CPRE works to protect, promote and enhance our towns and countryside to make them better places to live, work and enjoy. We could not do this without support from people like you, and we are committed to protecting both your data and your privacy.
We want you to feel assured that any information you give us is held securely and safely, whether you are working for us, supporting us through membership, campaigning, donations, volunteering, fundraising or events.
This policy outlines what data we collect, how we may use it and how we keep your data safe.
'We' or 'us' means Campaign to Protect Rural England, 5-11 Lavington Street, London, SE1 0NZ. Registered Charity 1089685, registered company number 4302973, ICO registration Z1843836. This includes CPRE Durham and CPRE Northumberland but not our other branches, which are set up as separate charities (see Data sharing within CPRE Network below).
This policy will change from time to time, as we keep up to date with legislation and regulation and to remain aligned with any relevant changes in our programmes and operations. If material changes are made, we will notify you by placing a prominent notice on the website. You can keep up to date by visiting these pages.
This text was last updated in May 2018.
You have the right to ask for a copy of the information we hold about you and to have any inaccuracies in your information corrected. You also have the right to ask us to delete any personal information we hold about you. In some cases, we may be unable to delete data, such as if it is required for tax or Gift Aid purposes. In these cases, we will ensure that you are removed from future communications and processing. We are committed to ensuring you receive only those communications you choose.
You can access your personal data held by us or request to receive your information in part or its entirety in machine readable format.
The Data Protection Lead
Campaign to Protect Rural England
5-11 Lavington Street
By using our website, joining or donating to us, you agree that, unless you have set your computer's browser to reject them, we can place the types of cookies set out below on your device and use that data in accordance with this policy.
When you give it to us directly
The vast majority of personal data we hold is given to us directly by our campaigners, supporters, and volunteers in the course of them interacting with our services, websites or fundraising activities.
When we are working with a third party
We may work with events, such as the Great North Run or London Marathon, or fundraising sites such as Just Giving or Virgin Money Giving. These independent third parties will only share your data with us when you have given permission for CPRE to contact you.
When your information is available publicly
We may combine information that we already have about you with information available publicly or information available from external sources to gain a better understanding of you. This includes the use of profiling and screening techniques to ensure communications are relevant and timely, and to provide an improved experience for our supporters. Profiling also allows us to target our resources effectively, which supporters consistently tell us is a key priority for them. We do this because it allows us to understand the background of the people who support us and helps us to make appropriate requests to supporters who may be able and willing to give more than they already do. Importantly, it enables us to raise more funds, sooner, and more cost-effectively, than we otherwise would.
When building a profile, we may analyse geographic, demographic and other information relating to you in order to better understand your interests and preferences in order to contact you with the most relevant communications. In doing this, we may use additional information from third party sources when it is available. Such information is compiled using publicly available data about you, such as Companies House, the Land Registry website or information that is published in articles and newspapers.
In some situations, we may update our supporters, clients and volunteers’ personal information using partners, for example, to check we have a valid and deliverable postal address, or to check if you are registered with the Telephone Preference Service (TPS) or Fundraising Preference Service (FPS).
Depending on your settings or the privacy policies for social media and messaging services like Facebook or Twitter, you might give us permission to access information from those accounts or services.
Personal information is any data that can be used to identify you. It can include, but is not limited to, any of the data listed below.
Data protection law recognises that there are sensitive categories of personal information, such as health information, racial or ethnic origin, or religious beliefs or other beliefs. We would only collect sensitive personal information where there is a clear need to do so such as health information to enable participation in a challenge event. Before we collect any sensitive personal information, we will make it clear what information we are collecting and the purpose we are collecting it for.
Information we collect from you directly or from third parties with whom we work, may include:
We may also collect and process information about your interactions with us, including details about our contacts with you through email, SMS, post, on the phone or in person. This might include the date, time, and method of contact, details about donations you make to us, events or activities that you register for or attend or any request for support.
We may also collect and record other relevant information you share with us about yourself, such as your interests or your affiliations with other charities, your local CPRE branch, community or campaign groups, your Council or Planning Team.
We are committed to protecting the privacy of children and young people who volunteer with us, fundraise for us, attend events organised by us or engage on our website. Where necessary we will obtain the consent of a parent or guardian in order to collect and use personal data of children.
If you are a child and would like to get involved with CPRE, please obtain your parent or guardian's consent before sending any personal information to any website or CPRE. Where we have activities for those under 18 we will ask your age. Please ensure you speak to your parent or guardian before taking part in these activities.
Campaigning for a beautiful, living countryside is something we cannot do without the help of people who share our passion. Raising funds, running campaigns and involving as wide a range of people as we can in our activities is hugely important to us.
We try to offer diverse ways to support and get involved, and use a range of channels to suit supporter preferences, such as our website, postal, email and telephone appeals, and postal and email newsletters and information publications. We may create profiles and database segmentation to ensure communications are relevant and timely and to provide the best possible experience for our supporters. We may also invite supporters to participate in research occasionally. We will always ensure we have your consent before contacting you by email or text for marketing purposes. We may telephone you provided you have given us your permission to do so, with campaign updates, membership renewal requests and occasional appeals. If you have not given us your permission we will not telephone you for these marketing purposes.
If you are a member of CPRE and request not to receive post, please note that we will continue to post legally required membership documents such as voting papers and AGM notifications, and membership renewal notices but you will not receive information materials such as Countryside Voice magazine or local CPRE updates.
