used to respond, based on legitimate interests in operating the project.
- Research contributions
- Name, email, evidence, source, provenance, dates and accepted terms are used to verify, moderate and administer a submission. The bases are legitimate interests and steps connected with the contributor agreement.
- Photographs and documents
- Files and the recorded creator, date, description, source, copyright holder and restrictions are assessed for research and publication. Express consent is required before publishing a contributor's name or personal contact information.
- Private property information
- Private interiors, cellars, contact details, access arrangements and precise access information are stored for review and recording arrangements. They are not published as part of a public record.
- Technical information
- The host may process IP address, request time, browser information and security events. OpenStreetMap receives the information needed to deliver map tiles when a page containing an interactive map is opened.
Optional map location
My location asks your browser for your device location only when you press the button and allow access. The position and its reported accuracy are used in the current map view. Leominster Heritage does not save these coordinates, send them to its server or track your movement. Reset map or leaving the page clears the position.
As with moving the map yourself, the map provider receives tile requests for the area you are viewing.
Optional project email updates
If you choose to register interest, we store your email address, the time of registration, and the wording and date of the consent you gave. This is separate from contact enquiries and research contributions; submitting those forms does not add you to the update list. Registration is optional and is based on your consent.
Email updates have not started. Registrations remain unconfirmed and are held privately by the project. No address is currently passed to an email delivery service, and no confirmation or project email is sent automatically. Before updates begin, the project will arrange email confirmation and provide an unsubscribe link in each update.
You can withdraw your interest at any time using the removal request form. Include the email address you registered. The project will remove the registration on request and review unconfirmed registrations after 12 months, deleting those no longer needed.
Storage, recipients and security
Form records are stored in the website's private database. JPEG originals are stored in private object storage. Submission alert emails can include private photograph download links that expire after 14 days. These links provide access to the named photograph and should not be forwarded outside the project team. Access should be limited to named moderators and administrators, with secure backups, file validation, moderation status and a recorded rights position before publication.
Information may be processed by OpenAI's Sites service and the Cloudflare infrastructure used for hosting, database and private files. OpenStreetMap receives a visitor's IP address when map tiles are requested. Automatic submission alerts, when enabled, are delivered through Resend to data@leominsterheritage.co.uk. The alert contains the supplied contact details, information, record reference and any private photograph links. Email delivery may be unavailable during setup or a service interruption; the original submission remains stored privately.
Service-provider processing, including any transfer outside the UK, is governed by the provider's data-protection terms and applicable safeguards.
Retention schedule
- Contact enquiries, two years after the last response.
- Declined or withdrawn unpublished submissions, deletion within 12 months of the final decision unless needed for a live dispute.
- Unpublished research submissions, review every three years and deletion after six years if no longer justified.
- Published rights and provenance records, while in use and for six years afterwards.
- Security logs, only for the provider-set period needed for security, exact period to be confirmed.
Your rights and complaints
You may have rights to access, correction, deletion, restriction, transfer or objection. Consent can be withdrawn where it is the relevant basis, without affecting earlier processing. Use the contact form. You may also complain to the Information Commissioner's Office.