Introduction
The Romanian GCSE Campaign ("we", "us", "our", or "Campaign") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our petition and lobbying tools.
Data Controller: Romanian GCSE Campaign, operating under UK GDPR. Contact: adriangeorgerata@gmail.com
1. Information We Collect
When you sign the petition:
- Full name
- Email address
- Postcode
- Connection to the Romanian community (yes/no)
- UK residency status (yes/no)
- Parent/guardian status (yes/no)
- If applicable: number and ages of children
When you write to your MP:
- Full name
- Email address
- Postcode
Automatically collected:
- Browser type and IP address (for security and analytics)
- Pages visited and time spent (to improve our service)
- Referral source (how you found us)
2. How We Use Your Information
We collect and use your information for these specific purposes:
Petition data:
- Present to exam boards and government education bodies
- Demonstrate community support and demand
- Contact you with campaign updates (only with your consent)
MP correspondence data:
- Facilitate communication with your elected representative
- Provide contact information for your MP
Technical data:
- Understand how the website is used
- Identify and fix technical issues
- Prevent fraud or misuse
3. Legal Basis for Processing
| Data | Legal Basis |
|---|---|
| Petition signature | Your explicit consent via checkbox |
| MP contact details | Contract (to send your letter) |
| Campaign updates | Your explicit consent via checkbox |
| Browser/technical data | Legitimate interest (operating the service safely) |
4. Data Retention
We delete your data at the end of the campaign unless you opt in to receive ongoing campaign updates. Your data is never retained for longer than necessary:
- Petition signatories: Deleted 6 months after the campaign concludes, or on request
- MP correspondence: Deleted after your letter is sent (typically within 24 hours)
- Email subscribers: Kept until you unsubscribe or 12 months of inactivity, whichever is sooner
- Technical logs: Deleted after 30 days
5. Sharing Your Data
We never sell your data. We share your information only in these limited circumstances:
Petition data:
- Shared with exam boards (Ofqual, AQA, Edexcel, OCR) to demonstrate demand
- Shared with government education bodies (Department for Education)
- Shared with MP Gareth Thomas (petition host) for official presentation
Technical partners:
- EmailJS: Processes your email to send letters to MPs (cookies may be set)
- UK Parliament API: Provides MP contact information from public data
- JotForm: Handles enrolment form submissions (separate privacy policy applies)
- Google Fonts: Loads typography (may collect limited technical data)
All partners are bound by data protection agreements and process data only as instructed.
6. Your Rights Under UK GDPR
You have the right to:
- Access: Request a copy of the data we hold about you
- Correct: Update or correct inaccurate information
- Delete: Ask us to delete your data (we will comply within 30 days)
- Restrict processing: Limit how we use your data
- Portability: Request your data in a portable format
- Object: Object to how your data is processed
- Withdraw consent: Unsubscribe from campaign updates at any time
To exercise any of these rights, email adriangeorgerata@gmail.com with your request.
7. Cookies and Tracking
We use minimal cookies and only those that are strictly necessary:
| Cookie | Purpose | Expiry |
|---|---|---|
| EmailJS session | Process your letter to your MP | Session (deleted on browser close) |
| Google Fonts (3rd party) | Load typography for the website | Varies |
We do not use: Google Analytics, tracking pixels, ad cookies, or any form of profiling. Your privacy is not monetised.
8. Security
We take security seriously:
- All data transmission uses HTTPS encryption
- No passwords are stored or transmitted
- Data is stored on secure servers
- Only essential team members have access to personal data
While no system is 100% secure, we implement industry-standard protections.
9. Children's Privacy
This campaign is not directed at children under 13. We do not knowingly collect data from children under 13. If we become aware that we have collected such data, we will delete it immediately.
Parents or guardians can provide information on behalf of their children. In this case, you certify that you have the authority to do so.
10. International Data Transfers
Your data is processed and stored within the UK. We do not transfer data internationally, except:
- To JotForm (if you use the enrolment form) — transfers to US with appropriate safeguards
- To Google Fonts (if you choose to view the website) — transfers to US/Ireland
These transfers are made under appropriate data protection mechanisms.
11. Third-Party Links
Our website contains links to external sites (e.g., Parliament.uk, BBC News, JotForm). This Privacy Policy does not apply to those sites. Please review their privacy policies before providing your data.
12. Changes to This Policy
We may update this Privacy Policy as our practices evolve or to comply with legal changes. We will notify you of significant changes by email (if you opted in) or by posting the updated policy on this page with a new "Last updated" date.
13. Contact Us
If you have questions about this Privacy Policy or how we handle your data, contact us:
Email: adriangeorgerata@gmail.com
Postal: Romanian GCSE Campaign, UK
If you believe we've violated your rights under UK GDPR, you can also lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.