This Policy contains important information about your personal rights to privacy. We may update this Policy from time to time without notice to you, so please check it regularly.
- We collect information about you directly when you take part in one of our campaigns.
We obtain information about you when you use our website and take part in one of our campaigns. For example:
- contacting us to seek information;
- signing up to a campaigning petition or statement;
- emailing your MP or other campaign recipient;
- subscribing to a campaign email list to receive more information about our campaigning work.
- What information do we collect?
We may collect, store and use the following kinds of personal data:
(1) We will typically hold your name and contact details, including physical address, telephone number and e-mail address. In addition we will hold details of campaigns you have supported and responses to surveys you have completed.
(2) information about your computer and about your visits to and use of this website including your IP address, geographical location, browser type, referral source, length of visit and number of page views.
- How and why will we use your personal data?
In particular, we will use information that we hold about you for the purposes and in the manner outlined below.
We may use your personal information to:
(1) Enable you to participate in campaigns we run.
(2) Send you information about our work, and campaigns.
(3) Deal with enquiries and complaints made by or about you relating to the website or us in general.
(4) Make petition submissions to third parties, where you have signed the petition and the third party is a target of the campaign to which the petition relates.
(5) Google Analytics – we may use some of your personal information to analyse our digital performance, for example to see how our website can be improved, to record how you are using our website or to assess the popularity of campaigns.
(6) If you have participated in a campaign through an IBA advocacy partner, the data from that campaign will be passed back to the original partner organisation.
We will not sell or rent your information to third parties.
We will not share your information with third parties for marketing purposes.
- Children’s data
We do not knowingly process data of any person under the age of 16. If we come to discover, or have reason to believe, that you are 15 and under and we are holding your personal information, we will delete that information within a reasonable period and withhold our services accordingly.
- Security of and access to your personal data
We endeavour to ensure that there are appropriate and proportionate technical and organisational measures to prevent the loss, destruction, misuse, alteration, unauthorised disclosure or of access to your personal information.
When you give us personal information, we take steps to ensure that it’s treated securely. All information is encrypted and protected with the following software 128 Bit encryption on SSL. When you are on a secure page, a lock icon will appear on the bottom of web browsers such as Microsoft Internet Explorer.
Your information is only accessible by appropriately trained employees and contractors.
We partner with other organisations and in so doing transfer and/or acquire personal data.
- Your rights
Where we rely on your consent to use your personal information, you have the right to withdraw that consent at any time. This includes the right to ask us to stop using your personal information for direct mailing purposes or to be unsubscribed from our email list at any time. You also have the following rights:
(1) Right to be informed – you have the right to be told how your personal information will be used. This Policy and other policies and statements used on our website and in our communications are intended to provide you with a clear and transparent description of how your personal information may be used.
(2) Right of access – you can write to us to ask for confirmation of what information we hold on you and to request a copy of that information. Provided we are satisfied that you are entitled to see the information requested and we have successfully confirmed your identity, and as from 25 May 2018, we will have 30 days to comply.
(3) Right of erasure – as from 25 May 2018, you can ask us for your personal information to be deleted from our records. In many cases we would propose to suppress further communications with you, rather than delete it.
(4) Right of rectification – if you believe our records of your personal information are inaccurate, you have the right to ask for those records to be updated.
(5) Right to restrict processing – you have the right to ask for processing of your personal data to be restricted if there is disagreement about its accuracy or legitimate usage.
(6) Right to data portability – to the extent required by the General Data Protection Regulations (“GDPR”) where we are processing your personal information (i) under your consent, (ii) because such processing is necessary for the performance of a contract to which you are party or to take steps at your request prior to entering into a contact or (iii) by automated means, you may ask us to provide it to you – or another service provider – in a machine-readable format.
- Lawful processing
We are required to have one or more lawful grounds to process your personal information. Only 4 of these are relevant to us:
- Personal information is processed on the basis of a person’s consent
- Personal information is processed on the basis of legal obligations
- Personal information is processed on the basis of legitimate interests
We will ask for your consent to use your information to send you electronic communications such as campaign emails. This is because most of our interactions with you and other website users are voluntary.
(2) Legal obligations
Sometimes we will be obliged to process your personal information due to legal obligations which are binding on us. We will only ever do so when strictly necessary.
(3) Legitimate interests
Applicable law allows personal information to be collected and used if it is reasonably necessary for our legitimate activities (as long as its use is fair, balanced and does not unduly impact individuals’ rights).
We will rely on this ground to process your personal data when it is not practical or appropriate to ask for consent.
When we use your personal information, we will consider if it is fair and balanced to do so and if it is within your reasonable expectations. We will balance your rights and our legitimate interests to ensure that we use your personal information in ways that are not unduly intrusive or unfair in other ways.
- Data retention
In general, unless still required in connection with the purpose(s) for which it was collected and/or is processed, we remove your personal information from our records six years after the date it was collected. However, if before that date (i) your personal information is no longer required in connection with such purpose(s), (ii) we are no longer lawfully entitled to process it or (iii) you validly exercise your right of erasure, we will remove it from our records at the relevant time.
In the event that you ask us to stop sending you direct electronic communications, we will keep your name on our internal suppression list to ensure that you are not contacted again.
- Policy amendments
- Updating information
You can check the personal data we hold about you, and ask us to update it where necessary, by emailing us at firstname.lastname@example.org.
Please let us know if you have any queries or concerns whatsoever about the way in which your data is being processed by emailing us at email@example.com.