Please find below our data protection policy.
CPRE Hertfordshire is the county branch of CPRE, a national charity. We stand up for the Hertfordshire countryside: to protect it from the threats it faces, and to shape its future for the better. We could not do this without support from people like you, and we are committed to protecting both your data and your privacy.
We want you to feel assured that any information you give us is held securely and safely, whether you are working for us, supporting us through membership, campaigning, making donations, volunteering, fundraising or attending events.
This policy outlines what data we collect, how we may use it and how we keep your data safe.
‘We’ or ‘us’ means CPRE Hertfordshire. Our office address is: 31a Church Street, Welwyn, AL6 9LWL. We are registered Charitable Incorporated Organisation number 1162419.
This policy will change from time to time, as we keep up to date with legislation and regulation and to remain aligned with any relevant changes in our programmes and operations. If material changes are made, we will notify you by placing a prominent notice on the website. You can keep up to date by visiting these pages.
This text was last updated in November 2019.
Getting in touch
You have the right to ask for a copy of the information we hold about you and to have any inaccuracies in your information corrected. You also have the right to ask us to delete any personal information we hold about you. In some cases, we may be unable to delete data, such as if it is required for tax or Gift Aid purposes. In these cases, we will ensure that you are removed from future communications and processing. We are committed to ensuring you receive only those communications you choose.
By using our website, joining or donating to us, you agree that, unless you have set your computer’s browser to reject them, we can place the types of cookies set out below on your device and use that data in accordance with this policy.
Why and how we collect your data
When you become a member of CPRE, you join both the national office and your local CPRE branch. The branch will be automatically allocated according to your place of residence – or you can specify a preference at any time during your membership. Your contact details will be shared with your chosen branch so that they can keep you informed of local news and events, and invite you to their Annual General Meeting. As a local CPRE branch we receive the data described above from CPRE national office for those members allocated to or specifying CPRE Hertfordshire as their chosen branch.
When you give it to us directly
The vast majority of personal data we hold is given to us directly by our campaigners, supporters, and volunteers in the course of them interacting with us, our website or fundraising activities.
When we are working with a third party
We may work with fundraising sites such as Everyclick or Give As You Live. These independent third parties will only share your data with us when you have given permission for CPRE to contact you.
What data we collect
Personal information is any data that can be used to identify you. Data includes pictures. It can include also, but is not limited to, any of the data listed below.
Data protection law recognises that there are sensitive categories of personal information, such as health information, racial or ethnic origin, or religious beliefs or other beliefs. We would only collect sensitive personal information where there is a clear need to do so such as health information to enable participation in a challenge event. Before we collect any sensitive personal information, we will make it clear what information we are collecting and the purpose we are collecting it for.
Information we collect from you directly or from third parties with whom we work, may include:
- email address
- telephone number
- contact preferences
- bank account details for setting up a regular direct debit or standing order
- credit card details for processing credit card payments
- employer details for processing a payroll gift
- taxpayer status for claiming Gift Aid
- National Insurance number
- marital status
- health history
- date of birth, age, and/or gender.
We may also collect and process information about your interactions with us, including details about our contacts with you through email, SMS, post, on the phone or in person. This might include the date, time, and method of contact, details about donations you make to us, events or activities that you register for or attend or any request for support.
We may also collect and record other relevant information you share with us about yourself, such as your interests or your affiliations with other charities, CPRE, the national charity, community or campaign groups, your Council or Planning Team.
We are committed to protecting the privacy of children and young people who volunteer with us, fundraise for us, attend events organised by us or engage on our website. Where necessary we will obtain the consent of a parent or guardian in order to collect and use personal data of children.
If you are a child and would like to get involved with CPRE, please obtain your parent’s or guardian’s consent before sending any personal information to any website or CPRE. Where we have activities for those under 18 we will ask your age. Please ensure you speak to your parent or guardian before taking part in these activities.
How we use your data
Campaigning for a beautiful, living countryside is something we cannot do without the help of people who share our passion. Raising funds, running campaigns and involving as wide a range of people as we can in our activities is hugely important to us.
