If you are a supporter of Ideal Bradford, or you have corresponded with us digitally, then we hold a small amount of information about you which falls under the category of Personal Data. Ideal Bradford is the Data Controller of this information, under the EU General Data Protection Regulation.
What we hold and why
We hold only the minimum amount information we need to keep you up-to-date on our political activities, which you have normally given to us.
This is likely to be:
- Email address
- Telephone number
- Payment dates (no account details)
- Subscription start dates
- Photographic consent (where appropriate)
- Email access tracking (via third party)
The purposes of holding this information are:
- Marketing and fundraising (with consent or ‘soft opt-in’)
- Administration (legitimate interests)
- Regulatory compliance
You can withdraw marketing consent at any time by emailing firstname.lastname@example.org or clicking the unsubscribe link in one of our emails. Please note that if you unsubscribe we will continue to hold a small amount of personal data for compliance purposes (to ensure that we don’t accidentally mail you again).
Special Category data
As a political organisation, we may at times ask for your political opinions on certain matters. These fall within the definition of Special Category data under the GDPR. We only ever process this data with your clear, unambiguous consent, which will be sought at the time of collection.
Who the information is shared with
Personal data may be used by Party Officers and volunteers, under the auspices of Ideal Bradford as the Data Controller. We do not regard this as data sharing, and take responsibility for their use of this data.
We use other companies for certain services, known as Data Processors:
We use Facebook for promotional and communication purposes. Facebook are based in the US, and have their own Privacy policies – we are not responsible for Facebook’s use of data that you place on the site, whether on our page or otherwise.
We do conduct non-specific marketing campaigns (Ads) via Facebook, based on page likes, keyword likes, geographical location and sometimes also demographic factors (primarily age and gender). We do not directly access any of this data, nor do we engage in behavioural analytics.
We use Mailchimp for sending out newsletters. Mailchimp also allows for a level of analytics (for example open rates) which we use primarily for compliance purposes. All emails from this source carry information on how to unsubscribe. Doing so will mean we cannot keep you up-to-date with events or activities. Mailchimp data is hosted (which means held) in the US where privacy law is different. However, Mailchimp have signed up to Privacy Shield, which provides an adequate level of protection in EU law, and carry additional security certifications, so you can be confident in the protection this offers.
We use Google for primarily for administration purposes, particularly in relation to campaign co-ordination, for example organising volunteers. Google also carries You Tube content. Google data is hosted (which means held) in the US where privacy law is different. However, Google have signed up to Privacy Shield, which provides an adequate level of protection in EU law, and carry additional security certifications, so you can be confident in the protection this offers.
We use the Co-operative Bank for banking services. If you have donated or paid subscriptions directly to Ideal Bradford, your bank account details will be processed by the Bank on our behalf.
We also use other services such as SoundCloud, but we do not have access to data from these sources.
How long we keep your data
We will only keep your data for as long as we need it. Where you are subscribed to our marketing
list, we will stop emailing you if you have not opened any of our last 10 emails, though a small
amount data will continue to be held for compliance purposes for up to 1 year.
Where we collect opinions and information for campaigning purposes, some of this data may be
kept for historical and research purposes without additional notice being provided.
You have various rights under the GDPR:
- To object to an aspect of processing;
- To ask us to correct your data;
- To ask us to erase your data;
- To ask us to provide you with a copy of your data.
You can make requests to us on any of these by emailing email@example.com.
You can also make complaints on any aspect of our data protection practice to the Information Commissioner’sOffice www.ico.org.uk, although we would ask that you contact us first so that we can try and resolve things for you.
Data Protection Officer
Ideal Bradford is not required to appoint a Data Protection Officer, although we do have access to qualified data protection advice. If you have any queries, please do contact us at the email address above.