Who we are

Our website address is: https://www.sydenhamgarden.org.uk.

What personal data we collect and why we collect it


When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.


If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Contact forms

If you use one of our contact forms we instantly send the information you submit to our Microsoft server, which is based in the UK.  The data is not stored on any other servers, including the WordPress servers that our website uses.  The information is then retained in line with our retention policy.

If you sign up to receive emails from us we store this email information at www.mailchimp.com and nowhere else.


Like most websites, Sydenham Garden uses cookies to enhance your experience of the site.
Read our Cookie Policy page for more info.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracing your interaction with the embedded content if you have an account and are logged in to that website.


Who we share your data with

We will never share your data with anyone else without seeking your consent to do so first.

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where we send your data

Visitor comments may be checked through an automated spam detection service.

Your contact information

Any information you send us using our website based forms will be stored on our UK based, Microsoft servers, except for email subscriptions, which are stored at www.mailchimp.com.  All data is retained in line with our retention policy.

How we protect your data

Data security is managed through a contract with Poppy IT services, which includes remote monitoring, real-time alerts, and automatic updates.  All team members with access to data receive training.

What data breach procedures we have in place

If there is a suspected data breach Sydenham Gardens DPO is informed and will make the decision on what action to take.  We are committed to transparency and will immediately report any breaches to the ICO and those affected.

Plugin: Smush

(Only applies to website admins)

Smush sends images to the WPMU DEV servers to optimize them for web use. This includes the transfer of EXIF data. The EXIF data will either be stripped or returned as it is. It is not stored on the WPMU DEV servers.

Smush uses a third-party email service (Drip) to send informational emails to the site administrator. The administrator’s email address is sent to Drip and a cookie is set by the service. Only administrator information is collected by Drip.