We try to offer diverse ways to support and get involved, and use a range of channels to suit member and supporter preferences, such as our website, postal and email newsletters and information publications. We may also invite supporters to contribute to consultations or participate in research occasionally. We may email or telephone you provided you have given us your permission to do so, with campaign updates, membership renewal requests and occasional appeals. If you have not given us your permission we will not email or telephone you for these marketing purposes.
The law allows personal data to be legally collected and used by an organisation if it is necessary for a legitimate business interest of the organisation – as long as its use is fair and balanced and does not unduly impact the rights of the individual concerned. We will send relevant marketing by post on the basis that it is within our legitimate interests to do so. If you feel you would like to reduce the amount of post you receive from us or prefer not to receive postal marketing at all, simply contact our Data Protection Lead, at firstname.lastname@example.org or call 01438 717587.
If you are a member of CPRE and request not to receive post, please note that we will continue to post legally required membership documents such as AGM notifications but you will not receive information materials such as our branch newsletter.
Data sharing with third parties
We do not share, sell or swap your information with other organisations for their own marketing purposes.
We may disclose your personal information if we are requested or required to do so by a regulator or law enforcement officer or to enforce or apply our rights (including in relation to our website or other applicable terms and conditions) or to protect CPRE, for example in cases of suspected fraud or defamation, or to comply with any other applicable legal obligation.
Keeping your personal information safe
We take appropriate physical and electronic measures to ensure that we keep your information secure, accurate and up to date.
Although we use appropriate security measures once we have received your personal information, the transmission of information over the internet is never completely secure. We do our best to protect personal information, but we cannot guarantee the security of information transmitted to our website, so any transmission is at the user’s own risk.
How long will we keep your data
We remove personal data from our systems in line with our data retention policy. The length of time each category of data will be retained will vary on how long we need to process it, the reason it is collected, and in line with any statutory requirements.
After this point the data will either be deleted or rendered anonymous. In certain specific situations, for example where a supporter has kindly pledged a legacy to CPRE in their Will, we will maintain their details up to the time when we need to carry out the legacy administration and communicate effectively with their family.
Some of the reasons why we may contact you
- Process donations or other payments
- Notify you of opportunities to get involved in your local area e.g. volunteering opportunities
- Ask you to support one of our campaigns e.g. signing a petition or lobbying your MP
- Ask you to donate to one of our appeals
- Reclaim tax on your donations by claiming Gift Aid
- Send you publications such as our newsletter
- Update you on our work through email newsletters
- Invite you to take part in a raffle or other gaming opportunity
- Participate in fundraising and other events
If at any time you wish to change the information you receive from us or how you are contacted for marketing purposes you can let us know, by calling our office on 01438 717587 or e-mailing email@example.com.
What are cookies?
Cookies are text files containing small amounts of information which are downloaded to your device when you visit a website. Cookies are then sent back to the originating website on each subsequent visit. Cookies are useful because they allow a website to recognise a user’s device and help the owner of the website improve the user’s experience of the site.
- the areas of the website you visit
- the amount of time you spend on the site
- whether you are new to the site, or have visited it before
- the country, region, city and/or borough associated with your IP address or device
- how you came to our website – for example, through an email link or a search engine
- the type of device and browser you use
- how you use the website and the quality of your experience – for example we may track your bandwidth when viewing videos
- how you interact with our donation and sign-up forms – for example what you select as your communication preferences
- any error messages that you receive on the site.
Some of this information may be used by third party cookies to target you with relevant advertising (see below). However, you can choose to use our website anonymously without giving us any information. Please see ‘Changing your cookie preferences’ below.
Types of cookies
We use ‘first party cookies’. These are cookies served directly from our website to your computer and are often used to recognise your computer when it revisits our site and, in some cases, to remember your preferences as you browse the site.
Cookies may be either ‘session cookies’ or ‘persistent cookies’. Your computer automatically removes session cookies once you close your browser. Persistent cookies will survive on your computer until an expiry date specified in the cookie itself, is reached. Most of our cookies are persistent.
Categories of cookies we use
We have assessed our cookies based on the ICC Cookie Guide. Most of our cookies fall into categories 1 and 3.
- Strictly necessary cookies: these cookies are essential for the user to move around the website and to use its features.
