Privacy and Cookies
Last updated 26 October 2026
This page explains what personal information the St Johnston & Carrigans Family Resource Centre website collects, why, and what you can do about it.
Who we are
The website is run by St Johnston & Carrigans Family Resource Centre, Chapel Road, St Johnston, Lifford, Co. Donegal, F93 VHK7.
For anything about your data, contact us:
- Phone: 074 914 8551
- Email: coordinator@stjohnfrc.ie
If you only browse the site
You don't need an account to see what's on, our groups, reports and policies, or how to contact us.
- No tracking, no analytics, no advertising. We don't use Google Analytics, Facebook Pixel or similar tools, and we don't sell or share information about visitors.
- No cookies are set while you browse. That's why there is no cookie banner.
- Visit logs. We don't keep a log of who visits which page. Our hosting provider, Amazon Web Services, handles your IP address to deliver pages to you and to protect the site from attacks.
- Map. The map in the Contact section loads map images from OpenStreetMap. Your browser sends your IP address to OpenStreetMap to fetch them; OpenStreetMap does not set cookies. See the OpenStreetMap Foundation privacy policy.
- Facebook link. The Facebook link at the bottom of the page simply takes you to our page. Nothing from Facebook is loaded on our site.
If you create an account
Accounts are used by centre staff and volunteers to manage the website.
- What we keep: your name, email address and password. Passwords are stored by Amazon Cognito in a scrambled (hashed) form; we can never see them.
- Why: to let you sign in, and to send the emails that come with an account (confirmation code, password reset). The legal basis is our legitimate interest in running the website securely.
- Cookies when signed in: three strictly necessary cookies (
id_token,access_token,refresh_token) keep you signed in. They are set only after you sign in, can't be read by scripts on the page, and are removed when you sign out. The first two last about an hour,refresh_tokenup to 30 days. Strictly necessary cookies don't need consent. - How long: until you ask us to delete your account, or until you no longer help run the website.
Photos on the site
Photos of our groups and events are published with the consent of the people in them; for children, with the consent of a parent or guardian. If you appear in a photo and want it removed, contact us and we will take it down.
Location data and other hidden camera details are removed automatically from photos uploaded to the site.
Our Facebook page
We post news about new groups, cancelled or moved sessions and centre closures to our Facebook page, partly automatically from this website. These posts contain only information about the centre's activities, never personal data of visitors or account holders. Your use of Facebook is covered by Meta's privacy policy.
Where your data is stored
The website runs on Amazon Web Services, on servers in the United States. Transfers to the US are covered by the EU–US Data Privacy Framework, under which Amazon Web Services is certified. Data is encrypted in transit and at rest.
Your rights
Under the GDPR you can ask us to:
- tell you what personal data we hold about you and give you a copy;
- correct it;
- delete it, including your account;
- restrict or object to how we use it;
- give it to you in a format you can pass to another organisation.
Email coordinator@stjohnfrc.ie. We will reply within one month, free of charge.
If you are unhappy with how we handled your data, you can complain to the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28.
Deleting your data
To have your account or any other personal data deleted, email coordinator@stjohnfrc.ie with the subject “Delete my data” from the email address on your account. We will delete it within 30 days and confirm by email.
Changes to this page
If we change how we use personal data, we will update this page and the date at the top.