CIVICSHIFT
Civic Bridge →
LEGAL

Privacy Policy

Last updated: March 2026 — Placeholder pending legal review

PLACEHOLDER — PENDING LEGAL REVIEW

This policy is a placeholder pending legal review. Civic Shift will update this before launch. ICO registration number to be inserted.

1. Who We Are

Civic Shift is a UK non-profit organisation. Our contact email is info@civicshift.org.uk. This policy explains how we collect, use, and protect your personal data in accordance with the UK GDPR and the Data Protection Act 2018.

2. Data We Collect

We collect data you provide when registering (name, email, school/organisation, postcode), when using the Civic Bridge platform (event posts, messages, seat requests), and through analytics cookies (if accepted). We do not collect sensitive personal data.

3. How We Use Your Data

To provide and improve the Civic Bridge platform; to send transactional emails; to send updates about Civic Shift (you can opt out at any time); and for aggregate analytics to improve our service.

4. Cookies

We use analytics cookies to understand site usage. You can accept or decline via the banner on your first visit. Your choice is stored in localStorage.

5. Your Rights

You have the right to access, correct, or delete your personal data. To exercise any of these rights, email info@civicshift.org.uk.

6. Data Processors

We use the following third-party data processors to operate our services:

  • Supabase: Database, authentication, and file storage (EU-hosted)
  • Resend: Transactional email delivery
  • Stripe: Secure donation payment processing
  • Vercel: Website hosting and deployment infrastructure
  • Google Analytics 4: Aggregated analytics (only with your consent)
  • Mapbox: Interactive mapping of speaker and school locations

7. Your UK GDPR Rights

Under UK GDPR and the Data Protection Act 2018, you have the following rights:

  • Right of access — to request a copy of your personal data.
  • Right to rectification — to correct inaccurate or incomplete data.
  • Right to erasure — to request deletion of your data where no legitimate grounds exist for its retention.
  • Right to restriction — to request we limit how we use your data.
  • Right to data portability — to receive your data in a structured, machine-readable format.
  • Right to object — to processing based on legitimate interests or for direct marketing.

To exercise any of these rights, email info@civicshift.org.uk. We will respond within one calendar month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO). ICO registration number: [to be inserted before launch].

8. Contact

For any queries relating to this privacy policy, contact us at info@civicshift.org.uk.