Enough is Enough!

In order to help achieve the aims of the campaign and build a network of like-minded people across the country, we collect personal information to help support Enough is Enough, the demands of the campaign and to help build communities of like-minded people with the aim of tackling the cost-of-living crisis. The following policy sets out what we do with your data and how we keep it secure. This applies to Enough is Enough Ltd.

The type of personal information we collect

  • We currently collect and process, or may collect and process, the following information:
  • Personal identifiers, contacts and characteristics (for example, name, email and contact details)
  • Postcode and constituency
  • Your willingness to volunteer for events or activities
  • Financial information or bank details (if you consent to a donation).

If you make a donation, your financial details will only ever be stored by third parties (such as PayPal and Stripe). We will only use services regulated by the Financial Conduct Authority (FCA) to process or facilitate your donations. We may store information about your donation in our database, such as how much you have donated. If you donate more than £500, we will also maintain records of this in order to comply with our duties under the Political Parties Elections and Referendums Act 2000. We do not accept cash or cheque payments.

Sometimes we ask for additional information about you and your views and interests and activities you take part in, if this helps in campaigns or in keeping campaigns relevant to you. Additional information we may ask you to provide may include your willingness to volunteer, your date of birth, gender, ethnicity, employer and occupation, whether or not you are a member of a political party, trade union or other organisation, and whether or not you are a student.

We will also collect information such as your Internet Protocol (IP) address for monitoring and improving the effectiveness of our website services as well as its security.

How we get the personal information and why we have it

Most of the personal information we process is provided to us directly by you for one of the following reasons:

  • You have signed our demands list or a petition listed on our website
  • You have affirmed you would like to hear more about the Enough is Enough campaign, a local Enough is Enough group and/or events and activities taking place near you
  • We also receive personal information indirectly, from the following sources in the following scenarios:
  • From a certified local Enough is Enough group, who may collect your details from an event or rally you have attended.
  • If you have signed up to hear more about Enough is Enough through one of our affiliates or partners, for example, the Communication Workers Union or ACORN.

We use the information that you have given us in order to support the aims of the campaign, help keep people connected with activities, events or resources they may find useful.

We may share this information with our local groups. Where appropriate or legally required, we may also share this information with the following parties:

  • Regulatory bodies
  • Financial Organisations (such as PayPal or Stripe)
  • Service Providers (such as MailChimp)
  • Suppliers, Advisors and legal support
  • Trade Unions
  • Organisations that are supportive of the aims of Enough is Enough
  • Facebook for the purpose of targeted advertisements

We may sometimes supplement your data with other publicly available information where we have your consent to do so, where it is necessary to do so in order to comply with a contract we have with you, one of our legal obligations or legitimate interests, or where you have given other organisations permission to share your data with us.

We also make use of cookies. Cookies are small files that are downloaded onto your computer (or your mobile phone or other electronic device) from websites that you visit. Cookies contain information that allows websites to recognise that you have used the site before.

You can control which types of cookies you allow. You can delete cookies and clear your browser’s cache (history).
The following links describe how to control cookies for some popular web browsers:

Mozilla Firefox
Google Chrome
Microsoft Edge
Opera
Apple Safari
Microsoft Internet Explorer

How we process your data

  • We will process your data and contact you for the following reasons:
  • To inform you about our campaign and information regarding the affiliates of our campaign
  • To let you know how you can help support and/or fund our demands and our campaign in general
  • To let you know where there are events taking place near you, how you can campaign with us or if there are other events or activities you may be interested in- either run by Enough is Enough or one of our affiliates
  • To let you know how you can volunteer with us or if we have job vacancies

Other purposes for which we may process your data include:

  • Complying with our legal obligations
  • Processing your donations
  • Answering your enquiries
  • Responding to complaints

The bases on which we process your data

Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information are:

  • Consent
  • Contract
  • Legal Obligation
  • Legitimate Interest

We process most of the data that we hold on the basis of consent. At times, we process your name and contact details, payment details and additional information about you and your views, interests and activities you take part in on the basis of consent. Where we process your data on the basis of your consent, that processing of your data will be restricted to those types of processing for which we have received your consent and we shall indicate which categories of data we are going to process on the basis of your consent. You are able to remove your consent at any time. You can do this by contacting mail@wesayenough.co.uk with the subject “DATA CONSENT WITHDRAWAL”

Enough is Enough may have a contract with you. If it is necessary for us to process your data in order to comply with any other contracts we may have with you, then when we enter into the contract with you we will inform you of this, as well as informing you of the types of processing that it will be necessary for us to carry out, the categories of data that we will process and the purposes of our doing so.

We have various legal obligations, such as obligations to report donations under Political Parties Elections and Referendums Act 2000. If you make a donation, then we will process your name, details of whether or not you are on the electoral roll, and details of when and how much you donated on the basis of our legal obligations for the purposes of maintaining records of and reporting on regulated donations to us.

Enough is Enough is a campaigning organisation that has a legitimate interest in producing and improving its political and nonpolitical communications in order to build a network of support and action around the core demands of the campaign.

These communications are defined as “marketing” in the data protection legislation. We process your name, contact details and additional information about you, your views and interests, and activities you take part in on the basis of this legitimate interest, in order to improve these communications and help them reach you and people like you or reach people that they have not reached before.

When we share your data with other organisations or individuals who share our values and aims, we will rely on legitimate interest in circumstances where we haven’t sought your consent.

How we store your personal information

Your information is securely stored and we maintain strict practices to ensure it is kept securely. Your data is stored in our MailChimp database. We protect your information using firewalls, password protection and, where appropriate, encryption.
When required, we will dispose of your information by securely and permanently removing it from our database. We will keep your data where it is necessary to comply with the law or instructions from other regulatory bodies.

We train our staff and volunteers to understand data protection and to keep your data secure. We ensure that all individuals, including local group committee members, who have access to your data sign data protection agreements which detail their duties to keep your data secure and not to disclose it to anyone else without our authorisation.

Your data protection rights

Under data protection law, you have rights including:
Your right of access – You have the right to ask us for copies of your personal information.
Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing – You have the right to object to the processing of your personal information in certain circumstances.
Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact us at mail@wesaynenough.co.uk if you wish to make a request.

How to complain about the use of your data

If you have any concerns about our use of your personal information, you can make a complaint to us at mail@wesayenough.co.uk, with “DATA COMPLAINT” in the subject line.
You can also complain to the ICO if you are unhappy with how we have used your data.

The ICO’s address:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk/

Our contact details

Enough is Enough Ltd
mail@wesayenough.co.uk