We are a community radio station run by volunteers, not for profit. We collect the information we need to run the station, the forum, and the shop. We share it only with the services that make those things work, and we name them below. We keep financial records for six years because tax law requires it, and we delete most other things sooner. You can ask us what we hold about you, and you can ask us to delete it, subject to those legal limits.
Last updated: 04/11/2026
Who we are
CloudBuster Radio is the trading name of Youan Mitchell, a sole trader based in Blandford Forum, Dorset. Our address for correspondence is 37 Dorset Street, Blandford Forum, Dorset, DT11 7RF. We are the data controller for the personal data collected through cloudbusterradio.com and community.cloudbusterradio.com.
For anything to do with this policy or your data, contact members@cloudbusterradio.com.
What we collect
When you create an account or join the forum: your username, email address, and a securely hashed password. If you become a member, we also record your membership tier and its start and end dates.
When you place an order: your name, email address, billing address, delivery address, phone number if you provide one, and the details of what you bought.
When you contact us: whatever you send us, and our replies.
When you browse: your IP address, browser type, and basic information about which pages you visit. This is collected through cookies, and the non-essential ones only run with your consent.
Payment details: we never see or store your full card number. Card details go directly to Stripe, our payment processor. We receive confirmation that a payment succeeded and a reference we can use to match it to your order. We do not receive your card number.
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service Privacy Policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Media
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
One account across the site and the forum
Your account on cloudbusterradio.com and your account on community.cloudbusterradio.com are the same account. When you log in to either one, you are logging in to a single identity that both services recognise. Your username, email address, and membership status are shared between them so that you do not have to maintain two logins or two profiles.
If you post on the forum, those posts are public in the way any forum post is public. Your account data is not public.
Cookies
Essential cookies keep the site working: logging you in, remembering your cart, and keeping checkout secure. These do not require consent.
Non-essential cookies, mainly analytics, only run if you agree to them. You can change your mind at any time through the cookie settings on the site, or by clearing cookies in your browser. Declining them does not stop you using the site, forum or shop.
Embedded content from other websites
Articles on this site may include embedded content (e.g. audio, videos, images, articles). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
We use Mixcloud to embed shows and other audio throughout the site, particularly the episode archive. See Mixcloud’s Privacy Policy here https://www.mixcloud.com/privacy/
How we use your data
To create and maintain your account, and to keep your forum and site logins working.
To process your order, take payment, and have your items produced and delivered.
To apply member discounts and any tier-based access you are entitled to.
To send you the emails that come with an order: confirmation, dispatch, and anything we need to tell you about it.
To send you membership emails, such as renewal reminders.
To send you station news and updates, but only if you have asked for them. You can stop them at any time.
To keep the financial records we are legally required to keep.
To keep the site and the forum secure and to deal with abuse.
To understand which parts of the site people actually use, so we can decide what to build next.
We do not sell your data. We do not share it with advertisers. We do not build profiles of you to target advertising.
Our lawful bases
Under the UK GDPR we rely on the following:
Contract: to process your order and provide the goods or membership you have bought.
Legal obligation: to keep financial and tax records.
Legitimate interests: to keep the site secure, prevent fraud, moderate the forum, and understand how the site is used so we can improve it. We have weighed this against your rights and we keep the data involved to a minimum.
Consent: for marketing emails and for non-essential cookies. You can withdraw consent at any time, and withdrawing it does not affect anything you did before that point.
Where we ask you for information needed to fulfil your order, providing it is a contractual requirement. If you do not provide it, we cannot process your order.
We do not make automated decisions about you that have a legal or similarly significant effect.
Transfers outside the UK
Some of our providers operate outside the UK, including Stripe. Where that happens we rely on the safeguards they have in place, such as adequacy regulations or the UK’s International Data Transfer Addendum to the standard contractual clauses. You can ask us for more detail about any specific transfer.
Who we share your data with
We share data only where it is needed to run the station, the forum, or the shop. The named services are:
Stripe processes card payments. Stripe receives your payment details, your name, and the amount. Stripe is the only party that handles your full card number.
Teemill produces and ships our apparel. We send Teemill your name and delivery address so they can print and post your order.
Printful produces and ships our posters, prints and accessories. We send them the same information as Teemill. We post stickers and other stock items ourselves. Your name and delivery address are shared with the postal carrier so your order can be delivered.
Our hosting and email providers store the site, the forum, and our email. They process data on our instructions.
Flarum runs the forum software. Forum posts and account data are stored in the forum database.
Our email delivery service sends order and membership emails on our behalf.
How long we retain your data
For users that register on our website: we store the personal information they provide in their user profile. You can see and edit most of the information in your account at any time. You cannot change your username, and you cannot delete order records yourself, because we are legally required to keep them for six years. If you want your account deleted, email members@cloudbusterradio.com and we will do it, subject to those retention requirements.
Forum posts: retained while the forum is running. If you ask us to delete your account, we will anonymise your posts rather than delete whole discussions, so the conversations stay readable for everyone else.
We do not keep other data indefinitely. Our retention periods are set out in our store settings and mirrored here:
Orders that are pending or failed: 90 days. An unpaid order has no further purpose after that.
Cancelled orders: 1 year, so we can deal with any dispute that arises.
Completed orders: 6 years. This is not a choice we make, it is a legal requirement for tax records.
Stripe payment references: 6 years, matching the order records they belong to so the two stay reconcilable.
Inactive accounts: 2 years after your last activity. If you have not used the account in that time, we will remove it.
What rights you have over your data
You have the right to:
ask what personal data we hold about you, and receive a copy
ask us to correct anything inaccurate
ask us to delete your data, where we are not required to keep it
ask us to restrict what we do with it, or object to a particular use
receive your data in a portable format
withdraw consent for marketing or cookies at any time
To exercise any of these, email members@cloudbusterradio.com. We will respond within one month. There is no charge.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk. We would rather you came to us first, but that is your right and it will not affect how we deal with you.
Changes
If we change how we handle data, we will update this page and change the date at the top. If the change is significant, we will tell account holders by email. We will not apply a new use to data we already hold without a lawful basis for doing so.
