OBRESS Ltd Privacy Policy
Last Updated on 22/09/2025
OBRESS Ltd (“we,” “our,” “us”) is a non-profit society based in Oxford, England. We are committed to protecting the personal data of our members, event participants and website visitors. If you have any questions about this policy or how we handle your information, you can contact us at info@obress.com or by post at AB110 Abercrombie Building, School of the Built Environment, Oxford Brookes University, Gypsy Lane, OX3 0BP. If we appoint a Data Protection Lead or Data Protection Officer, you may also contact them through the same email address.
We collect personal information that you choose to give us or that is necessary for the running of the society. This may include your name, email address, telephone number, postal address, membership status, year of study, university ID number and payment details when you pay for membership or events. When you attend our events we may also collect photographs or video images if you have given consent, and if you visit our website, we may collect technical information such as your IP address, browser type and cookie preferences.
We use this information only for specific, lawful purposes. We process your data to administer your membership, manage events and communicate with you about activities you have signed up for, which is necessary for the performance of our contract with you. We may send newsletters or other promotional material when you have given clear consent, which you can withdraw at any time. We also process certain information to meet legal and financial obligations such as accounting and tax reporting, and we may use anonymised website data to improve our services where we have a legitimate interest to do so.
Your data is shared only when required for the purposes above and only with trusted service providers who act as our processors under contracts that comply with the General Data Protection Regulation. Typical examples include email-marketing platforms, cloud-storage providers and payment processors. We do not sell personal data to anyone. If your data is transferred outside the European Economic Area or the United Kingdom, we ensure that appropriate safeguards, such as Standard Contractual Clauses or an adequacy decision, are in place.
We retain personal information only for as long as necessary. Membership records are normally kept for one year after membership ends, financial records are kept for seven years to meet legal requirements, and photographs or videos are kept until consent is withdrawn or for 20 years. After these periods the data is securely deleted or anonymised.
You have the right at any time to request access to your personal data, to correct or update it, to request its deletion, to restrict or object to certain types of processing, and to receive a copy of your data in a portable format. Where we rely on consent, you may withdraw that consent at any time. To exercise these rights, contact us at help@obress.com ; we will respond within one month.
We take appropriate technical and organisational measures to protect your data, including secure storage, encryption where feasible, and restricted access for authorised committee members only. If a data breach occurs that is likely to result in a risk to your rights or freedoms, we will notify you and the relevant supervisory authority within seventy-two hours as required by law.
Our website may use essential cookies for its operation and, with your consent, analytics cookies to help us understand visitor usage. Further details can be found by contacting us.
If you have concerns about our handling of your personal information, you may lodge a complaint with your national data protection authority, such as the UK Information Commissioner’s Office at https://ico.org.uk or the relevant supervisory authority in your EU member state.
Please reach out to us at info@obress.com and we will endeavour to answer any questions you may have regarding how your data is processed and stored.