Privacy policy
Effective 23 July 2026
This site, welcomehomeandy.com, is a campaign run by the Community Planning Alliance (“the CPA”, “we”, “us”). The CPA is the data controller for the personal information you give us when you sign Andy’s New Home card, and this page explains what we collect, why, and the choices you have. The controller is Community Planning Alliance Limited, a company limited by guarantee registered in England and Wales (company no. 13829789).
The short version
We only ask for what we need to add your name to the card, to check the signature is really yours, and, if you say yes, to keep you posted about the campaign. Your name and town appear on the card; your email address and postcode never do. We don’t sell your data, and the public site sets no tracking cookies.
What we collect
When you sign the card, we collect:
- your name, and whether to show it in full or as your first name and last initial;
- your email address;
- your postcode;
- your choice of door colour and, if you write one, a short message;
- whether you’d like campaign updates, together with a timestamped record of that consent.
We also keep the minimal technical logs needed to run the site and to protect it from abuse.
How your information appears on the card
- Shown publicly: your name as you chose to display it, and your town.
- If you write a message, it appears on the card once one of our moderators has approved it.
- Never shown publicly: your email address and your postcode.
Why we use it, and our legal basis
Under UK data protection law we rely on the following:
- Consent – to add your name, and any approved message, to the public card and to the copies of it we deliver to Downing Street. You give this consent when you sign.
- Legitimate interests – to email you a one-time link confirming the signature is genuinely yours (a step that protects the card from fraudulent or automated sign-ups).
- Consent – to send you campaign updates, and only if you tick the box to ask for them. You can withdraw this at any time.
Your postcode is used only to work out which town you’re in, so we can place it on the map and group signatures by town. It is never shown publicly.
Copies of the card
From time to time we deliver a copy of the card to the Office of the Prime Minister at 10 Downing Street. A copy contains the public parts of the card only: displayed names, towns and approved messages. Once delivered, a copy is a fixed record we can no longer amend; the live card remains under our control, and your rights below apply to it in full.
Who we share it with
We use a small number of trusted providers to run the campaign, and share only what each one needs:
- Brevo – our email and contact-list provider. It sends your verification email and, if you opted in, campaign updates. It holds your email address, name, town, postcode and contact preference.
- Plausible Analytics – privacy-friendly website analytics. It uses no cookies and collects no personal data, and we exclude our verification, reply and admin pages from it.
- Fly.io – our hosting provider, which stores the card’s data on secure servers in the United Kingdom (London).
- Cloudflare – manages the domain name (DNS).
- Postcodes.io – an open postcode-lookup service. We send it your postcode (and nothing else) to work out your town and map position.
We never sell or rent your personal information.
Cookies
The public site uses no advertising or tracking cookies, and our analytics is cookieless. We set a single sign-in cookie only for our own moderation area, which the public never sees.
How long we keep it
We keep your details for as long as the campaign is active, and for a reasonable period afterwards, unless you ask us to remove them sooner. Copies already delivered remain as delivered.
Your rights
You have the right to ask us to give you a copy of your data, to correct it, to delete it, to restrict or object to how we use it, and to withdraw your consent at any time. To do any of these, contact us using the link below. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.
Children
The card is intended for adults. Please don’t sign it if you are under 16.
Changes to this policy
We may update this policy from time to time; we will change the date shown at the top when we do.
Contact us
Community Planning Alliance Limited is the data controller for this campaign. To ask a question about your data or to exercise any of your rights, email communityplanningalliance@mail.com or use the Community Planning Alliance contact page.