Power Dysfunctions is a small non-profit group for adult fans of LEGO to share ideas, chat to one another and meet up at exhibitions. We act as the data controller for the personal information we collect. To provide our services to members and live event attendees, we need to collect certain personal information. This privacy policy outlines what information we collect, why we collect it, how we use it, how we keep it secure, and your legal rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We are committed to collecting only the necessary information to deliver our services and operate lawfully.

What data do we collect on our website?

  • Your first and last name,
  • A username (which may be personal data depending on your choice, though we don’t recommend this),
  • Your email address,
  • Your Facebook profile link (optional),
  • Whether you are over 18 years old,
  • If you are signing up for your child or for yourself,
  • Your child’s first name only if appropriate (optional).

How do we collect the above data?

All of the above data about you is asked for and collected when you sign up to become a member of Power Dysfunctions. When you click on the Member Sign-Up page, our website will ask you for the above information. Upon clicking the Sign-Up button the information you provide on that form is sent to our web server through a secure, encrypted connection (SSL) and stored on that server.

How we use your data:

  • Your First and Last Name:

We use your first and last name to identify you as a member and, if you attend our in-person meet-ups or exhibitions, to address you personally. Our lawful basis for processing your name for membership identification and in-person greetings is Legitimate Interests, as it is necessary for the effective management of our member community and enhancing your experience at our events.

  • Your username:
    This is used by our website to identify members and for signing into our website’s member area. The lawful basis for processing your username is the performance of a contract, as it is essential for providing you access to our online membership services. While you can make this anything you want, please note that if it contains identifying information, it may be treated as personal data. We advise against using your real name (e.g., john-smith) for privacy.
  • Your email address:
    For Member Account Management: Your email address is used for logging into the member’s area and to send you password reset links. Our lawful basis for this processing is the performance of a contract (your membership agreement).

    For Robot Combat Live Event Communications: If you sign up to take part in our robot combat live events, we will use the email address you provided on the Google Form to notify you about the success of your application, regarding the robots you can bring and send you an Info Pack (a PDF document) with important details and information about the live event. Our lawful basis for this is the performance of a contract (your participation in the event).
  • Your Facebook Profile Link:
    This is entirely optional and is solely used to send you an invitation to our members-only Facebook group. By providing your Facebook profile link, you are giving us your consent to use it for this purpose. You can leave this blank and click on the invite link provided separately if you prefer.
  • If You Are Signing Up For Your Child Or For Yourself:
    We ask this to understand if the account is for an adult member or if a parent/legal guardian is registering on behalf of a child. This is important because Power Dysfunctions is primarily for adult fans of LEGO, and access to certain online features (like our Facebook group and Discord server) is restricted to those over 18. This information helps us ensure appropriate arrangements and safeguarding for under-18s attending live events. By providing this information, you are giving us your consent to process it for these purposes.
  • Your Child’s First Name Only If Appropriate:
    If you are signing up on behalf of a child for our live robot combat events, providing their first name allows us to address them courteously at events. By providing your child’s first name, you are giving us your explicit consent to process this special category data for this specific purpose. We do not use this information for any other purpose and it is not required for participation.


What data do we collect when signing up to attend one of our live events?

  • Your first and last name,
  • Your email address,
  • If the person signing up is the parent or legal guardian of an individual under 18,
  • If the person signing up is under 18, we ask for the parent’s or legal guardian’s full name.

All other information we ask for on our live event sign up forms is non-personal information and relates to the name and class of their LEGO combat robots. That data cannot be used to identify someone.

