Privacy and cookie policy

This policy, produced by Open Rights Group and shared via RadHR, sets out in plain terms the legal bases, data types, and retention periods for each category of personal data processing — including campaign sign-ups, donations, membership, mailing lists, website analytics, and work-related contacts. It explains the organisation's use of self-hosted Matomo analytics (in preference to Google Analytics) and its approach to third-party data processors, including a commitment never to sell data and to resist unwarranted law enforcement requests. The policy is scoped to external-facing data processing only and explicitly excludes internal HR and operational data handling, making it a practical template for civil-society organisations seeking a privacy-respecting, GDPR-compliant public-facing policy.