PRIVACY

Privacy on this site

This page describes what actually happens when you use the forms on this site: what is collected, why, where it goes, and how to ask about it or have it removed. It is written in plain language.

1. What we collect

While the survey is the dominant call to action on this site, the only NCFN-controlled form in active use is the email-updates sign-up. It may collect:

• If you sign up for email updates: your name and email address (the only fields on that form).
• A record that you requested updates, and — once you confirm — that you confirmed, including when.

2. Why we collect it

We use the information you give us to:

• Send occasional NCFN email updates — but only if you ask for them and confirm your email address.

3. Publication

• Individual form responses are not published.
• No public directory of participants is created from this form.
• Publishing identifiable contributions, or building a public asset map, would require a separate decision and, where applicable, your consent. It is not part of what taking part means.

4. Where the information goes

The path is:

Your browser → the NCFN-controlled API, hosted in Canada → Brevo, the contact and newsletter system.

NCFN API hosting. The NCFN-controlled API is hosted in Canada on our Trellis server using OVHcloud infrastructure. The API validates and rate-limits submissions and forwards contact information to Brevo; it does not maintain a separate database of form submissions.

Brevo is the contact and newsletter processor. Brevo currently states that its database hosting and storage are within the European Union — including data centres in France and Germany, and Google Cloud in Belgium. See also Brevo’s privacy policy for its own statement on data storage and processing.

5. Security and network information

Network information such as your IP address may be processed transiently to keep the forms secure and to rate-limit abuse. It is used only as a short-lived, in-memory key for that purpose.

It is not added to your Brevo contact profile, and it is not stored there as consent evidence or contact data. As with any internet service, ordinary network metadata can appear in infrastructure logs; we do not promise that it never does.

6. Who has access

Access is limited to the people administering and coordinating Northumberland Can Feed Northumberland, and to technical service providers where that is needed to operate the system (for example, Brevo, and the hosting for the NCFN API).

The forms on this site are separate from the food-system research survey and interviews run by Loyalist College. NCFN form submissions are governed by this Privacy page. Loyalist College manages survey responses and any consent for research-related follow-up under the study's own consent and privacy process — this website does not host the questionnaire, does not collect or store research responses, and does not transfer survey data into the NCFN API or Brevo. The NCFN email list on this site is separate and uses its own confirmation process described above.

7. How long it is kept

Participation information is kept only while it remains reasonably useful for the initiative, and is reviewed periodically. You can ask us to correct or delete it.

For newsletter records specifically:

• your contact details and consent evidence are retained while NCFN relies on that consent to send you updates;
• if you unsubscribe, your address may be kept on a suppression list, along with the related consent history, as far as necessary to respect that unsubscribe and to demonstrate that messages were sent with consent.

8. Your rights and how to contact us

For any privacy question, or to exercise the rights below, email ncfnorthumberland@gmail.com.

You can ask us:

• what information we hold about you;
• to correct it;
• to delete it, where that is appropriate;
• to stop any participation follow-up.

To stop email updates, use the unsubscribe link in any NCFN email, or contact us at the address above.

9. Tracking

• No advertising trackers.
• No analytics.
• No cookies are set by this site.

The only outbound request the site makes when you use a form is the submission itself, to the NCFN API described in section 4.