How we use this data:

  • Your First and Last Name:
    We collect your name to identify attendees, distinguish individuals, and address you professionally in emails and at our live events. Our lawful basis for this processing is the performance of a contract (your registration and participation in the live event) and our legitimate interest in effectively managing event attendance and security.
  • Your email address:
    We require your email address to send you event invitation emails and important info packs containing details about the event location, venue arrangements, and safety information. Our lawful basis for this processing is the performance of a contract (providing you with necessary information for the event you’ve signed up for).
  • If The Person Signing Up Is The Parent Of Legal Guardian Of A Person Under 18:
    We ask this to determine if an attendee is under 18. This helps us ensure appropriate arrangements and allocate sufficient space for all participants, including minors, at our live events. By providing this information, you are giving us your consent to process it for these event planning and safeguarding purposes.
  • If The Person Signing Up Is Under 18, The Parent Or Legal Guardian’s Full Name:
    If a person under 18 signs up, we ask for their parent’s or legal guardian’s full name to allow us to address the parent/guardian directly if needed at live events. By providing this name, you are giving us your explicit consent to process this special category data for this specific purpose. We use this information for no other purpose.

Your Data Protection Rights:

Under UK GDPR, you have the following rights:

  • The Right to be Informed: This privacy policy serves this purpose.
  • The Right of Access: You have the right to request a copy of the personal information we hold about you.
  • The Right to Rectification: You have the right to ask us to correct personal information you think is inaccurate or to complete information you think is incomplete.
  • The Right to Erasure (the ‘Right to be Forgotten’): You have the right to ask us to erase your personal information in certain circumstances.
  • The Right to Restrict Processing: You have the right to ask us to restrict the processing of your personal information in certain circumstances.
  • The Right to Data Portability: You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in a structured, commonly used and machine-readable format, in certain circumstances.
  • The Right to Object: You have the right to object to the processing of your personal information in certain circumstances (e.g., direct marketing).
  • Rights in relation to automated decision-making and profiling: You also have rights regarding automated decision-making and profiling. We do not use any automated system for decision-making nor do we carry out any form of user profiling.

To exercise any of these rights, please contact us at power.dysfunctions@gmail.com. We will respond to your request within one month.

How We Store Your Data:

We are committed to ensuring that your information is secure. To prevent unauthorised access or disclosure, we have put in place suitable physical, electronic, and managerial procedures to safeguard and secure the information we collect online. Your data is stored on our secure web server, which employs industry-standard security practices such as firewalls and access controls. We regularly review our security measures to protect against unauthorised access, alteration, disclosure, or destruction of your personal information.

Data Retention Periods:

We will retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

  • Member Account Data (Name, Username, Email):
    We will retain this data for the duration of your active membership with Power Dysfunctions. If your membership becomes inactive or is terminated, we will delete this data within 18 months since your last sign up to our website, unless a legal obligation requires us to retain it for longer.
  • Facebook Profile Link:
    If you provide this during account sign-up, we will use this information to send you an invite to our members only group. Once we have done this, we will manually delete this information from your account. We will delete this either after we invite you or after 1 month, whichever if sooner.
  • Child’s First Name / Parent/Guardian Information:
    This data, collected for live event participation, will be deleted within 3 months after the completion of the event, unless a specific legal requirement dictates longer retention for safeguarding purposes.
  • Live Event Sign-up Data:
    Data collected for live events (names, emails) will be retained for 6 months after the event for administrative and record-keeping purposes, after which it will be securely deleted.

Sharing Your Data:

We do not share your personal data with third parties for their marketing purposes. We may share your data with trusted third-party service providers who assist us in operating our website and providing our services (e.g., our web hosting provider). These third parties are contractually bound to protect your data and only process it according to our instructions and in compliance with UK GDPR. We will only disclose your personal information if legally required to do so, for example, in response to a court order or a valid request from law enforcement bodies like the police.

Changes to Our Privacy Policy:

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated ‘Last Updated’ date. We encourage you to review this policy periodically to stay informed about how we are protecting the personal information we collect.

How to Contact Us:

If you have any questions about this privacy policy or our data practices, please contact us at: power.dysfunctions@gmail.com

How to Complain:

If you have any concerns about our use of your personal information, we request that you contact us first and make a complaint with us directly at: power.dysfunctions@gmail.com.

You can also complain to the ICO if you are unhappy with how we have handled your complaint or how we have used your data. The ICO’s address:
Information Commissioner’s Office
Wycliffe House Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113 ICO website: https://www.ico.org.uk

Last updated: 02 July 2025 at 0742 (BST)