Milestones Community Hub — Privacy Policy

Last updated: 4 August 2026

Who we are

Milestones Community Hub ("Milestones", "we", "us") is a community organisation based in the Isle of Man. This policy explains what personal information we collect through our website and our companion app, why, and what rights you have over it.

Contact: privacy@milestones.im

What information we collect

Contact details you give us directly: your name and email address, when you sign up for our newsletter, RSVP or book a place at an event, or get in touch about collaborating or volunteering.
Event participation: which events you've RSVPed to or booked.
Enquiry details: anything you tell us in a collaboration or volunteering enquiry.
Competition entries: if you enter one of our competitions, your name and email address, and which competition you entered.
Payment records: where an event has a price, we keep a record that a payment is due — the event, the amount, your name, and whether it has been paid. We do not collect or store your card details.

Card payments are handled entirely by SumUp, our payment provider. When you follow a payment link we send you, you enter your card details on SumUp's own secure payment page. Those details go to SumUp, not to us, and we never see them.

How we use it, and our legal basis for doing so

We use it to...

Our legal basis

Performance of a contract, or taking steps you've asked for before entering one

Send our newsletter about new events and activities

Your consent, given when you subscribe. Subscribing takes effect straight away; we don't send a separate confirmation email to click

Respond to a collaboration or volunteering enquiry

Our legitimate interest in responding to enquiries people have raised with us

Send event reminders or updates through the app, if you turn this on

Your consent, given when you enable notifications

Send you a link to pay for a place you've booked, and keep track of whether it's been paid

Performance of a contract

Enter you into a competition, and contact you if you win

Your consent, given when you enter. Our competitions are always free — entering never involves a payment

Who we share it with

Wix.com hosts our website and manages our event and contact records on our instructions. Wix acts as our data processor.
Cloudflare hosts the technical infrastructure behind our companion app: a proxy service, a temporary cache of event listings, competition details and entries, and storage for the images shown alongside competitions. Cloudflare acts as our data processor.
SumUp processes card payments for paid events. When you pay, your card details are handled by SumUp on their own payment page and are never passed to us. SumUp is the data controller for the payment itself; we hold only a record that a payment was due and whether it was made.
Brevo sends our emails — booking confirmations, payment links, and the newsletter. Brevo acts as our data processor.

Competition entries aren't shared with anyone. They're visible only to us, for running the draw and contacting the winner.

We don't sell personal information, and we don't share it with anyone else for their own marketing purposes.

How long we keep it

We keep contact and event records for as long as we need them for the purpose they were collected, and no longer than 24 months after your last interaction with us, unless you ask us to delete it sooner or we're required by law to keep it longer. You can unsubscribe from the newsletter at any time.

Competition entries are kept for a much shorter time: until the draw has taken place and any prize has been sent out, and in any case no longer than 3 months after the closing date. After that they're deleted. There's no reason for us to keep a list of entrants once a competition is over, so we don't.

Your rights

Under data protection law, you can ask us to:

Tell you what information we hold about you, and give you a copy of it
Correct anything that's inaccurate
Delete your information
Restrict or object to how we use it
Provide your data in a portable, machine-readable format
Withdraw consent at any time, where we're relying on consent

To do any of this, contact us at privacy@milestones.im. We'll respond within one month.

If you've entered a competition and want your entry removed before the draw, email us and we'll delete it — that withdraws you from the competition, so we won't be able to include you if it's drawn afterwards.

If you're unhappy with how we've handled things

We'd appreciate the chance to put it right directly first — reach us at privacy@milestones.im. You also have the right to complain to a supervisory authority:

The Isle of Man Information Commissioner (inforights.im), if you live in the Isle of Man or the issue relates to something that happened here
The UK Information Commissioner's Office (ico.org.uk), if you're contacting us from the UK

Younger participants

Some Milestones activities are aimed at children and young people. Where a child takes part, the booking is made by a parent or guardian, and it is their contact details we collect — not the child's. We don't ask children to sign up for themselves.

Our app

If you use the Milestones app, in addition to everything above:

When you RSVP through the app, the details you enter are sent securely to Wix to register your place — the app itself doesn't keep a separate copy on our servers.
A record of events you've RSVPed to is stored on your own device, so you can look back at your history. This stays on your phone and isn't visible to us unless you contact us for support and choose to share it.
If your booking history disappears — a new phone, a cleared browser — you can bring it back by entering the email address you booked with. We email you a six-digit code, and once you enter it we look up your bookings and put them back on your device. There is no account and no password. We keep nothing from this beyond the code itself, stored for ten minutes so it can be checked, under a scrambled form of your email address rather than the address itself.
If an event has a price, we email you a payment link after you book. That link stays valid until the event has passed, and it will tell you if the payment has already been made. If you cancel a booking you haven't paid for, the link stops working.
Competitions work differently from events: entering one sends your name and email to us rather than to Wix, because competitions are ours rather than part of the website. Unlike your event history, an entry is stored on our side — we need a list of entrants to run a draw. Entering is always free.
If you turn on notifications, we keep the minimum technical information needed to deliver them to your device, along with the ids of any events you've booked on that device — so we can tell you if one of them changes or is cancelled. This isn't connected to your name or email. You can switch notifications off at any time in the app's Settings, which removes that record.
Notifications about new competitions are a separate choice you can turn on or off like the others, and switching them off doesn't affect anything else.

Changes to this policy

We may update this policy from time to time, for example as the app gains new features. We'll update the date at the top when we do.

Contact us

privacy@milestones.im