Privacy Policy

1. Who we are

UK CMS Fight for Change is a campaign organisation based in the United Kingdom, campaigning for reform of the Child Maintenance Service. We operate the website at ukcmsfightforchange.co.uk.

For the purposes of UK GDPR, we are the data controller for personal data collected through this website.

Contact: info@ukcmsfightforchange.co.uk

2. What personal data we collect and why

When you register as a supporter or sign the petition:

• Full name — to personalise communications and for parliamentary petition records
• Email address — to send you campaign updates and to verify access to the supporter document library
• Postcode — to identify your local MP for parliamentary campaigning purposes. We do not store your full address.
• Supporter type — to understand who is joining the campaign (e.g. paying parent, family member, supporter of change)

Legal basis: Legitimate interests (pursuing a campaign for parliamentary reform) and, where applicable, consent given at the point of registration.

When you submit a community story:

• First name or initial — displayed anonymously if approved for publication
• County / Region — displayed alongside your story if approved
• Story content — reviewed before publication. We do not publish personal details of third parties.

Legal basis: Consent — you actively agree to the submission disclaimer before submitting.

When you submit an evidence link:

• IP address — recorded for rate limiting and spam prevention purposes only. Not used for any other purpose.

Legal basis: Legitimate interests (preventing spam and abuse).

When you access the document library:

• Email address — verified against our supporter list to confirm registration. We do not store a separate record of library access.

Technical data collected automatically:

• We do not use Google Analytics or any third-party tracking scripts
• We do not use advertising cookies
• We load Google Fonts from Google's CDN — Google may log your IP address as part of this request. See Google's privacy policy at policies.google.com
• We load flag images from flagcdn.com — see flagcdn.com for their data practices

3. How we use your data

• To send you campaign updates and news about parliamentary progress — you can unsubscribe from any email
• To compile petition data for submission to MPs and Parliament
• To verify access to the supporter document library
• To identify your local MP so we can report constituency-level support to parliamentary representatives
• To respond to any queries you send us by email

We do not use your data for:

• Commercial marketing or advertising
• Sale or transfer to third parties for any purpose
• Profiling or automated decision-making

4. Who we share your data with

We do not sell, rent, or share your personal data with third parties for commercial purposes.

We may share aggregated, anonymised data (for example, "193 supporters from 87 different constituencies") with MPs, parliamentary researchers, or the media as part of our campaign work. This data does not identify any individual.

When we submit the petition to an MP, we share the petition list (names and postcodes) in its role as a formal parliamentary document. By signing the petition, you consent to this use.

Our website is hosted by IONOS. Your data is stored on their servers within the UK/EU. See ionos.co.uk/terms-gtc/privacy-policy for their data practices.

5. How long we keep your data

• Supporter and petition records — retained for the duration of the campaign and for up to 2 years after the campaign ends, or until you ask us to delete your record
• Community stories — retained until you ask us to remove them, or until we remove them as part of content moderation
• IP addresses (rate limiting) — automatically purged after 24 hours
• Email correspondence — retained for up to 2 years

6. Your rights under UK GDPR

Under UK GDPR, you have the following rights:

• Right of access — you can ask us what personal data we hold about you
• Right to rectification — you can ask us to correct inaccurate data
• Right to erasure — you can ask us to delete your data at any time. We will action this within 30 days.
• Right to restrict processing — you can ask us to stop using your data while keeping the record
• Right to object — you can object to our use of your data for legitimate interests purposes
• Right to data portability — you can ask for a copy of your data in a portable format

To exercise any of these rights, email us at info@ukcmsfightforchange.co.uk with the subject line "Data Request". We will respond within 30 days.

If you are not satisfied with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk  |  0303 123 1113.

7. Security

We take reasonable technical measures to protect your personal data:

• The site is served over HTTPS (encrypted connection)
• Data files are stored in a protected directory not accessible via the web
• The admin panel is password protected
• Form submissions include spam and rate-limit protection

No system is completely secure. If you have concerns about the security of your data, please contact us.

8. Cookies

This website does not use tracking cookies or advertising cookies. We do not use Google Analytics.

A session cookie is set when you access the admin panel — this is a technical requirement for login and expires when you close your browser.

Google Fonts may set a cookie via their CDN. To avoid this, you can disable Google Fonts in your browser settings.

9. Children's data

This website is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has submitted data to us, please contact us and we will delete it immediately.

10. Changes to this policy

We may update this policy from time to time. The date at the top of this page will always reflect when it was last updated. Significant changes will be communicated to registered supporters by email.

11. Contact us