NO2NP treats the privacy of its supporters and others very seriously. This notice explains how we collect, use, and protect personal data.

The No to Named Persons Campaign (“NO2NP”) is the data controller for the purpose of data shared with us. The campaign is an association consisting of Ms Alison Preuss, Dr Stuart Waiton, The Christian Institute, and CARE (Christian Action Research & Education). The Christian Institute is responsible for data compliance by the campaign.

How we obtain and use personal information

We use our online petition to establish support for NO2NP and for supporters to subscribe to receive our emails. Our supporters confirm that they are over 16 and provide us with their name, email address and post code (to confirm they live in Scotland).

During the course of our relationship with our supporters, they may also provide us with a telephone number if this is needed to deal with their enquiry, or volunteer information to us about the named person scheme.

Those who volunteer to campaign for NO2NP may also provide us with their contact details so we can provide activities for them where appropriate.

We use personal information to:

  • keep a record of our support base
  • keep in touch with our supporters and carry out reasonable administration of our mailings to them
  • manage our volunteers
  • manage enquiries from supporters and others and keep a record of correspondence
  • improve our campaign and communications

We keep personal information up to date. This includes using publicly available sources to help ensure we do not send emails to addresses which are no longer active.

Our responsibilities

  • We only send emails about our campaign to those who have given their consent to us to do so. However, a person can change their mind at any time and withdraw their consent, in which case we will stop sending emails. Every email has a link to help the recipient unsubscribe if they wish to stop receiving emails.
  • On occasions, a supporter may seek to share their own experiences with us to support the campaign. This may include information which relates to their children or which is categorised as “sensitive personal data”, e.g. information concerning health or religious belief. We only process this information if it is necessary to do so, where we have explicit consent, and with appropriate safeguards. This information is kept no longer than is necessary.
  • In all other cases we rely upon our legitimate interests. For example, in maintaining our email list, managing our volunteers, and keeping appropriate records of our interaction with supporters. Relying on our legitimate interests mean that we carry out an exercise to check that we will not cause harm to the data subject by processing their data, that the processing is not overly intrusive and that we will only do so in a way which is described in this privacy policy. Our legitimate interests involve harnessing our support base to help us say no to the named person plans.

Sharing information

We will not share the personal information we hold with another organisation for their own purposes and we will never sell or trade personal information for any reason whatsoever.

There are one or two situations where our legitimate interests involve us using service providers who we have contracted to fulfil services for us. For example, administering our mailing list involves certain functions being provided by service providers who process on our behalf the name and email address of our supporters. However, we remain in control of the information and the purpose for which it can be used.

We hold our email list on MailChimp, who deliver to our supporters the emails they have signed up to receive. This service also enables us to gather statistics around email opening and clicks using industry standard technologies including gifs to help us monitor and improve our mailings (see: https://mailchimp.com/legal/cookies/). Although MailChimp hosts its data in the US, it has certified its compliance with the EU-US Privacy Shield Framework.

How long we keep data

NO2NP has been set up to respond to a single issue which is current.

By signing our petition, our supporters intend us to rely upon their support for the duration of the campaign. We therefore keep a record of their support for verification purposes, unless they withdraw their support. At the conclusion of the campaign, we will destroy all data using secure means, using specialist companies to do this work for us if necessary.

If a supporter unsubscribes from our emails they are removed from our mailing list. A list of unsubscribed email addresses may be kept to ensure that we do not send emails to those who no longer wish to receive them.

Security

We keep personal information secure with appropriate security measures in place to attempt to protect against the loss, misuse, and alteration of personal information.

The transmission of data across the internet is not completely secure. We cannot guarantee that loss, misuse or alteration of data will not occur whilst data is being transferred.

Cookies and use of our website

What are cookies?

Cookies are small text files that are downloaded to a user’s device when they visit a website.

Why do we use cookies?

We use cookies for the operation, security, monitoring and improvement of our website.

Some cookies are retained in a user’s browser for only as long as they visit our website, while others may persist for a longer specified or unspecified period.

Summary of cookies we use

Cookie type Name(s) Purpose
Strictly Necessary PHPSESSID v_csscached Used to enable the basic functioning of our website.
Cookie consent no2np_cookie_consent Used to remember a visitor’s acceptance of our cookie notice.
Analytics (Google) _ga _gat _gid Used to collect information about how visitors use our Website. We use them in an anonymised form, including information to compile reports and to help us improve the website. The cookies collect information about the number of visitors to the website and blog, where visitors have come to the website from and the pages they visited. Google’s Privacy Policy

In the course of a person’s visit to our website third-parties providing services on our website or having content embedded in our website may also place cookies on a user’s device to enable the functionality of their services and for their own purposes. We do not control how these third parties use cookies so our website users should refer to the third party’s own privacy and cookie policy. The table below details the third parties we have identified who may place cookies on a user’s device.

Facebook We enable users to follow our Facebook Page from our website. To provide this service Facebook places cookies on a user’s device for advertising purposes. If a user visits our site while logged-in to Facebook, they may place further cookies on a user’s device. Facebook’s Privacy Policy
YouTube (Google) We embed videos from our official YouTube Channel. Google’s Privacy Policy
Twitter We enable users to follow our Twitter Feed from our website. Twitter’s Privacy Policy
ShareThis We enable users to share content from our website on social media platforms using the ShareThis service. ShareThis’s Privacy Policy
DoubleClick (Google) As we use services from Google, they may also place cookies on a user’s device for targeting advertising across the web. Google’s Privacy Policy

Data Subject Rights

Under data protection law, a person has the following rights in relation to their personal data:

Right to access

Subject to some exemptions, the right to access a copy of the personal information that we hold about them.

Right to correct

The right to obtain from us the rectification of inaccurate or incomplete personal information we hold concerning them.

Right to erase

The right to ask us to erase their personal information in certain circumstances.

Right to restriction of processing

The right to ask us to restrict the processing of their personal information in certain circumstances.

Right to object

The right to object to our use of their personal information where we use it on the basis of our legitimate interests. We shall no longer process a person’s personal information unless we can demonstrate compelling legitimate grounds for the processing. A person also has the right to object to processing of their personal information for direct marketing purposes.

Right to request transfer

The right to request transfer of their personal information in a structured, commonly used, machine-readable format. This right only applies to automated information where the processing is based on consent or under a contract.

Right to withdraw consent

The right to withdraw consent at any time where we are relying on consent to process the person’s personal data. However, this will not affect the lawfulness of any processing carried out before the withdrawal of consent.

More information about these rights can be found on the website of the Information Commissioner’s Office.

Accuracy of personal information

We aim to keep our information about our supporters and those who contact us accurate as possible. If a person wishes to access, review or change the information supplied to us, they can contact us as set out below.

Contact us

To make enquiries in relation to this privacy notice, exercise any of the above rights, or to make a complaint about our use of your personal information, please contact us at admin@no2np.org.uk or write to us at NO2NP, c/o The Christian Institute, 4 Park Road, Gosforth Business Park, Newcastle upon Tyne, NE12 8DG.

If you are not satisfied with the way we deal with your complaint, you have the right to refer it to the Information Commissioner’s Office. You are also entitled to make a complaint to the Information Commissioner’s Office without first referring it to us.

Changes

We keep this notice under regular review. It was last updated on 8 April 2019.