Privacy Policy – Raise the Colours

Last updated: 3rd September 2025

This Privacy Policy explains how Raise the Colours (“we”, “our”, “us”) collects, uses and protects your personal information when you use our website [insert domain].

1. Who we are

Raise the Colours is a grassroots campaign movement operating in the UK. For data protection purposes, we are the data controller of the information you provide to us. You can contact us at:
Email: [insert email]
Postal address: [insert imprint address]

2. What information we collect

• Contact details you provide (name, email, phone, address).

• Donation information (amount, payment method, eligibility details required by UK electoral law).

• Volunteer sign-up details (skills, availability).

• Technical data (IP address, browser type, cookies).

3. How we use your information

• To process donations and verify donor eligibility.

• To manage volunteer sign-ups and event participation.

• To send newsletters or campaign updates where you have opted in.

• To comply with legal obligations under UK electoral law and GDPR.

• To improve the performance and security of our website.

4. Lawful bases for processing

We process your data under the following bases:

• Consent (for newsletters and communications).

• Contract (to process donations you make).

• Legal obligation (to keep required financial records).

• Legitimate interests (to run and protect our website).

5. Sharing your information

We do not sell your personal data. We may share limited information with:

• Payment processors (e.g. Stripe, PayPal).

• Service providers such as website hosts and email platforms.

• The Electoral Commission, if legally required.

6. Data retention

• Donation records: minimum 6 years (to meet legal requirements).

• Volunteer and contact records: until you withdraw consent or request deletion.

• Website logs: typically 12 months.

7. Your rights

Under UK GDPR, you have rights including:

• Access to your personal data.

• Correction of inaccurate data.

• Deletion of data (where legally possible).

• Restriction or objection to processing.

• Data portability.

To exercise these rights, contact us at [insert email].

8. Security

We use SSL encryption, firewalls, and access controls to protect your data. No system is 100% secure, but we take appropriate steps to minimise risk.

9. Complaints

If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the Information Commissioner’s Office (ICO): www.ico.org.uk.