PRIVACY POLICY

This website is operated by Southampton For Change, a proto-branch of Your Party organising in Southampton.

We are a local grassroots group of supporters working on the ground as a proto-branch of Your Party, ahead of formal branch recognition. We organise local political discussion, community organising, meetings, events and democratic engagement in and around Southampton.

As a proto-branch, we are not yet a formally recognised or authorised branch of Your Party, and this website is run by local volunteers rather than by Your Party's central organisation.

For the purposes of UK data protection law, the data controller for this website is:

If you have any questions about this Privacy Policy or how your personal data is used, you can contact us at the email address above.

This Privacy Policy explains how we collect, use, store, protect and delete personal data when you:

• visit this website
• join our mailing list
• submit a volunteer form
• register interest in events
• contact us through the website
• join or request access to our WhatsApp community
• communicate with us by email, phone, message or online form
• take part in local events, meetings or campaign activity

This policy applies only to this local proto-branch group and this website. It does not apply to Your Party's central organisation, any official political party website, WhatsApp, Meta, Google, Supabase, email providers, or any other third-party service.

Because this website relates to political organising, the information you provide may reveal or suggest your political opinions, political interests, political views, political sympathies, campaign preferences, or support for a political movement.

Under UK GDPR, political opinions are treated as special category data. This means they require extra protection.

By choosing to submit your information through this website, you are choosing to provide information connected to political activity and democratic engagement.

We will only use this information for the purposes explained in this policy.

We may collect the following information.

MAILING LIST DATA

When you join our mailing list, we may collect:

• full name
• email address
• postcode
• phone number, if provided
• date and time of signup
• consent confirmation
• any source or form through which you signed up

VOLUNTEER DATA

When you submit a volunteer or “get involved” form, we may collect:

• full name
• email address
• phone number
• postcode
• areas of interest
• availability
• skills or experience
• notes or messages you provide
• consent confirmation
• date and time of submission

EVENT DATA

If you register interest in an event, RSVP, attend a meeting, or contact us about an event, we may collect:

• name
• email address
• phone number
• postcode
• event interest
• attendance status
• any message you provide

CONTACT FORM DATA

If you contact us through the website, we may collect:

• name
• email address
• phone number, if provided
• message content
• date and time of message

WEBSITE TECHNICAL DATA

When you visit the website, limited technical data may be collected automatically by hosting, analytics, security or infrastructure providers. This may include:

• IP address
• browser type
• device type
• pages visited
• referring website
• approximate location
• date and time of visit
• cookie or similar technology data, where enabled

We should not use intrusive tracking, profiling, advertising pixels or behavioural targeting unless this Privacy Policy and cookie controls are updated first.

We collect and use personal data for the following purposes:

• to send local updates about meetings, events and community activity
• to build and manage a local supporter mailing list
• to understand levels of interest across Southampton and surrounding areas
• to organise volunteers
• to invite people to local meetings and events
• to respond to enquiries
• to manage event attendance and RSVPs
• to provide information about local political discussion and democratic engagement
• to keep basic records of consent and communication preferences
• to protect the website from misuse, spam, abuse or security threats
• to comply with applicable legal obligations

We do not collect your data to sell it. We do not sell your personal data to third parties.

Under UK GDPR, we must have a lawful basis for using your personal data. Depending on the situation, we may rely on:

CONSENT

We rely on consent when you choose to join our mailing list, submit a volunteer form, request updates, or agree to receive campaign-related communications. You can withdraw consent at any time by contacting us or using any unsubscribe option provided.

LEGITIMATE INTERESTS

We may rely on legitimate interests for limited administrative purposes, such as responding to messages, maintaining basic records, preventing misuse, improving the website, and organising internal operations. Where we rely on legitimate interests, we will consider your rights, freedoms and reasonable expectations.

LEGAL OBLIGATION

We may process data where required to comply with legal obligations, including data protection, electoral, regulatory, record-keeping, or law enforcement requirements.

Because political opinions are special category data, we also need an additional condition under Article 9 UK GDPR.

Where you voluntarily provide information that reveals or suggests political opinions or political interests, we rely on your explicit consent.

You give this explicit consent by ticking the relevant consent box before submitting a form.

You can withdraw this consent at any time by contacting us.

Political updates, campaign information, event invitations and supporter emails may be considered direct marketing under UK privacy law.

We will only send these communications where we have appropriate consent or another lawful basis that applies. Our emails should include a clear way to unsubscribe. You can ask us to stop sending you updates at any time.

We collect postcodes to:

• understand where local interest exists
• identify which areas of Southampton and nearby communities are engaging
• organise local meetings and events
• avoid sending irrelevant local updates
• understand broad geographic support

We do not need your full address unless there is a specific operational reason. If we later need full address data, we should explain why and ask for it separately.

