Privacy Notice


Digital Places — digitalplaces.org.uk

1. Who we are

This privacy notice explains how Spirit Public Sector Ltd collects, uses, and protects your personal information when you visit the Digital Places website (digitalplaces.org.uk).

Digital Places is a public sector collaborative membership programme that supports Local Authority Members and other participating organisations in the use and development of digital place-based data, insight and related services.

The programme is operated for Oxfordshire County Council and other Digital Places Members by Spirit Public Sector Ltd, a company registered in England and Wales under company number 07839976. Its registered office is 2 Plassey Square, Penarth, CF64 1HB.

If you have any questions about how we handle your personal data, please contact us at: info@digitalplaces.org.uk

2. What personal information we collect

We only collect personal information that is necessary for the purposes described in this notice. This may include:  

  • Your name and email address, if you contact us through the website contact form

  • If you choose to enable analytics cookies, anonymised and aggregated information about how you use our website (such as page views, time on site, and general location by country or region). This data is not used to identify you personally.

3. How we use your information

We use the information we collect for the following purposes:

  • To respond to your enquiry, if you contact us through the website

  • To understand how our website is being used so we can improve it — but only if you have chosen to enable analytics cookies

  • To ensure the website functions correctly and securely

We do not use your information for marketing purposes or share it with third parties for commercial use.

4. Our lawful basis for processing

Under UK data protection law, we must have a lawful basis for collecting and using your personal information.

  • For contact form enquiries: our lawful basis is consent. By completing and submitting the contact form, you are actively choosing to provide us with your personal information and consenting to us using it to respond to your enquiry.

  • For website analytics: our lawful basis is consent. Analytics cookies are switched off by default and are only activated if you explicitly enable them via the cookie consent banner. The data collected is not used to identify individual users and is not shared with third parties for commercial purposes. 

5. Cookies

This website uses cookies — small files stored on your device that help the website function. When you first visit the site, you will be presented with a cookie consent banner allowing you to accept or decline non-essential cookies. You can manage or change your preferences at any time.

We use the following types of cookies:

  • Essential cookies: required for the website to work properly. These cannot be switched off.

  • Analytics cookies: used to collect information about how visitors use the website. This data is aggregated and anonymous. These cookies are switched off by default and are only set if you actively enable them via the cookie consent banner.

6. How long we keep your information

We keep your personal information only for as long as is necessary for the purposes described in this notice.

  • Contact form enquiries: we will keep records of correspondence for 12 months and then delete them.

  • Analytics information: retained within our Squarespace account for as long as reasonably necessary to monitor and improve the website, and reviewed annually.

7. Third parties and data processors

This website is hosted on Squarespace. As a UK-based organisation, our data processor is Squarespace Ireland Limited, an Irish company. Data may be processed within the European Economic Area (EEA). Where Squarespace transfers personal data outside the EEA, including to the United States, it does so under appropriate safeguards in accordance with UK GDPR, including standard contractual clauses or other recognised transfer mechanisms. You can view Squarespace’s privacy policy at squarespace.com/privacy and their Data Processing Addendum at squarespace.com/dpa.

We do not sell, rent, or share your personal data with any other third parties, except where required to do so by law.

8. Your rights

Under UK data protection law, you have the following rights:

  • The right to access the personal information we hold about you

  • The right to ask us to correct inaccurate information

  • The right to ask us to delete your information in certain circumstances

  • The right to ask us to restrict how we use your information

  • The right to object to our use of your information

  • The right to data portability in certain circumstances 

To exercise any of these rights, please contact us at: info@digitalplaces.org.uk

We will respond to your request within one calendar month.

If you are unhappy with how we handle your personal information, you have the right to make a complaint to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

9. Changes to this privacy notice

We may update this privacy notice from time to time. Any changes will be published on this page with an updated date. We encourage you to check this page periodically.

This notice was last updated: June 2026.

10. Sources and references

This notice was prepared with reference to the following sources: