Short version
- We do not sell data.
- We do not set advertising cookies.
- We keep as little personal data as possible.
What we collect and why
Contact form
When you submit the contact form, we collect your name, email address, message and the IP address of the request. We use this information only to reply to you and to prevent abuse. Messages are stored in our email inbox; IP addresses are kept only long enough to identify and block abuse.
Newsletter
If you subscribe via the get-involved page, we store your email address and the date of subscription in a Supabase database. We use it only to email you updates on the Thirlwall Inquiry final report, the CCRC decision, and major related developments. You can unsubscribe any time by replying to any email or using the unsubscribe link.
Analytics
We use Google Analytics 4 to understand which pages people read and how they arrive. It runs on every page and sets cookies (see below). We do not send it any personal data, we do not use it for advertising, and we have not enabled Google Signals or advertising features.
Where it is configured, we also use Plausible Analytics, which is cookie-less and collects no personal data.
Separately, an optional performance beacon (Real User Monitoring) measures page-load speed. That one is opt-in — you are asked before it runs, and it is off unless you agree.
Cookies
This site sets the following cookies:
theme— first-party, remembers your light/dark-mode preference. Strictly functional, contains no personal data._gaand_ga_*— set by Google Analytics 4 to distinguish one browser from another for visit statistics. These are analytics cookies, not advertising cookies.
We set no advertising cookies and no cross-site tracking cookies. You can block or clear these in your browser, or use a tracker blocker, without any loss of function — nothing on this site depends on analytics.
Legal basis (UK GDPR)
Contact form: legitimate interest in responding to enquiries. Newsletter: explicit consent given at the point of subscription. Theme cookie: strictly necessary / functional. Analytics cookies: legitimate interest in understanding how the site is used. The performance beacon is consent-based and off by default.
Your rights
You have the right to access, correct or delete any personal data we hold about you, and to withdraw consent to the newsletter at any time. Use the contact form (subject: General enquiry) and we’ll respond within a few working days.
Hosting
The site is hosted by Netlify. Database storage is provided by Supabase. Transactional email is sent via Resend. Each provider processes data under its own privacy policy, which apply in addition to this one.
Children
The site is not directed at children and we do not knowingly collect data from anyone under 16.