- Performance cookies: these cookies collect information about how the user makes use of the site, e.g. which pages the user visits most. These cookies do not collect information that identifies the user.
- Functionality cookies: these cookies remember choices made by or attributes of the user and enhance the features and content you experience during your visit to our website, such as appeals visited or your location. This cookie is also used to remember a user’s preferences for a font size, or customisable parts of a web page.
- Targeting or advertising cookies: these cookies collect information about the users’ browsing habits. This may also include your use of social media sites, e.g. Facebook, etc. or how you interact with our website which then shows you relevant content elsewhere on the internet. These may also be used to choose the advertisements that are displayed to you on our website and other websites.
What information does CPRE collect using cookies?
We may collect some, or all, of the information available from cookies when you visit our website, depending on how you use it. We monitor how people use our website, so we can improve it. We collect this information anonymously.
We use a standard type 1 cookie. This contains no personal information, but tells us if that device has visited before. If you log in to our local group area, however, the cookie will be able to identify the user and which user groups they belong to. Note that this data is not stored in the cookie itself. The session data on the website expires and is removed after about 120 minutes of inactivity.
Some pop-ups, such as ‘Get our updates’ use a small type 3 cookie to prevent the pop-up being shown repeatedly once a user has dismissed it, or has already entered their email address. It is not used for tracking. Any pages with tabs or panels may store a small cookie to record the current state of the tab/panel between page requests.
We use session cookies on the pages where you interact with us to give us money, either as a donation or paying membership, or take an e-action, because they allow you to proceed through pages quickly and easily without having to authenticate or reprocess on each page. This means you can link up pages, or use multiple pages, for your actions and donations. However, when you close your browser, the session cookie is lost.
Facebook Pixel is also loaded on every page. The Facebook and Twitter and other social media share buttons don’t themselves generate cookies and are not tracked, but we note the URL of the site you came from to us, as it would be for any link to a third-party site. Pages with embedded Twitter feeds store several cookies for user tracking purposes. Pages with embedded YouTube videos or SoundCloud audios store a number of small cookies for user tracking and for saving user preferences.
The Disqus commenting plugin that is occasionally used on some pages stores several cookies for user tracking purposes.
Changing your cookie preferences
The ‘Help’ menu in the toolbar of most web browsers will tell you how to change your browser’s cookie settings, including how to have the browser notify you when you receive a new cookie, and how to disable cookies altogether. Below are links to the most common browsers to help you make any changes:
- Firefox cookie management
- Chrome cookie management
- Safari cookie management
- Internet Explorer cookie management
Website statistics analytics, testing and personalisation
CPRE has no influence over Google’s activities but do note that Google has signed up to the US Privacy Shield standard for protection of data which has been declared adequate by the EU commission. You can always opt-out of Google Analytics cookies here Google’s opt-out tool.
List of cookies used on CPRE’s website
|PHPSESSID||This cookie is native to PHP applications. The cookie is used to store and identify a users’ unique session ID for the purpose of managing user session on the website. The cookie is a session cookies and is deleted when all the browser windows are closed.||Necessary|
|_ga||This cookie is installed by Google Analytics. The cookie is used to calculate visitor, session, campaign data and keep track of site usage for the site’s analytics report. The cookies store information anonymously and assign a randomly generated number to identify unique visitors.||2 years||Analytics|
|_gid||This cookie is installed by Google Analytics. The cookie is used to store information of how visitors use a website and helps in creating an analytics report of how the wbsite is doing. The data collected including the number visitors, the source where they have come from, and the pages viisted in an anonymous form.||1 day||Analytics|
|Google uses this cookie to distinguish users.||1 minute||Analytics|
|test_cookie||This cookie is set by doubleclick.net. The purpose of the cookie is to determine if the users’ browser supports cookies.||15 minutes||Advertisement|
|_fbp||This cookie is set by Facebook to deliver advertisement when they are on Facebook or a digital platform powered by Facebook advertising after visiting this website.||2 months||Advertisement|
|fr||The cookie is set by Facebook to show relevant advertisements to the users and measure and improve the advertisements. The cookie also tracks the behaviour of the user across the web on sites that have Facebook pixel or Facebook social plugin.||2 months||Advertisement|