-
Notifications
You must be signed in to change notification settings - Fork 12
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Update privacy policy with companies we currently use
- Loading branch information
Showing
1 changed file
with
24 additions
and
26 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -16,11 +16,11 @@ <h1>Privacy & Terms</h1> | |
| Spacehoppers, New Mills, Libbys Drive, Stroud, GL5 1RN. | ||
|
|
||
| In a nutshell, we care about your privacy. We collect data to see how people use our sites so that we can improve them. | ||
| We don’t carry adverts and we don’t sell your data. | ||
| We don’t carry adverts, and we don’t sell your data. | ||
|
|
||
| ## Privacy, in detail | ||
|
|
||
| ###Why do we collect data? | ||
| ### Why do we collect data? | ||
|
|
||
| The law says we must have a ‘lawful purpose’ to collect personal data. We collect and process personal information | ||
| either because we have your explicit consent to do so or because we have a legitimate interest in improving our | ||
|
|
@@ -30,13 +30,13 @@ <h1>Privacy & Terms</h1> | |
| secondary services that indirectly serve those aims, such as a crowdsourcing database, an email list and an online chat | ||
| space. These services or tools are made more useful or can only exist as a result of personal data being shared with us. | ||
|
|
||
| ###What data do we collect? | ||
| ### What data do we collect? | ||
|
|
||
| When you use any of our services, we may store your IP | ||
| address ([a unique identifier for your device or internet connection](https://simple.m.wikipedia.org/wiki/IP_address)) | ||
| in order to understand how our websites are used and to help with some parts of our server administration. | ||
|
|
||
| If you sign up to any of our services, such as a mailing list or election reminders, we collect the data you provide so | ||
| If you sign up to any of our services, such as a mailing list, we collect the data you provide so | ||
| that we can keep in touch and provide you with relevant information. | ||
|
|
||
| If you sign up to help crowdsource data, we will store your username and email address. The edits you make will be | ||
|
|
@@ -49,45 +49,44 @@ <h1>Privacy & Terms</h1> | |
| made [this table](https://democracyclub.github.io/wheredoivote-usage-may-2018/data/wheredoivote-usage-may-2018) of users | ||
| in a council area. | ||
|
|
||
| ###Do we share information with others? | ||
| ### Do we share information with others? | ||
|
|
||
| The personal data we collect on candidates becomes open data available to anyone to increase democratic engagement. | ||
|
|
||
| If you use our websites, we log events that happen on our website using Papertrail by SolarWinds. You can see | ||
| their [privacy policy](https://www.solarwinds.com/legal/privacy) here. | ||
|
|
||
| If you sign up to receive emails from us, we use a third-party service called SendGrid to send the emails. Here’s | ||
| their [privacy policy](https://sendgrid.com/policies/privacy/services-privacy-policy/). | ||
|
|
||
| If you sign up for our online chat, Slack, you’ll be subject to | ||
| their [privacy policy](https://slack.com/privacy-policy). | ||
|
|
||
| SolarWinds, Slack and SendGrid are US companies. They must observe the same GDPR rules when processing data from the EU. | ||
| Everything else, including postcode logging and server access logs are stored on our hosting provider, AWS. We only use | ||
| the `eu-west-2` AWS region, meaning data is stored in the UK. You can read more | ||
| on [how AWS process this data](https://aws.amazon.com/compliance/eu-data-protection/). | ||
|
|
||
| We store and process data using Amazon Web Services, a popular ‘cloud’ service, using servers based in the EU. | ||
| Slack and AWS are US companies. They must observe the same GDPR rules when processing data from the EU. | ||
|
|
||
| ###For how long do we keep personal data? | ||
| ### For how long do we keep personal data? | ||
|
|
||
| We keep personal data for as long as we have consent or as long as is necessary to pursue the goal of greater democratic | ||
| engagement and is consistent with the public interest. | ||
|
|
||
| For example, we will maintain a record of candidates as a matter of public fact, but we can remove contact details on | ||
| application. The nature of open data means that we can only do this on the web properties we control. | ||
| For example, we will maintain a record of candidates as a matter of public fact, but we can remove contact details, | ||
| or information that isn't part of a public notice, on application. The nature of open data means that we can only | ||
| do this on the web properties we control. | ||
|
|
||
| If you sign up for one of our services, such as our mailing list or election reminders, we will keep your data until you | ||
| If you sign up for one of our services, such as our mailing list, we will keep your data until you | ||
| notify us that you no longer wish to use the service. | ||
|
|
||
| ###Cookies, tracking and third-party services | ||
| ### Cookies, tracking and third-party services | ||
|
|
||
| We sometimes use cookies to improve the service to you (for example, so that you can use the website without having to | ||
| identify yourself on each page, and to protect the site against malicious use). | ||
| We sometimes use cookies track if you are logged in to a website. This type of cookie is ‘strictly necessary’ | ||
| for the log-in feature to work. | ||
|
|
||
| We track usage of our services so that we can see how people are using it, what pages people are looking at and so on in | ||
| order to improve the service. We use Google Analytics to do this. It does not identify you personally, but you can use a | ||
| browser plugin to opt out of this kind of tracking and | ||
| see [this page](https://policies.google.com/technologies/partner-sites) for more on how Google uses data. | ||
| order to improve the service. | ||
|
|
||
| ###Your rights | ||
| We use GoatCounter to do this. It does not identify you personally. You can read more about | ||
| [GoatCounter's GDPR policy](https://www.goatcounter.com/help/gdpr) and their | ||
| [privacy policy](https://www.goatcounter.com/help/privacy). | ||
|
|
||
| ### Your rights | ||
|
|
||
| You can ask to see the personal data we hold for you. You can also ask us to delete it. In both cases we must respond | ||
| within one month. We will not erase data that is of a public record, such as the name of a candidate in an election. | ||
|
|
@@ -97,15 +96,14 @@ <h1>Privacy & Terms</h1> | |
|
|
||
| You have the right to object to the use of your personal data. | ||
|
|
||
| ###Contact us | ||
| ### Contact us | ||
|
|
||
| To exercise your personal data rights or for any questions about how we process data, please | ||
| email [[email protected]](mailto:[email protected]). | ||
|
|
||
| If you believe that we are not observing your personal data rights, you also have the right to complain to the | ||
| Information Commissioner’s Office and potentially to a judicial remedy. | ||
|
|
||
|
|
||
| ## Terms | ||
|
|
||
| By using this website you agree to the terms stated here. | ||
|
|
||