Your privacy matters to Embargoed!. This policy explains, in plain English, what personal information we collect through this website, why, how long we keep it and the choices you have.
Who is responsibleEmbargoed Turkish Cypriots LimitedCompany no. 17233513 · runs the Embargoed! campaign
Questions about your datainfo@embargoed.orgWe reply within one month
AnalyticsOnly with your consent
We neverSell or rent your dataor see your card details
Who we are and how to contact us
- In this policy, “we”, “us” and “Embargoed!” mean Embargoed Turkish Cypriots Limited, a private company limited by guarantee registered in England and Wales (company no. 17233513), whose registered office is at 152 Hawthorn Road, Ashington, NE63 9BG. “The Site” means the website at www.embargoed.org.
- Embargoed! is a UK human rights group, run by volunteers, that campaigns to end the international isolation of Turkish Cypriots and their homeland of North Cyprus.
- We are the “data controller” for the personal information described here, under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).
- For any question about this policy or your data, email info@embargoed.org.
The personal data we collect
We only collect what we need for each thing you choose to do on the Site:
| When you… | We collect |
|---|---|
| Sign up to our newsletter | Your name and email address, and when you confirmed |
| Become a member or donate | Your name, email address and PayPal’s confirmation of the payment (amount, date, transaction reference) |
| Send us a message | Your name, email address and your message |
| Accept analytics cookies | How the Site is used: pages viewed, device and browser type, approximate location |
We never receive or store your card or bank details: payments are made on PayPal’s own secure pages.
How we use your data and our lawful basis
The law requires us to have a valid reason (a “lawful basis”) for each use of your data:
| Purpose | Lawful basis |
|---|---|
| Sending the newsletter to people who signed up on the Site | Your consent |
| Sending the newsletter and campaign updates to members | Our membership agreement with you and our legitimate interest in keeping members informed |
| Running your membership and recording donations | Our membership agreement with you, and our legal obligation to keep financial records |
| Replying to your messages | Our legitimate interest in answering you |
| Understanding how the Site is used (Google Analytics) | Your consent, given in the cookie banner |
| Keeping the Site secure | Our legitimate interest in protecting the Site and its users |
We will not use your data for anything else without telling you first, and we never sell or rent it to anyone.
Newsletter and email updates
- What we collect: your name and email address.
- Double opt-in: when you sign up on the Site, we first send you an email asking you to confirm. You are only added to our list once you click the link in that email.
- Link tracking: links in our newsletters are tracked so that we can count how many times each link is clicked. We do not track whether our emails are opened.
- How it is sent: our newsletters are sent through the MailPoet Sending Service, operated by Automattic Inc., which processes your name and email address on our behalf. See Automattic’s privacy policy.
- Unsubscribing: every newsletter has an unsubscribe link. You can also email info@embargoed.org at any time.
- How long: we keep your details until you unsubscribe. After that we keep only your email address on a “do not contact” list, so that we never add you again by mistake.
Membership and donations
- When you join or donate, you are taken to PayPal’s secure website to pay. PayPal collects your payment details and handles the transaction under its own privacy policy.
- PayPal then sends us your name, email address and confirmation of the payment. We never see or store your card details.
- Membership is £10 a year and renews automatically through PayPal until you cancel it in your PayPal account (see our Terms and Conditions).
- We keep membership and donation records for 6 years, as required for accounting purposes.
Contact forms
- When you use our contact or sign-up forms, we receive your name, email address and message by email so that we can reply to you. The forms do not store your message on the Site.
- We use Akismet, a spam filtering service, to block automated spam sent through the forms.
- We keep your messages for as long as we need to deal with your enquiry and for up to 2 years afterwards, then delete them.
Analytics and cookies
- We use Google Analytics 4 to understand how the Site is used, only if you accept analytics cookies in our cookie banner. Until you do, Google Analytics does not load at all.
- It collects the pages you view, your device and browser type and your approximate location (city or region), worked out from your IP address. Google Analytics 4 does not store your IP address.
- Google acts as our data processor. Your data may be transferred outside the UK, protected by standard contractual clauses. See how Google uses data from sites that use its services.
- Analytics data is kept for 14 months and then deleted automatically.
- You can withdraw your consent at any time with the Manage cookie preferences link at the bottom of every page. Full details of the cookies we use are in our Cookie Policy.
Who we share your data with
We only share your data with the service providers we need to run the Site and our campaign. They may only use it to provide their service to us:
- MailPoet Sending Service (Automattic Inc.): sending our newsletters
- PayPal: processing membership payments and donations
- Google: website analytics, only if you consent
- Akismet (Automattic Inc.): filtering spam from our forms
- Our website and email hosting providers: storing the Site and our email
Some of these providers are based in, or use servers in, the United States. When your data leaves the UK, it is protected by the safeguards UK law requires, such as standard contractual clauses with the UK Addendum or the UK–US data bridge.
We will only share your data with anyone else if the law requires it.
How long we keep your data
| Data | How long |
|---|---|
| Newsletter subscription | Until you unsubscribe (then only your email address on our “do not contact” list) |
| Membership and donation records | 6 years, for accounting |
| Messages sent through our forms | Up to 2 years after we have dealt with your enquiry |
| Google Analytics data | 14 months |
| Your cookie choice | 180 days, then we ask again |
Your rights
Under UK data protection law you have the right to:
AccessAsk for a copy of the personal data we hold about you.
RectificationAsk us to correct data that is wrong or incomplete.
ErasureAsk us to delete your data, unless we must keep it by law.
ObjectionObject to us using your data, including for our newsletter.
PortabilityReceive your data in a common format, or have it sent to someone else.
Withdraw consentChange your mind at any time, for the newsletter or analytics.
To use any of these rights, email info@embargoed.org. It is free and we will reply within one month.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office (ICO), the UK data protection regulator: ico.org.uk/make-a-complaint. We would appreciate the chance to put things right first, so please contact us.
Links to other websites
- We link to other websites that we believe provide useful information. This does not mean we endorse those websites or organisations, and we are not responsible for their content.
- Please check their privacy policies before giving them any personal information. We are not responsible for data you give to other websites.
Security
- The whole Site uses a secure (HTTPS) connection, access to our systems is limited to the volunteers who need it, and payments are made on PayPal’s secure pages.
- No method of sending information over the internet is completely secure. We take reasonable steps to protect your data, but we cannot guarantee the security of information while it is being sent to us.
- Please remember that ordinary email is not encrypted: do not send us sensitive information by email.
Changes to this policy
We update this policy from time to time, for example when the Site changes. The latest version is always on this page, with the date it was last updated at the top.
Questions about your data?
You can also contact the UK regulator, the Information Commissioner’s Office: ico.org.uk/make-a-complaint