Privacy Policy

1. Who We Are

The Stop Gibraltar Corner Build campaign website (stopgibraltarcornerbuild.co.uk) is operated by:

USE SIGNAL MARKETING LTD is the data controller for personal data processed through this website. This means we determine the purposes and means of processing your personal data.

For questions about this policy or to exercise your rights, contact us at team@signal.marketing.

2. What Personal Data We Collect

We collect personal data through the following means:

A. Interest Registration

When you register your interest via the campaign form or Letter Builder, we collect:

• Full name
• Email address
• Phone number (optional)
• Home address (optional)
• Any message you choose to include

B. Community Forum Account

When you create a forum account, we collect:

• Username (chosen by you)
• Full name
• Email address
• Password (stored as a one-way cryptographic hash — we cannot read it)
• Any posts, replies, or content you submit to the forum
• Account creation date and timestamp

C. Email Subscriptions

When you register interest or create a forum account, you are subscribed to campaign update emails. We store your name, email address, and a unique unsubscribe token. You can unsubscribe at any time via the link in any email we send.

D. Contact Form

When you use our contact form, we collect your name, email address, subject, and message. This is transmitted to us via EmailJS and is not stored in our database — it is received directly to our inbox.

E. Technical and Usage Data

We automatically collect and process:

• IP addresses — for security purposes, rate limiting (to prevent abuse), and audit logging. IP addresses are stored in our activity log table.
• Browser/device information — collected with cookie consent records (user agent string)
• Activity logs — administrative actions and significant events are logged for security and moderation purposes

F. Cookie Consent Records

When you respond to our cookie consent banner, we record your decision (accepted or declined), your IP address, and your browser user agent. This record is required for us to demonstrate compliance with cookie consent regulations.

3. How We Use Your Personal Data

4. Third-Party Services We Use

We share data with the following trusted third-party services in order to operate this website:

EmailJS (email delivery)

We use EmailJS to send transactional emails (registration confirmations, password resets, update notifications, contact form delivery). Your name and email address are transmitted to EmailJS to deliver these emails. EmailJS acts as a data processor on our behalf. See EmailJS Privacy Policy.

Google Analytics (conditional — consent only)

If you accept analytics cookies, we use Google Analytics to understand how visitors use our website. IP addresses are anonymised before processing. Google Analytics will not be loaded if you decline cookies. See Google Privacy Policy.

Google Fonts

We use Google Fonts to display typefaces. When your browser loads a page, it contacts Google's servers to download fonts, which may result in your IP address being logged by Google. See Google Privacy Policy.

Tailwind CSS CDN & AOS CDN (unpkg)

We load stylesheet and animation libraries from CDN providers (cdn.tailwindcss.com and unpkg.com). These services may log your IP address as a result of serving these files.

Web Hosting

Our website is hosted on a cPanel-based web server. The hosting provider processes data (including IP addresses and server logs) as a data processor on our behalf.

We do not sell your personal data to any third party. We do not use your data for advertising purposes.

5. How Long We Keep Your Data

6. Your Rights Under UK GDPR

As a data subject under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have the following rights:

• Right of access — You can request a copy of the personal data we hold about you.
• Right to rectification — You can ask us to correct inaccurate data.
• Right to erasure — You can request that we delete your personal data where there is no compelling reason for us to continue processing it.
• Right to restrict processing — You can ask us to limit how we use your data in certain circumstances.
• Right to data portability — You can request your data in a structured, machine-readable format.
• Right to object — You can object to processing based on legitimate interests at any time.
• Right to withdraw consent — Where we rely on consent (e.g. email subscriptions, analytics cookies), you can withdraw it at any time without affecting the lawfulness of prior processing. Use the unsubscribe link in any email to withdraw email consent, or change your cookie preference at any time.

To exercise any of these rights, email us at team@signal.marketing. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have not handled your data lawfully.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• All data transmitted over HTTPS (TLS encryption)
• Passwords stored as one-way bcrypt hashes — never in plain text
• Session cookies secured with HttpOnly, Secure, and SameSite=Lax flags
• All database queries use parameterised statements to prevent SQL injection
• Rate limiting on login, password reset, and other sensitive endpoints
• CSRF token protection on all state-changing forms
• Sensitive configuration stored in environment variables, not source code

Despite these measures, no data transmission over the internet can be guaranteed to be 100% secure. In the unlikely event of a data breach that affects your rights and freedoms, we will notify you and the ICO as required by law.

8. International Data Transfers

Some of the third-party services we use (including EmailJS and Google) may process data outside the UK and European Economic Area. Where this occurs, these providers use adequacy decisions, Standard Contractual Clauses, or other lawful transfer mechanisms approved under UK GDPR to ensure your data is protected to an equivalent standard.

9. Children's Privacy

This website is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. We encourage you to review this policy periodically. Continued use of the website after changes are published constitutes acceptance of the updated policy.

11. Contact Us

For any questions, requests, or complaints relating to this Privacy Policy or your personal data, please contact:

For independent advice about data protection, privacy, and your rights, contact the ICO at ico.org.uk or call 0303 123 1113.