Privacy Policy

Last updated: August 2026

Fortwilliam Musical Society ("we", "us", "our") is committed to protecting your personal data. This policy explains what information we collect through this members' area website (fms.fyi), how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We are based in Northern Ireland and operate under United Kingdom data protection law.


1. Who we are

Fortwilliam Musical Society is an amateur musical society based in Belfast, Northern Ireland. This website is operated solely for the benefit of our members to provide access to sheet music, society news, and upcoming events.

For data protection enquiries, contact us at: membersarea@fortwilliammusicalsociety.org


2. What personal data we collect

We collect only the minimum data necessary to operate this members' area:

  • Full name — used by society administrators to identify you and review your registration.
  • Email address — used to create and verify your account, and to send password reset links.
  • Password — stored as a one-way cryptographic hash; we cannot read your password.
  • Account confirmation and approval status — whether your email address has been verified and your registration approved.
  • Timestamps — dates of account creation and weekly news posts.

We do not collect phone numbers, postal addresses, payment information, or any other personal data beyond what is listed above.


3. How we use your data
PurposeLegal basis (UK GDPR)
Authenticating you when you log inLegitimate interests (Art. 6(1)(f))
Reviewing and approving member registrationsLegitimate interests (Art. 6(1)(f))
Sending email confirmation on registrationContractual necessity (Art. 6(1)(b))
Sending password reset emailsContractual necessity (Art. 6(1)(b))
Sending resend confirmation emailsContractual necessity (Art. 6(1)(b))

We do not use your data for marketing, profiling, advertising, or any purpose beyond operating this members' area.


4. Email and communications

We will only send you emails that are directly necessary for your account (confirmation and password reset). We do not send newsletters or marketing emails through this system. Any other society communications are handled separately and are not covered by this policy.


5. Data storage and security

Your data is stored on a server located in the United Kingdom. We use industry-standard measures to protect it, including:

  • HTTPS for all connections to this website
  • Bcrypt hashing of passwords
  • STARTTLS encryption for outbound email
  • Access restricted to authorised society administrators only

No system is completely secure. If you suspect your account has been compromised, please reset your password immediately.


6. How long we keep your data

We retain your account for as long as you remain an active member of the society. If you wish to have your account deleted, contact us at the address below and we will remove your data without undue delay.


7. Sharing your data

We do not sell, rent, or share your personal data with any third parties. Your data is not transferred outside the United Kingdom.


8. Cookies

This website uses a single session cookie to keep you logged in. This cookie contains no personal information and is deleted when you log out or close your browser. We do not use tracking cookies, analytics cookies, or any third-party cookies.


9. Your rights

Under UK GDPR you have the right to:

  • Access — request a copy of the personal data we hold about you
  • Rectification — ask us to correct inaccurate data
  • Erasure — ask us to delete your account and associated data
  • Restriction — ask us to stop processing your data in certain circumstances
  • Portability — receive your data in a portable format
  • Object — object to processing based on legitimate interests

To exercise any of these rights, contact us at membersarea@fortwilliammusicalsociety.org. We will respond within one month.


10. Complaints

If you believe we have handled your data unlawfully, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the supervisory authority for data protection in the UK:


11. Changes to this policy

We may update this policy occasionally. Any changes will be posted on this page with a revised date. Continued use of the members' area after changes are posted constitutes acceptance of the updated policy.