committed to safeguarding your privacy. At all times we aim to respect any
personal data you share with us, or that we receive from other organisations,
and processing practices and your options regarding the ways in which your
personal information is used.
Policy contains important information about your personal rights to privacy. We
may update this Policy from time to time without notice to you, so please check
- We collect information about
you directly when you take part in one of our campaigns.
information about you when you use our website and take part in one of our
campaigns. For example:
- contacting us to seek
- signing up to a campaigning
petition or statement;
- emailing your MP or other
- subscribing to a campaign
email list to receive more information about our campaigning work.
- What information do we
collect, store and use the following kinds of personal data:
will typically hold your name and contact details, including physical address,
telephone number and e-mail address. In addition we will hold details of
campaigns you have supported and responses to surveys you have completed.
about your computer and about your visits to and use of this website including
your IP address, geographical location, browser type, referral source, length
of visit and number of page views.
- How and why will we use your
will be used for the purposes specified in this Policy. By proceeding to use
our website, you consent that we may process the personal data (including
sensitive personal data) that we collect from you in accordance with this
particular, we will use information that we hold about you for the purposes and
in the manner outlined below.
use your personal information to:
Enable you to participate in campaigns we run.
you information about our work, and campaigns.
with enquiries and complaints made by or about you relating to the website or
us in general.
petition submissions to third parties, where you have signed the petition and
the third party is a target of the campaign to which the petition relates.
Google Analytics – we may use some of your personal information to analyse our
digital performance, for example to see how our website can be improved, to
record how you are using our website or to assess the popularity of campaigns.
you have participated in a campaign through an IBA advocacy partner, the data
from that campaign will be passed back to the original partner organisation.
not sell or rent your information to third parties.
not share your information with third parties for marketing purposes.
- Children’s data
We do not
knowingly process data of any person under the age of 16. If we come to
discover, or have reason to believe, that you are 15 and under and we are
holding your personal information, we will delete that information within a
reasonable period and withhold our services accordingly.
- Security of and access to
your personal data
endeavour to ensure that there are appropriate and proportionate technical and
organisational measures to prevent the loss, destruction, misuse, alteration,
unauthorised disclosure or of access to your personal information.
give us personal information, we take steps to ensure that it’s treated
securely. All information is encrypted and protected with the following
software 128 Bit encryption on SSL. When you are on a secure page, a lock icon
will appear on the bottom of web browsers such as Microsoft Internet Explorer.
information is only accessible by appropriately trained employees and
partner with other organisations and in so doing transfer and/or acquire
your informed consent.
- Your rights
rely on your consent to use your personal information, you have the right to
withdraw that consent at any time. This includes the right to ask us to stop
using your personal information for direct mailing purposes or to be
unsubscribed from our email list at any time. You also have the following
to be informed – you have the right to be told how your personal information
will be used. This Policy and other policies and statements used on our website
and in our communications are intended to provide you with a clear and
transparent description of how your personal information may be used.
of access – you can write to us to ask for confirmation of what information we
hold on you and to request a copy of that information. Provided we are
satisfied that you are entitled to see the information requested and we have
successfully confirmed your identity, and as from 25 May 2018, we will have 30
days to comply.
of erasure – as from 25 May 2018, you can ask us for your personal information
to be deleted from our records. In many cases we would propose to suppress
further communications with you, rather than delete it.
of rectification – if you believe our records of your personal information are
inaccurate, you have the right to ask for those records to be updated.
to restrict processing – you have the right to ask for processing of your
personal data to be restricted if there is disagreement about its accuracy or
to data portability – to the extent required by the General Data Protection
Regulations (“GDPR”) where we are processing your personal information (i)
under your consent, (ii) because such processing is necessary for the
performance of a contract to which you are party or to take steps at your
request prior to entering into a contact or (iii) by automated means, you may
ask us to provide it to you – or another service provider – in a
- Lawful processing
required to have one or more lawful grounds to process your personal
information. Only 3 of these are relevant to us:
- Personal information is
processed on the basis of a person’s consent
- Personal information is
processed on the basis of legal obligations
- Personal information is
processed on the basis of legitimate interests
We will ask for your consent to use your information to send you electronic
communications such as campaign emails. This is because most of our
interactions with you and other website users are voluntary.
Sometimes we will be obliged to process your personal information due to legal
obligations which are binding on us. We will only ever do so when strictly
Applicable law allows personal information to be collected and used if it is
reasonably necessary for our legitimate activities (as long as its use is fair,
balanced and does not unduly impact individuals’ rights).
rely on this ground to process your personal data when it is not practical or
appropriate to ask for consent.
use your personal information, we will consider if it is fair and balanced to
do so and if it is within your reasonable expectations. We will balance your
rights and our legitimate interests to ensure that we use your personal
information in ways that are not unduly intrusive or unfair in other ways.
- Data retention
general, unless still required in connection with the purpose(s) for which it
was collected and/or is processed, we remove your personal information from our
records six years after the date it was collected. However, if before that date
(i) your personal information is no longer required in connection with such
purpose(s), (ii) we are no longer lawfully entitled to process it or (iii) you
validly exercise your right of erasure, we will remove it from our records at
the relevant time.
event that you ask us to stop sending you direct electronic communications, we
will keep your name on our internal suppression list to ensure that you are not
- Policy amendments
time-to-time by posting an updated version on our website, not least because of
occasionally to ensure you remain happy with it. We may also notify you of
- Updating information
You can check the personal data we hold about you, and ask us to update it
where necessary, by emailing us at email@example.com.
let us know if you have any queries or concerns whatsoever about the way in
which your data is being processed by emailing us at firstname.lastname@example.org.