Privacy Policy

1. Who we are

PlaceBuilder is a website owned by The Future Fox Ltd, which is a company registered in England and Wales. Our mission is to accelerate the development of smart, sustainable, and people-focused places, and we do this by making it easy for anyone to influence planning decisions. 

This is our updated Privacy Policy going into effect on the 19th July 2021.

This Privacy Policy explains what data we might collect, how it's used and how it's protected.

2. Who is responsible for the processing of your personal data?

The Future Fox is the Data Processor and is responsible for the processing of personal data obtained through this website (placebuilder.io) and subdirectory (placebuilder.io/epsommasterplan) in accordance with the UK General Data Protection Regulation (GDPR) and other applicable laws and regulations. Epsom and Ewell  Borough Council (EEBC) is the Data Controller for this subdirectory (placebuilder.io/epsommasterplan) and determines how and why your personal data is processed by The Future Fox.

3. The data we collect, why we collect and process it, and what we do with it

3.1 Personal data we collect

Any information related to a person that can be used to identify them directly or indirectly is personal data. We collect the following personal data: 

 

Suggestions and preferences

  • We record the suggestions, comments, survey answers and preferences you make through this website. We analyse this information to understand your preferences and those of the community in relation to the Epsom Town Centre Masterplan.

 

Postcode data

  • If you choose to provide it to us, we collect your postcode so we can process the suggestions you provide through our website more effectively, understand spatial trends, and measure whether responses are representative of the population. 

 

Age group and interest in the project

  • If you choose to provide it to us, we collect your age group and interest in the project, so we can process the suggestions you provide through our website more effectively, understand trends, and measure whether responses are representative of the population.

 

Other demographic data

  • If you choose to provide it to us, we collect other demographic data like your ethnic group, whether you have any conditions that reduce your ability to carry out day-to-day activities, and your gender identity, so we can measure whether responses are representative of the population, whether our work is reaching all groups in the community and is conducted in accordance with the 2010 Equalities Act. We don’t use this information for any other purpose.

 

Website interaction data

  • We capture website interaction data through cookies, UTM codes and event tracking (Google Analytics and Hotjar) only when we get your explicit consent. We do this to understand how to improve website functionality, to improve the effectiveness of our ads and other communications on social media platforms and to provide social media sharing functionality.

Names and email addresses

  • If you choose to provide them to us, we collect your email address, name and email subscription preferences. 

 

3.2 The legal basis for processing your personal data

 

The legal basis for processing your suggestions and preferences, postcode, age group, interest in the area, if you supply them to us, is to conduct a public task.

 

The legal basis for processing other demographic data (ethnic group, whether you have any conditions that reduce your ability to carry out day-to-day activities, and your gender identity), if you supply them to us, is in the significant public interest.

 

The legal basis for processing your name and email, if you supply them to us, is your explicit consent.

 

The legal basis for processing anonymised website interaction data is your explicit consent.

 

3.3 What we do with your personal data

Responses to this consultation may be considered as part of the development of other council-led initiatives and proposals in Epsom & Ewell. We will not use your personal data for any other purpose.

 

We will not:

  • sell your data to third parties
  • share your data with third parties for marketing purposes

 

4. Cookies 

Our website will place “cookies” on your computer to help improve your experience when you visit our website, detect spam, improve security and navigate through our web pages. You can delete cookies using your browser settings (these vary depending on which software you are using). We use the following cookies:

4.1 Strictly necessary cookies (always enabled) 

These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences or responding to survey answers. These cookies do not store any personally identifiable information.

  • A cookie responsible for the session identifier. This is an anonymous non-tracking cookie that expires at the end of the session or after 24 hours. Its’ only purpose is to generate an anonymous session identifier that allows us to process your data. 
  • Anti-CSRF cookie to prevent attacks. This is a session-only cookie that sends an encrypted identifier between you and our web app. It is an anonymous cookie that expires at the end of the session.  
  • Cfduid cookie to detect malicious visitors and prevent attacks. It uses an anonymised version of your IP address. The cookie is a session-only cookie that expires after 30 days. 
  • We use javascript API cookies to determine your selection of privacy rules. These cookies expire after 12 months.

4.2 Analytical and performance cookies (disabled when you decline our cookie policy)

These cookies allow us to count visits and traffic sources so we can measure and improve the performance of this website. They help us to know which pages are the most and least popular and see how visitors move around the website.  If you do not allow these cookies we will not know when you have visited the website.

  • We use the third-party services  Google Analytics and Hotjar to capture data on how you interact with the website. They use HTTP cookies to remember what a user has done on previous pages / interactions with the website. 

 

We don't use any other cookies, tokens or beacons. We do not store your IP address in any format in our database. 

5. Social media

We use one or more social media pixels or other Javascript enabled trackers on the website (“social media pixel”). Social media pixels are made available to us by the relevant social media platform. They enable us to identify if you landed on our website by clicking on an advert shown to you on the social media platform, or a link that we published on the social media platform. If you do not use social media platforms, the social media pixels are not able to collect data about you.

We use this information to measure the effectiveness of social media adverts for statistical and market research purposes. The data collected in this way is anonymous to us, i.e. we do not see or have access to personal data of individual users or their social media accounts. 

6. Storage of personal data

All our data is stored in the UK for as long as:

  • it's needed for the purposes set out in this privacy notice
  • the law requires us to

 

The storage period of personal data processed using social media pixels is determined by the relevant social media platforms. 

We will retain your name and email address as long as you are subscribed to our email notification service. You can unsubscribe at any point through the link provided in our emails to you and your name and email address data will be deleted. 

7. Your rights

You have a right of access to any personal data we hold about you, by making a Subject Access Request (SAR) to our contact email below.

You have the right to request:

  • information about how your personal data is processed
  • a copy of any personal data you've given to us
  • that anything inaccurate in your personal data is corrected immediately
  • that any incomplete personal data is completed - you can do this by sending us a 'supplementary statement' that explains what's wrong with the data we've collected
  • that your personal data is deleted if there's no longer a reason for us to hold it
  • that the processing of your personal data is restricted in certain circumstances, for example if we've collected inaccurate information

Find out more about your rights on the Information Commissioner's website.

8. Changes to this Privacy Policy

We may change this privacy notice. In that case, the 'last updated' date at the bottom of this page will change. Any changes to this privacy notice will apply to you and your data as of that date.

We encourage you to review this privacy notice regularly to find out how we are protecting your data.

9. Contacting us 

For questions about this privacy notice or the practices of the website, you can contact: [email protected]

10. Complaints

If you feel we have been unable, or unwilling, to resolve your information rights, you have the right to lodge a complaint with the Information Commissioner's Office (ICO). The ICO are the supervisory authority responsible for data protection in the UK.

For further information, including independent data protection advice and information in relation to your rights, you can contact the Information Commissioner at:

The Information Commissioner

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Tel: 08456 30 60 60

Website: www.ico.org.uk

 

You can also report any concerns here: https://ico.org.uk/concerns/handling/ 






Homepage