1. Who we are
YesCymru is a non-party political grassroots organisation campaigning for Welsh independence, majority funded by member subscriptions and donations. Our only other income comes from the sale of YesCymru merchandise in our online shop (see Section 5). We are committed to maintaining the trust and confidence of all our supporters, whether you are a visitor to our website, a member or have simply signed up to receive our newsletter.
We really value your support in the campaign to achieve independence for Wales – we can’t do it without you! We want to reassure you that we will only collect the minimum personal data we need from you in order to keep you up to date with our campaigns and enable you to get more involved if you want to.
By reading on below, you can find out more detail about what data we collect and why, as well as how we look after it.
2. Visitors to our website
When someone visits yes.cymru we use a third party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is only processed in a way which does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website.
As part of the joining process for YesCymru, we collect the minimum personal information we need to process your payment – your name, postal address, email address, as well as payment details (see below). We use these to keep you up to date with our news and campaigns (so that you know what your membership payments are helping us to achieve) and ways you can get more involved. The main way that we will keep you informed is via our mailing list. We will automatically add you to this when you join YesCymru, but you can unsubscribe at any time (see Section 7).
If you have an annual membership, we will contact you via email when your membership is up for renewal. If your membership is based on a monthly payment and these payments stop, we will contact you via email to let you know (this usually happens because a bank card has been renewed or cancelled).
By becoming a YesCymru member, your name will be automatically added to our "50,000 for independence" petition (see Section 4).
When you voluntarily share personal or special category information with YesCymru, it is assumed that this information may be used to assist you or otherwise achieve our aims and objectives.
We may process your personal data in order to investigate and handle internal complaints.
3.1 Joining via our website
If you join via our website, the payment will need to be set up using a debit or credit card. This is handled by the NationBuilder payment processor. YesCymru does not collect or store any of your card details. In addition to the personal information we collect as described at the beginning of Section 3, we will also need your phone number - this is a requirement of the payment processor to initiate the payment.
3.2 Joining via a paper form
In order to set up a standing order we will collect the details of your bank account. We will transfer your other details from the form onto our membership database, then we will send the paper form directly to your bank. We will not store any of your bank details.
4. Our “50,000 for independence” petition
The data we collect in order to process your signature is your name, email address, and postal address. We require postal addresses to enable us to find and remove duplicate entries, to ensure the integrity of the petition.
4.1 Signing via our website
By signing the petition on our website, you are committing to voting "Yes" in a referendum on Welsh independence. On that basis, our reasonable belief is that it is within your legitimate interests and our legitimate interests, that we add you to our mailing list so that you can hear more about the work of YesCymru.
4.2 Signing via YesCymru membership
Another way you can sign our petition is by becoming a YesCymru member. If you are a member there is no need to fill in your details again for the petition, as this will happen automatically when you join.
4.3 Signing via a Facebook Ad
Apart from on our website, you can sign the petition by submitting a Lead Ad form that we publish via our Facebook page. Facebook will pre-populate your details, but you can modify them before sending. Your details will then be sent to our NationBuilder system and added to our mailing list. Our use of Lead Ads is in accordance with Facebook’s Data Policy.
5. Customers in our online shop
6. If you contact us in any other way
If you get in touch with us via post or email about any other matter (or you send us your contact details via social media for example by direct message on Twitter), and are not already a member or a subscriber to our newsletter, we will not contact you about any matter other than the topic you have originally contacted us about.
If we meet you face-to-face (for example at an event) and you give us your contact details in order to keep in touch, we will only collect your name and email address, and we will seek permission from you at the time to add you to our mailing list. If you only want us to contact you about a specific issue, we will not add you to our mailing list.
7. Our mailing list
We use a third party provider, NationBuilder, to deliver our newsletter. We gather statistics around email opening and clicks using industry standard technologies to help us monitor and improve our newsletter. For more information, please see NationBuilder's privacy notice.
