Privacy Policy

Last Updated: 1st December 2025

1. Introduction

The Withdraw FII Label campaign ("we," "us," or "our") is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, and protect the personal information you provide when you use our website at www.withdrawfii.org (the "Website").

We are the Data Controller responsible for your personal data.

2. The Data We Collect About You

We only collect personal data from you when you actively provide it to us via a contact form on our Website.

​

Category of DataSpecific Data CollectedPurpose of Collection

Identity DataName (First and Last)To personalise communications and identify signatories/supporters.

Contact DataEmail AddressTo send campaign updates, action alerts, and respond to your enquiries.

User Content DataComments, messages, or campaign notes submitted via forms.To understand your views, tailor our campaign strategy, and potentially publish (anonymously or with your permission, if relevant).

We do not collect any Special Categories of Personal Data (such as race, religion, health, or political opinions, unless explicitly provided by you in a comment and relevant to the campaign).

3. How We Use Your Personal Data (Legal Basis)

Under the GDPR, we must have a lawful basis to process your personal data. We rely on the following bases for the specific activities below:

ActivityLegal Basis for Processing

Sending campaign updates and action alerts.Consent: You have actively ticked a box agreeing to receive these communications.

Responding to your direct enquiries or comments.Legitimate Interests: It is necessary to respond to your specific request and manage our public engagement effectively.

Collecting data for specific political actions (e.g., petition signing, contacting an MP).Legitimate Interests: The processing is necessary for advancing the stated aims of our campaign, which are of public interest. or Public Task (if relevant to electoral law/public function).

Keeping basic records of supporters and managing unsubscribe requests.Legal Obligation: To comply with data protection law and honour your right to object to marketing.

4. Sharing Your Personal Data

We do not sell your personal data to any third parties. We may share your data only with the following parties and for specific, necessary reasons:

• Service Providers: We use third-party service providers who act as Data Processors on our behalf, such as:

  • Email Communication Platforms (e.g., Mailchimp, HubSpot) to send our campaign emails.

  • Website Hosting Providers to keep the Website running.

• Legal & Regulatory Authorities: If we are under a duty to disclose or share your personal data to comply with any legal obligation.

• Specific Campaign Recipients: If you participate in a specific campaign action (e.g., signing a petition or using a tool to contact your MP), we will clearly explain on the form precisely what data (e.g., just your name and postcode) will be shared with the relevant government body, elected official, or target organisation.

5. International Transfers

The service providers we use (e.g., for email management) may be based outside the UK and European Economic Area (EEA). Whenever we transfer your personal data out of the UK/EEA, we ensure a similar degree of protection is afforded to it by implementing at least one of the following safeguards:

• Transferring your data to countries deemed to provide an adequate level of protection by the UK government.

• Using specific contracts approved for use in the UK which give personal data the same protection it has in the UK (known as Standard Contractual Clauses).

6. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. We limit access to your personal data to employees, agents, and other third parties who have a business need to know.

7. Data Retention (How long we keep your data)

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

• Campaign Supporters: We will keep your Identity and Contact Data for the duration of the campaign and a reasonable period thereafter (e.g., up to 3 years) to inform you of the campaign's outcome, unless you unsubscribe, in which case your contact data will be suppressed immediately.

• Enquiry Data: We retain data relating to general enquiries for up to 12 months after the enquiry is resolved.

8. Your Legal Rights (The Data Subject Rights)

Under the GDPR, you have the right to:

1. Request access to your personal data (commonly known as a "data subject access request").

2. Request correction of the personal data that we hold about you.

3. Request erasure of your personal data ("right to be forgotten").

4. Object to processing of your personal data where we are relying on a legitimate interest.

5. Request restriction of processing of your personal data.

6. Request the transfer of your personal data to you or a third party (data portability).

7. Withdraw consent at any time where we are relying on consent to process your personal data.

If you wish to exercise any of these rights, please contact us using the details below.

9. How to Complain

If you have any concerns about our use of your personal information, you can make a complaint to us directly at [Your Contact Email Address].

You also have the right to make a complaint at any time to the UK supervisory authority for data protection issues, the Information Commissioner's Office (ICO). The ICO's contact details can be found on their website: [Insert ICO Website Link].

10. Contact Details

If you have any questions regarding this Privacy Policy, please contact:

• Full Name of Legal Entity: [Your Campaign Group Name]

• Email Address: [Your Designated Privacy Contact Email Address]

• Postal Address: [Your Campaign Group Postal Address (optional, but recommended)]