We will share membership data supplied by you (or collected about you) with other parts of the CPRE network. There are 44 branches in the CPRE network, two of which form part of the national charity. The CPRE network is supported by the national office and together we deliver CPRE’s charitable objectives to protect, promote and enhance the English countryside.
We do not share, sell or swap your information with other organisations for their own marketing purposes. We will share membership data within the CPRE network as described above.
There are a number of legitimate situations where we may share your information with third parties whom we have contracted to fulfil specific services for us. This will include organisations such as mail fulfilment houses and email broadcasters who will send out our marketing materials on our behalf. In all of these situations we set up a written contractual agreement that will ensure that those organisations can only use the data provided for the specific purposes we direct them to do, and that they have in place strict security requirements in order to protect your personal information.
We may disclose your personal information if we are requested or required to do so by a regulator or law enforcement or to enforce or apply our rights (including in relation to our website or other applicable terms and conditions) or to protect CPRE, for example in cases of suspected fraud or defamation, or to comply with any other applicable legal obligation.
Where you have agreed to receive email marketing communications from us, we may provide your email address or mobile phone number in an encrypted format to social media companies, such as Facebook or Twitter, or to digital advertising networks that are providing services to us by displaying our advertising to you on those social media platforms and other websites, as well as identifying audiences with interests similar to yours. You can opt out of your data being used to display advertising to you by contacting our Data Protection Lead as described above. However, this will not prevent our advertisements being shown to you on a randomised basis or based on cookie data and may mean that you stop receiving more general marketing communications from us.
Keeping your personal information safe
We take appropriate physical, electronic and managerial measures to ensure that we keep your information secure, accurate and up to date.
Although we use appropriate security measures once we have received your personal information, the transmission of information over the internet is never completely secure. We do our best to protect personal information, but we cannot guarantee the security of information transmitted to our website, so any transmission is at the user’s own risk. However, any payment card details (such as credit or debit cards) we receive on our website are passed securely to our payment processing provider according to the Payment Card Industry Security Standards.
We remove personal data from our systems in line with our data retention policy. The length of time each category of data will be retained will vary on how long we need to process it, the reason it is collected, and in line with any statutory requirements.
After this point the data will either be deleted or rendered anonymous. In certain specific situations, for example where a supporter has kindly pledged a legacy to CPRE in their Will, we will maintain their details up to the time when we need to carry out the legacy administration and communicate effectively with their family.
What are cookies?
Cookies are text files containing small amounts of information which are downloaded to your device when you visit a website. Cookies are then sent back to the originating website on each subsequent visit. Cookies are useful because they allow a website to recognise a user’s device and help the owner of the website improve the user’s experience of the site.
You can find more information about cookies at: www.allaboutcookies.org and www.youronlinechoices.eu, for a video about cookies visit www.google.co.uk/goodtoknow/data-on-the-web/cookies
Some of this information may be used by third party cookies to target you with relevant advertising (see below). However, you can choose to use our website anonymously without giving us any information. Please see ‘Changing your cookie preferences’ below.
Types of cookies
We use ‘first party cookies’. These are cookies served directly from our website to your computer and are often used to recognise your computer when it revisits our site and, in some cases, to remember your preferences as you browse the site.
Cookies may be either ‘session cookies’ or ‘persistent cookies’. Your computer automatically removes session cookies once you close your browser. Persistent cookies will survive on your computer until an expiry date specified in the cookie itself, is reached. Most of our cookies are persistent.
Categories of cookies we use
We have assessed our cookies based on the ICC Cookie Guide. Most of our cookies fall into categories 1 and 3.
What information does CPRE collect using cookies?
We may collect some, or all, of the information available from cookies when you visit our website, depending on how you use it. We monitor how people use our website, so we can improve it. We collect this information anonymously.
We use a standard type 1 cookie. This contains no personal information, but tells us if that device has visited before. If you log in to our local group area, however, the cookie will be able to identify the user and which user groups they belong to. Note that this data is not stored in the cookie itself. The session data on the website expires and is removed after about 120 minutes of inactivity.
Some pop-ups, such as ‘Get our updates’ use a small type 3 cookie to prevent the pop-up being shown repeatedly once a user has dismissed it, or has already entered their email address. It is not used for tracking. Any pages with tabs or panels may store a small cookie to record the current state of the tab/panel between page requests.
We use session cookies on the pages where you interact with us to give us money, either as a donation or paying membership, or take an e-action, because they allow you to proceed through pages quickly and easily without having to authenticate or reprocess on each page. This means you can link up pages, or use multiple pages, for your actions and donations. However, when you close your browser, the session cookie is lost.
Facebook Pixel is also loaded on every page. The Facebook and Twitter and other social media share buttons don't themselves generate cookies and are not tracked, but we note the URL of the site you came from to us, as it would be for any link to a third-party site. Pages with embedded Twitter feeds store several cookies for user tracking purposes. Pages with embedded YouTube videos or SoundCloud audios store a number of small cookies for user tracking and for saving user preferences.
The Disqus commenting plugin that is occasionally used on some pages stores several cookies for user tracking purposes.
Changing your cookie preferences
The ‘Help’ menu in the toolbar of most web browsers will tell you how to change your browser's cookie settings, including how to have the browser notify you when you receive a new cookie, and how to disable cookies altogether. Below are links to the most common browsers to help you make any changes:
Website statistics analytics, testing and personalisation
CPRE has no influence over Google’s activities but do note that Google has signed up to the US Privacy Shield standard for protection of data which has been declared adequate by the EU commission. You can always opt-out of Google Analytics cookies here Google's opt-out tool.