We may use third party survey software, 123FormBuilder, to send you a survey, where we collect the same personal information described in Section 3. The data is securely stored by 123FormBuilder. For more information, please see 123FormBuilder's privacy notice.
The different ways in which you can subscribe to our mailing list are explained above. If you are subscribed to our mailing list, we send occasional newsletters to keep you up to date with news, campaigns, events and ways you can get involved. These emails may be sent from YesCymru centrally, or from your local YesCymru group (see Section 8).
We may also use your information to check that our records are accurate and to check every now and then that you’re happy and satisfied.
From time to time, we may provide you with information about specific appeals we are running, for example if we are crowdfunding to raise money for a campaign, but we will keep these communications to a minimum.
We also partner with various local independence-supporting businesses around Wales, who have committed to offering discounts on their goods and services exclusively to YesCymru members. We may email you about these offers from time to time. YesCymru does not share any of your details with these companies.
Apart from the subscription methods described above, you can also subscribe to our mailing list via the Sign up for news and updates section of our website. As part of the registration process for our mailing list, we collect minimum personal information - your name and your email address.
7.1 Unsubscribing from our mailing list
You can unsubscribe from our mailing list at any time by clicking the To change your email preferences, click here link at the bottom of any of our emails. You will then be given an option of whether to unsubscribe from specific types of email, or from all emails. The specific types of emails that you may unsubscribe from are:- news and updates from YesCymru centrally, news and updates from YesCymru groups, and emails from YesCymru centrally containing exclusive offers from our partners.
You can also unsubscribe by emailing us at [email protected] If you unsubscribe via this method, we will assume that you want to unsubscribe from all types of email, unless you state otherwise.
8. Sharing your information with your local group
YesCymru has a number of local groups operating in different communities across Wales. You will be added to your local group’s mailing lists automatically. A group is deemed local to you if you live in a county council ward deemed to be within the group’s catchment area - usually within a 10 mile radius of a group. Your ward is approximated by geocoding, which requires all parts of the postal address, and is based on the most recent address we have for you.
Your local group is bound by the privacy policies set out in this document. Provided that your local group also satisfies the criteria set out in our constitution, the group may nominate a person or persons to act as Data Processors. The Data Processor(s) for your local groups may contact you via email on behalf of their group. They will only use your data to keep you up to date with news about what the group is doing, and to invite you to local events and meetings. The Data Processor(s) for your local group will not be permitted to export your data out of our database, or share it with any third parties.
Your data will not be visible to the Data Processor(s) of any other YesCymru group.
All Data Processors for YesCymru are bound by the YesCymru Groups GDPR Agreement.
You can unsubscribe from the mailing list of your local group at any time by selecting the relevant option within the To change your email preferences, click here link at the bottom of any email from YesCymru or a local group (see Section 7.1)
We are a not-for-profit organisation that qualifies for an ICO registration fee exemption, and we are not legally required to appoint a data protection officer.
We do not rent or trade email lists with any other organisations or businesses.
We process your personal data under the legal basis of Legitimate Interest.
We will retain the personal information that we collect from members until one year following the expiry of your membership.
We do not use automated decision-making or profiling as part of our data processing activities.
You have the following rights in relation to your personal data:
- To be informed about the data we hold, and how and why we process it;
- To request a copy of the personal information that we hold about you;
- To require us to rectify any inaccuracies within the personal data we hold in relation to you;
- To restrict processing of your data, if data is inaccurate or being processed unlawfully;
- To object to your data being processed if you suspect that what we are doing is not legitimate;
- To request that your data is deleted;
- To request that we send a copy of your data electronically to you, or a third party;
- To withdraw consent by unsubscribing to our newsletter or cancelling a membership;
To lodge a complaint with the Information Commissioner's Office (ICO), who is our supervisory authority for data protection (https://ico.org.uk/concerns).
10. Further information
If you have any questions about this privacy statement or about how we use or store data you can contact us at [email protected].
Our registered address is:- YesCymru, Office 23609, PO Box 92, Cardiff, CF11 1NB.