If you choose to join a WhatsApp group or community, WhatsApp/Meta may process your data separately under its own privacy terms.

Other group members may be able to see your phone number, profile name, profile photo, and messages, depending on your WhatsApp settings.

Only join the WhatsApp community if you are comfortable with this.

We are not responsible for WhatsApp's own data processing.

Access to supporter and volunteer data should be limited to authorised organisers who need access for legitimate group purposes. We should use reasonable access controls, including:

• password-protected admin access
• limiting admin accounts
• avoiding unnecessary downloads
• keeping exported CSV files secure
• deleting exports when no longer needed
• not sharing login details
• removing access when someone no longer needs it

This website may use third-party services to operate properly. These may include:

• website hosting
• database providers
• authentication providers
• email providers
• form processing tools
• analytics tools
• security tools
• domain and DNS providers
• WhatsApp or other messaging platforms

These providers may process data on our behalf or as independent controllers.

Where possible, we should choose providers with appropriate security and privacy protections.

Current or possible providers may include:

• Lovable
• Supabase
• email delivery providers
• domain/DNS providers
• WhatsApp/Meta
• Google services, if used
• analytics providers, if used

This list should be updated if the technical setup changes.

We do not sell personal data. We may share personal data only where necessary, such as:

• with trusted service providers who help operate the website
• with authorised local organisers for group administration
• where required by law or regulation
• where necessary to protect the safety, rights or security of individuals
• where you have given consent

We should not share supporter or volunteer data with any official political party, candidate, campaign, external organisation, advertiser, data broker, or unrelated third party unless this has been clearly explained and you have given appropriate consent.

Some service providers may process data outside the United Kingdom.

Where this happens, we will aim to ensure appropriate safeguards are in place, such as adequacy regulations, standard contractual clauses, or equivalent protections.

We will only keep personal data for as long as needed. Suggested retention periods:

• mailing list records: until you unsubscribe or ask for deletion
• volunteer records: until you ask for deletion or we no longer need the record
• event interest records: up to 24 months after the event, unless needed for ongoing engagement
• contact form messages: up to 24 months
• admin/security logs: as needed for security and operational purposes
• consent records: as long as needed to demonstrate consent and compliance

We should review the database periodically and delete data that is no longer needed.

Under UK data protection law, you may have the right to:

• access a copy of your personal data
• correct inaccurate data
• ask for your data to be deleted
• restrict how your data is used
• object to certain uses of your data
• withdraw consent
• request data portability, where applicable
• complain to the Information Commissioner's Office

You can exercise your rights by contacting: yourpartysouthampton@gmail.com

We will usually respond within one month.

If we rely on consent, you can withdraw that consent at any time.

Withdrawing consent does not affect the lawfulness of anything we did before consent was withdrawn.

After withdrawal, we will stop the relevant processing unless another lawful basis applies.

You can ask us to delete your personal data.

We will delete your data where required by law, unless we need to keep limited information for legal, regulatory, safeguarding, security or compliance reasons.

We will take reasonable steps to protect personal data. These may include:

• using secure database services
• using protected admin login
• limiting admin access
• using strong passwords
• avoiding public exposure of supporter data
• using HTTPS
• keeping exports secure
• deleting unnecessary files
• reviewing access regularly

However, no website, database or communication system is completely secure.

This website is intended for adults aged 18 and over.

We do not knowingly collect data from children.

If we become aware that a child has submitted personal data without appropriate consent, we will delete it.

This website may use necessary cookies or similar technologies to make the site work.

If analytics, tracking pixels, advertising cookies, retargeting tools or behavioural tracking are added in future, we should update this policy and add a cookie notice or consent mechanism where required.

At present, the website should avoid non-essential political tracking unless proper consent controls are in place.

We do not use automated decision-making that has legal or similarly significant effects.

We may use basic segmentation, such as postcode area, volunteer interest, or event interest, to send more relevant local updates.

We do not use hidden profiling, psychographic targeting, voter suppression, data brokerage, or invasive behavioural targeting.

This website and related materials should include clear transparency wording.

Suggested imprint:

Where required or appropriate, campaign materials, digital content, emails, social posts, leaflets and adverts should include an imprint or equivalent transparency statement.

This website may link to other websites, including political websites, news websites, social media pages, WhatsApp groups or event platforms.

We are not responsible for the privacy practices of other websites or platforms.

You should read their privacy policies separately.

We may update this Privacy Policy from time to time.

The latest version will be published on this website with the updated date shown at the top.

If we make significant changes to how we use personal data, we should take reasonable steps to notify people affected.

If you are unhappy with how we use your data, please contact us first so we can try to resolve the issue.

You also have the right to complain to the Information Commissioner's Office.

ICO website: https://ico.org.uk

For privacy questions, unsubscribe requests, correction requests, deletion requests or subject access requests, contact: