Introduction
To ensure that we communicate with our members and supporters through their preferred channels, and to enable us to share updates about our work, we need to collect different types of information, including personal data. We understand the trust that our members and supporters place in us when sharing their data, and we will always do our utmost to respect that trust and protect their personal information.
To ensure you are aware of any changes to our policy, make sure you visit this page on a regular basis.
Who we are
Action on Climate in Teignbridge (ACT) is a CIC registered in England, number 12278894. It is a data controller and processor of your information under the conditions of the Data Protection Act 2018. From 25 May 2018 the 2018 Act replaces the 1998 Data Protection Act. For more information on ACT visit our website.
Contact information
ACT’s directors are ultimately responsible for safeguarding your personal data. Should you have any doubt over the use of your data or require clarification of this policy please follow this email link to our DP administrator or use the Contact Us page of our website using the subject matter “Data Protection”.
What personal data we collect and why we collect it
Sign up
Using our Join page (or any other method for supplying the information to us) we collect your name, email address and postcode for the purpose of keeping you up to date with relevant information concerning ACT’s activities and plans and to understand your interests.
The details you provide will be passed to Mailchimp, see their privacy policy for contacts here.
If you become an active member, for example, by attending meetings and communicating directly with other members within themed groups, it will often be necessary to also collect your telephone number.
Website comments
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
Unless you permit us to do otherwise, the information collected is used purely for the purpose of the comment you leave.
Any avatar (image) you use generally, associated with your email address, may be recognised by the Gravatar service we use. Their privacy policy is available here
Website contact forms
Emails submitted via contact forms are submitted to the Akismet service to protect against spam. The Akismet service Privacy Policy is available here. Unless you permit us to do otherwise, the email address collected is used purely to deal with the message you submit.
Cookies
If you leave a comment on our site you may opt in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
Legal bases for collecting personal data
To be compliant with the Data Protection Act 2018, we need to have a legal basis for holding and processing your data. The legal basis that we rely on will depend upon the circumstances in which we collect and use your personal information. In almost all cases, our processing of your personal information will fall into one of the following categories:
- Where you have provided your consent to allow us to use your data in a certain way.
- Where it is in our legitimate interest to contact you in order to carry out our activities. Where we rely on a legitimate interest to use your information, we will always ensure that this is done in a way so as not to be intrusive or cause distress, and that respects your rights.
- Where it is necessary for us to process your data in order to carry out the performance of a contract with you.
Automated use of data
Our activities cover various geographic areas and so, from time to time, we may use your postcode to profile groups of people in order to send them information relevant to where they live.
Who we share your data with
We use trusted companies, like the software platforms stated elsewhere in this policy and automated spam detection services, to administer your data, in which case they will use your details only for that purpose. Some of these services are situated outside the UK but they comply with UK data protection regulations.
Subject to the above, or unless we obtain your specific consent, we will never share your information with third parties.
Security
We have implemented appropriate technical and organisational measures to secure personal data against loss or against any form of unlawful processing.
Our website pages are secured using Transport Layer Sockets (TLS), a security protocol that provides communications privacy over the Internet in a way that is designed to prevent eavesdropping, tampering, or message forgery.
In order to perform their work, only authorised ACT members are allowed access to personal information about members, supporters and website visitors.
How long we retain your data
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.
If you sign up with ACT we will retain your information until you delete it or ask us to do so. You can edit and delete your information by following the instructions on the Join page.
What rights you have over your data
In addition to the right to edit and delete your data, as detailed above, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us.
Last updated April 2020