Legal

Privacy Policy

Last updated: July 2026 · Polisi Preifatrwydd

Who we are

Edau Connect (“we”, “us”) operates a public directory of community services in Cardiff and a management platform for community organisations. We are the data controller for personal data collected through this website.

Contact: info@edauconnect.org

What we collect

Public directory visitors: we do not require an account and we do not collect personal data to search the directory. Standard server logs (IP address, browser type) are kept briefly for security.

Organisation accounts: name, work email address, organisation details, and the content you add to your workspace (programmes, sessions, referrals, outcomes, events).

People records added by organisations: organisations using Edau OS are the data controllers for the personal data of the people they support. Edau Connect processes this data on their behalf under our terms of service.

How we use your data

To provide and improve the service, to display your organisation's public profile in the directory (only what you choose to publish), to send essential service emails (verification, password resets, referral notifications), and to meet our legal obligations.

We do not sell personal data. We do not use your data for advertising.

Legal basis

We rely on contract (providing the service you signed up for), legitimate interests (keeping the service secure and improving it), and consent where required (optional communications).

Storage and security

Data is stored on servers located in the UK/EEA. Access is restricted, encrypted in transit, and backed up regularly. Organisations control who on their team can access their workspace.

Retention

Account data is kept while your account is active. If you delete your account, workspace data is removed within 30 days, except where we must retain it by law.

Your rights

You have the right to access, correct, delete, or port your personal data, and to object to or restrict processing. To exercise any right, email info@edauconnect.org. You can also complain to the Information Commissioner's Office (ico.org.uk).

Cookies

We use one strictly-necessary cookie to keep signed-in users authenticated. We do not use advertising or third-party tracking cookies.