Privacy & Cookies

1. Who we are

Stand Up to Racism (also referred to as “SUTR”, “we”, “us” or “our”) is the data controller for personal information handled through this website.

You can contact us at [email protected] or write to Stand Up to Racism, PO Box 79407, London, N17 1HP.

2. Information we collect

Information you give us

Depending on what you choose to do, this can include:

• your name, email address, phone number, postal address, postcode and country;
• your local group, trade union, union position, age range, volunteering interests and skills;
• the contents of an enquiry or other message you send;
• your newsletter and communication choices; and
• donation amount, frequency and transaction confirmation details.

Payment card details entered in an embedded fundraising form are handled by Action Network and its payment provider, Stripe. The full card number and security code are not stored in this WordPress website.

Technical and security information

Our hosting systems and security controls may process an IP address, browser and device information, requested pages, dates and times, and error or security events. The website uses short-lived keyed hashes of an IP address or email address to prevent repeated or duplicate form submissions; these hashes are not used to identify or profile visitors.

Local group information

Administrators publish organisational contact details for active local groups, such as a group email address, phone number and social links. These details are public while the group is listed. A group contact can ask us to correct or remove them.

Information that may be sensitive

Information about trade union membership, political opinions or campaigning activity can receive special protection under data protection law. We only ask for information relevant to participation in our work. Where special category information is involved, we process it with an applicable additional legal condition, such as explicit consent or the legitimate activities of a not-for-profit body, and apply appropriate safeguards.

3. How and why we use information

We use personal information only for the purpose for which it was collected, or for a compatible purpose allowed by law. If we need to use it for a materially different purpose, we will explain that first and seek consent where required.

4. Who receives information

We share only what is needed with organisations that help us run the website and our campaigns:

• Action Network, which receives newsletter, joining, volunteer, affiliation, event and fundraising information;
• Stripe, which processes card payments within Action Network’s secure fundraising flow;
• Cloudflare, which helps Action Network protect its forms against abuse;
• our website hosting, email and technical support suppliers; and
• public authorities, regulators or professional advisers where the law requires it or where needed to establish, exercise or defend legal claims.

If you follow an external link or allow an embedded map or social post, the relevant provider will receive information under its own privacy terms. Ordinary social-media links on our group and footer pages do not contact those platforms until you click them.

We require service providers acting for us to protect personal information and use it only for the agreed service.

5. International transfers

Some suppliers, including Action Network and Stripe, may process information outside the United Kingdom. Where personal information is transferred internationally, we use an adequacy decision or contractual and other safeguards recognised by UK data protection law. Contact us if you would like more information about the safeguards relevant to your information.

6. How long we keep information

We keep personal information only for as long as it is needed for the purpose described above, including legal, accounting and reporting requirements. In particular:

• contact enquiries are delivered by email and the message is not copied into the WordPress database;
• anti-abuse hashes for forms are normally kept for up to 10 minutes, while one-time submission results may be kept for up to 24 hours;
• newsletter and supporter records are held in Action Network until they are no longer needed, you unsubscribe, or an applicable erasure request is completed; a minimal suppression record may be kept so we honour an unsubscribe;
• donation and transaction records are kept for the periods required for financial, tax, fraud prevention and legal purposes;
• local group details stay public while the group is active and are updated or removed by an administrator; and
• technical logs are kept for the shortest period needed for security, reliability and investigation.

7. How we protect information

We use access controls, encrypted connections, limited administrative access, security monitoring and provider safeguards designed to prevent unauthorised access, alteration, disclosure or loss. No internet service can be guaranteed completely secure, but we review the controls appropriate to the nature of the information and the risk.

8. Your rights

Depending on the circumstances, UK data protection law gives you the right to:

• ask for a copy of personal information we hold about you;
• correct information that is inaccurate or incomplete;
• ask us to delete or restrict the use of information;
• object to processing based on legitimate interests or to direct marketing;
• receive certain information in a portable format; and
• withdraw consent at any time, without affecting processing carried out before withdrawal.

To exercise a right, email [email protected]. We may need enough information to confirm your identity and locate the relevant record. You also have the right to complain to the Information Commissioner’s Office.

9. Cookies and external services

A cookie is a small text file stored by a website in your browser. Similar technologies include browser storage. We use one essential preference cookie. Optional third-party forms and embeds stay off until you select “Allow full experience”.

Change your choice

Use the “Cookie settings” link in the footer at any time. Choosing “Continue with limited external content” stops optional services loading on future pages. A third-party cookie already stored by your browser may remain until its expiry; you can remove it sooner in your browser settings. Blocking all cookies may stop secure donation forms or signed-in administration from working.

For more detail about provider practices, see the privacy information published by Action Network, Stripe and Cloudflare.

10. Contact us and changes to this notice

We may update this notice when the website, our suppliers or legal requirements change. We will publish the revised notice here and change the date at the top.

Questions about this notice or how we use personal information are welcome.

Post: Stand Up to Racism, PO Box 79407, London, N17 1HP.