1. LONG LIVE THE LOCAL COMMITS TO PROTECT YOUR PERSONAL INFORMATION
Long Live The Local is committed to protecting your personal information and your privacy. We encourage you to carefully read this Data Protection Policy. This Data Protection Policy informs you of our data protection and privacy practices, the way your personal information is collected online and how that information is used by us. This Policy will be readily available on our home page and at the bottom of every Long Live The Local Web page.
We strongly support the fundamental rights to privacy and Data Protection as well as compliance with national and international privacy laws.
We commit to maintaining the confidentiality of any personal information and to strictly limit any disclosure in accordance with local laws and regulations. We have established this Data Protection Policy to meet GDPR requirements as of 25 May 2018.
2. HOW DO WE PROCESS YOUR PERSONAL INFORMATION?
We will observe the following principles when processing your personal information:
- Processing your personal information fairly, lawfully and in a transparent manner;
- Collecting your personal information for specified, legitimate purposes and not processing further in ways incompatible with those purposes;
- Collecting your personal information only when relevant to and not excessive to the purposes for which it is collected and used. We may render information anonymous when feasible and appropriate, depending on the nature of the data and the risks associated with the intended uses;
- Maintaining your personal information accurate, and where necessary, kept up-to-date. We will take reasonable steps to rectify or delete data that is inaccurate or incomplete;
- Keeping your personal information only as long as it is necessary for the purposes for which it was collected and processed;
- Processing your personal information in accordance with the individual’s legal rights;
- Taking appropriate technical, physical and organisational measures to keep your data safe and prevent unauthorised access, unlawful processing, and unauthorised or accidental loss, destruction, or damage to personal information;
- Processing your personal information based on the following legal basis, that you have unambiguously given your consent.
3. WHY DO WE COLLECT YOUR PERSONAL INFORMATION & HOW DO WE USE IT?
We collect personal information where necessary to complete actions requested by you.
These situations are as follows:
Signing the petition
To sign the petition we require a full name, email address and postcode. This is the level of information we have deemed necessary to collate a valid government petition. We provide Government with a list of names and postcodes. Email addresses are used to send a confirmation, ensuring you cannot be signed up without your knowledge.
Emailing your MP
To email your MP we require a full name, email address and postcode. Name and Postcode are required to ensure an MP knows you are a constituent and is able to reply. Your email address is required to send the email from and give the MP the opportunity to reply directly to you.
Request a pub kit
To request a pub kit we require a full name, email address, pub name and full postal address. This information is used to contact the requestor and deliver the pub kit.
4. HOW DO WE USE YOUR INFORMATION FOR MARKETING?
When completing any of the aforementioned forms to either sign the petition, email your MP or request a pub kit we give the option to opt in for updates about the campaign.
If this box has been selected you will receive emails from us regarding the campaign, which can be unsubscribed from at any point. If you do not tick this box, you will only ever receive an initial confirmation email.
5. WHAT WE DO WITH YOUR PERSONAL DATA?
If you do provide personal information to us, either directly or through a reseller or other business partner, we will:
- not sell or rent it to a third party
- take commercially reasonable precautions to protect the information from loss, misuse and unauthorised access, disclosure, alteration and destruction;
not use or disclose the information except:
- As necessary to provide services or products you have ordered, such as (for example) by providing it to a carrier to deliver a pub kit you have ordered, or providing it as part of the final petition delivery.
- In other ways described in this Data Protection policy or to which you have otherwise consented;
- In the aggregate with other information in such a way so that your identity cannot reasonably be determined (for example, statistical compilations);
- As required by law, for example, in response to a subpoena or search warrant;
- To outside auditors who have agreed to keep the information confidential;
- As necessary to enforce the Terms of Service;
6. YOUR CONSENT
By providing us with your personal information and/or using the websites and/or entering into a contract with us, you consent to our processing your Personal data for the above purposes. You also consent to our transferring your information to countries or jurisdictions which do not provide the same level of data protection as the EU, if necessary for the above purposes. If we do make such a transfer, we will provide appropriate safeguards to ensure that your information is duly protected. If you provide us with information about another person, you confirm that they have appointed you to act for them, to consent to the processing of their Personal data including sensitive personal data and that you have informed them of our identity and the purposes (as set out above) for which their Personal data will be processed.
7. YOUR DATA PROTECTION RIGHTS
These are your rights as the data subject at any point while we are in possession of or processing your personal data:
- Right of access – you can request a copy of the information we hold about you. Once we have received your request we will respond to you within 30 days.
- Right of rectification – you have a right to correct data that we hold about you that is inaccurate or incomplete.
- Right to erasure – in certain circumstances, you can ask for personal information we hold about you to be erased from our records. If you request this we will tell you if it is possible to delete the information or if we have a legal obligation to retain it.
Restriction of processing – where certain conditions apply you can ask us to restrict the use of your personal information if it:
- is not accurate
- has been used unlawfully but you don’t want us to delete it
- is not relevant anymore, but you want us to keep it for legal claims.
- Right to portability – you can get a copy of the data we hold about you in a format that can easily be re-used and ask us to transfer (where feasible) your personal information to another organisation.
- Right to object – you can object to certain types of processing such as direct marketing.
- Right to object to automated processing, including profiling – you also have the right not to be subject to the legal effects of automated processing or profiling.
- Right to judicial review - if you are not satisfied with our response or believe we are not processing your personal information in accordance with the law, you can complain to the Information Commissioners Office (ICO).
- Right to be notified of data breach – you have the right to be notified of a data security breach concerning your personal data.
For more information about your data rights under the law, visit the Informational Commissioners’ Office website
If at any time you wish to exercise your right to see the data held about you, wish to update or remove your details, or have any other queries, please contact our Data Protection Compliance Officer at firstname.lastname@example.org.
Please note that we will need to verify your identity in relation to your request.