Privacy Policy

Last updated: 12 February 2026

Who we are

Peak 4x4 Response is a voluntary organisation of 4x4 vehicle owners providing logistical support across Derbyshire, the Staffordshire Moorlands and the wider Peak District. Registered Charity Number: 1196547 Contact: talk@peak4x4response.co.uk

What data we collect

We collect data you provide directly: - Membership applications (name, address, contact details, vehicle information) - Contact form submissions (name, email, message) - DBS check information (processed securely and retained in line with legal requirements) - Event attendance and training records We may collect automatically: - Basic website usage analytics - Cookies for authentication and preferences

How we use your data

We use your data to: - Process and manage membership applications - Coordinate operational responses and deployments - Maintain training and compliance records - Communicate with members about operations, training and events - Respond to enquiries from the public and partner organisations We do not sell your data or use it for unrelated marketing.

Body-worn cameras

Peak 4x4 Response uses body-worn cameras at events and during operational deployments. These are used for the safety and protection of our volunteers and members of the public. Footage is stored securely and retained only for as long as necessary. It is not shared with third parties except where required by law or in connection with a formal investigation. If you wish to request access to footage in which you appear, or to request its deletion, please email the details of the event (including date, time and location) to: sar@peak4x4response.co.uk Subject Access Requests relating to body-worn camera footage will be processed within 30 days in accordance with UK GDPR.

Lawful basis for processing

We process personal data under the following lawful bases: - Legitimate interests: operational coordination, volunteer management, safety - Consent: where you have opted in to communications - Legal obligation: DBS checks, safeguarding requirements, charity law compliance - Vital interests: during emergency response operations

Where your data is stored

Your data is processed by trusted service providers who are UK GDPR compliant. Data is stored securely in UK/EU data centres. We do not transfer data outside the UK/EEA without appropriate safeguards.

Data retention

We retain your data for as long as necessary to fulfil the purposes for which it was collected: - Membership records: duration of membership plus 2 years - DBS information: in line with Disclosure and Barring Service guidance - Body-worn camera footage: up to 21 days unless required for an ongoing matter - Contact form submissions: 12 months - Financial records: 7 years (charity law requirement)

Your rights

Under UK GDPR, you have the right to: - Access your data (request a copy) - Rectify inaccurate data - Erase your data (right to be forgotten) - Restrict or object to processing - Data portability - Withdraw consent at any time To exercise these rights, email talk@peak4x4response.co.uk or for Subject Access Requests specifically relating to body-worn camera footage, email sar@peak4x4response.co.uk

Cookies

We use essential cookies for: - Authentication (keeping you logged in) - Security (CSRF protection) - Preferences We do not use advertising or tracking cookies.

Complaints

If you are unhappy with how we handle your data, you can complain to the Information Commissioners Office (ICO): ico.org.uk 0303 123 1113