Privacy Policy

Who is responsible for this service

The GRACE crowdsourcing website is run by mySociety (a registered charity in England and Wales, 1076346) on behalf of Climate Emergency UK CIC (company number 11823392). mySociety is the controller for the personal information processed on this site, unless otherwise stated.

What personal data we collect and how we use it

When you visit this website, we collect and log some information about your visit, in order to analyse and fix problems with the site. Our webserver logs collect information about requests, including your IP address, data submitted (such as search terms submitted to the in-site search), request date and time, page requested, browser version and referrer. We routinely keep this information for 28 days. Note that in normal circumstances, this data is infrequently accessed by a human, and when it is, they are likely to be assessing it in bulk, in order to understand an issue with the site, rather than at a granular level of individual users.

Volunteer markers and council officers may have accounts on the site, to contribute data to the marking process. In this case, we store your email address to enable you to sign into the site, and we store your name in order to track your contributions to the marking process.

Legal basis for processing

We store data about you under the legal basis of GDPR 6(1)(f) Legitimate interests.

We believe that our processing of our users’ data is as they would expect when they use our service, and we only store the bare minimum of data we require in order to monitor and diagnose issues on the site and to enable users to securely contribute information to the marking process, either as volunteers or council representatives exercising their right of reply.

How long we keep your data

Data collected in our webserver logs is retained for 28 days.

The names and email addresses of volunteer markers and council officers are retained until at most 3 months after the release of the current round of Scorecards, in case we need to attribute individual contributions to the marking or contact contributors for more information about the marks they gave, and ensure that Councils have been able to exercise their right to reply.

Volunteers and council officers may request we remove their details before this date (see “Your right to erasure”, below).

Who we share your data with

The data we collect is shared with our partners, Climate Emergency UK.

Aside from this, we don’t share personal data with any other organisation, unless you give us permission to do so, or we have to do so for legal or compliance reasons.

Your right to access

You may contact us at any time to ask to see what personal data we hold about you. Please contact us to request this.

Your right to erasure

You may request that we destroy the personal data that we hold about you. Please contact us to request this.

Your right to object

You have the right to object to our processing of your personal data. Please contact us to request this.

Your right to complain

If you believe that we have mishandled your data, you have the right to lodge a complaint with the Information Commissioner’s Office. You can report a concern here (but do contact us first, so that we can try and help).