Data controller

Envirolution is responsible for personal information collected through this website, the volunteer portal, membership and supporter forms, contact forms, opportunity sign-ups and related communications.

Personal information collected

Envirolution may collect names, email addresses, messages, account credentials, role and account status, volunteer interests, opportunity sign-up notes, portal posts, comments, voting records, payment identifiers, transaction status, technical security logs, IP addresses, user-agent information and communication records submitted through the website.

Purposes of processing

Personal information is processed to respond to enquiries, manage volunteer and member access, administer the portal, coordinate opportunities, process supporter and membership payments, maintain records of community decisions, moderate content, protect website security, prevent misuse, send operational notifications and fulfil legal or governance obligations.

Lawful bases

Processing is carried out where it is necessary for legitimate organisational interests, performance of a contract or membership arrangement, compliance with legal obligations, protection of users and the community, or consent where consent is the appropriate lawful basis.

Payments

Payments are processed through Stripe Checkout. Envirolution does not store card details on this website. Payment records may include email address, plan selected, Stripe customer or subscription identifiers and payment or subscription status.

Emails and notifications

Envirolution may send transactional emails relating to contact submissions, account approval, account status, password resets, opportunity activity, membership, supporter activity and important portal administration. Password reset tokens are stored in hashed form and expire automatically.

Sharing information

Personal information is only shared where required to operate the website and services, including hosting, email delivery, payment processing, legal compliance, safeguarding, security, fraud prevention and organisational administration. Envirolution does not sell personal information.

Digital Assembly

The Digital Assembly is designed to collect community priorities without asking voters for names, email addresses, exact addresses, postcodes or demographic data. To reduce duplicate voting, the system may store a salted one-way technical hash created from temporary connection/browser information. This hash is used for duplicate prevention and is not intended to identify individuals. Optional area questions are deliberately broad and should be used only for aggregated reporting.

Retention

Personal information is retained only for as long as required for the purpose collected, including account administration, volunteer coordination, membership records, financial records, legal compliance, security, governance and audit purposes. For Digital Assembly activity, Envirolution aims to retain aggregate vote totals and approved ballot text for reporting, while minimising or rotating raw duplicate-prevention records after the relevant assembly/reporting period where practical.

Security

Envirolution uses access controls, password hashing, CSRF protection, audit logging, server-side validation and administrative restrictions to protect website data. Users are responsible for keeping their login details secure.

Your rights

Individuals may request access, correction, deletion, restriction, objection or portability of personal information where those rights apply. Requests can be submitted through the contact page. Identity verification may be required before action is taken.

Complaints

Privacy concerns can be raised with Envirolution through the contact page. Individuals also have the right to complain to the UK Information Commissioner’s Office.