Your data rights
Last updated: 15 June 2026
GPS Network operates The Jewish Activist and is the data controller for your personal data. Under the UK GDPR and the Data Protection Act 2018 you have eight rights over how we handle it. This page explains each one and how to use it. The quickest way to reach us about any of this is office@gpsnet.org.
1. Right to be informed
What we collect, why, and on what legal basis is set out in full in our Privacy Policy. In short: when you send a campaign email your name, address and postcode go straight into that email and are not stored by us, though we do store the email address you send it from (taken from the BCC copy) to credit your action; if you sign up for alerts we store your email, name and (optionally) your area; and if you apply to join we store your application, including — only with your explicit consent — whether you are Jewish or a non-Jewish ally.
2. Right of access
You can ask for a copy of the personal data we hold about you. If you've signed up, the fastest route is your account at /my, where you can view and export your data. For anything else, email office@gpsnet.org. We respond within one month, free of charge.
3. Right to rectification
You can update your details in your account at /my, or email us to correct anything else.
4. Right to erasure ("right to be forgotten")
You can ask us to delete your data in your account at /my, or by emailing us. This removes your supporter record or membership application. Send confirmations record that an email was sent, the constituency area, and the email address you sent it from (read from the BCC copy) — they hold no name, address or message. Erasing your record removes that attributed email address; ask us and we will delete it.
5. Right to restrict processing
You can ask us to pause our use of your data — for example while a complaint is open or while we check that something is accurate. Email office@gpsnet.org with what you'd like restricted and why.
6. Right to data portability
The export from your account at /my is provided in a machine-readable format so you can reuse it elsewhere.
7. Right to object
Where we rely on legitimate interests, you can object and we'll review whether our interest still outweighs your objection. You can stop our alert emails at any time using the one-click unsubscribe link in every message.
8. Right to withdraw consent
Where we rely on your consent — including your explicit consent to hold the fact that you are Jewish or a non-Jewish ally as part of a membership application — you can withdraw it at any time, and we will stop the processing it allowed. Withdrawing consent doesn't affect anything we did lawfully before you withdrew it.
Rights about automated decisions
We don't make solely automated decisions about you that have a legal or similarly significant effect.
How to make a request
- Use your account at /my where you can, or email office@gpsnet.org with the subject
Data request: <type>(for exampleData request: erasure). - Tell us enough to find you — usually the email address you used.
- We'll respond within one month. We may ask you to confirm your identity if we can't otherwise be sure the request is coming from you.
- If you're unhappy with our response, you can complain to the Information Commissioner's Office (the UK's data-protection regulator) at ico.org.uk.
Retention
We keep personal data only as long as we need it. Supporter records are kept until you unsubscribe or ask to be forgotten; membership applications are kept while we vet and administer membership; team sign-in accounts are kept while that person is on the team. Send confirmations hold the email address you sent from, used to credit your action; ask to be forgotten and we delete it.
Who processes data for us
We use a small number of suppliers to run the site. They process personal data only on our instructions:
- Cloudflare — hosting and inbound mail.
- Amazon Web Services (SES) — outbound email.
- mySociety MapIt — postcode to council / ward lookup. Postcodes are sent without an identifier.
- UK Parliament Members API — MP lookup. Public open data.
- A third-party AI provider (currently Anthropic, OpenAI or Google) — receives campaign text only when the team uses the optional AI drafting and content tools.