Privacy Policy
Stir to Action Ltd is a worker co-operative registered in England as a Company Limited by Guarantee (company number 07951013). We operate several websites and projects, including the Centre for Democratic Business and 21st Century Social Clubs.
For the purposes of data protection law, Stir to Action Ltd is the data controller. This means we decide how and why your personal data is processed.
We collect personal information in the following ways:
Information you give us directly. When you submit a contact form, sign up to our newsletter, or email us, you provide us with information such as your name and email address, and any message content. Contact form submissions are stored in Google Workspace.
Information collected automatically. When you visit our websites, we use the following services to understand how the site is used and to improve it:
Google Analytics — collects anonymised usage data such as pages visited, time on site, and referring sources.
Hotjar — collects anonymised behavioural data such as clicks, scrolling, and session recordings.
Cookies. Our websites use cookies. You can manage your cookie preferences through the cookie settings on each site, provided by Cookie Script. For more detail on which cookies are set and why, use the cookie settings panel on the website you are visiting.
We use the information we collect to:
respond to enquiries submitted through our contact forms or by email;
send our newsletter to subscribers who have opted in (via Mailchimp);
analyse website traffic and improve site performance and content; and
meet our legal obligations.
Under UK data protection law, we must have a legal basis for processing your personal data. The bases we rely on are:
Consent — when you sign up to our newsletter or submit a contact form. You can withdraw consent at any time.
Legitimate interests — when we use analytics to understand and improve how our websites are used. We consider this proportionate and unlikely to adversely affect your rights.
Legal obligation — where we are required by law to process or retain certain data.
We do not sell your personal data.
We share data with the following third-party service providers, who process it on our behalf:
Google Workspace — stores contact form submissions and email correspondence.
Google Analytics — processes anonymised website usage data.
Hotjar — processes anonymised behavioural data from website visits.
Mailchimp — processes newsletter subscriber data. See Mailchimp’s privacy practices.
Cookie Script — manages cookie consent on our websites.
These providers have their own privacy policies and data processing terms. We do not intentionally transfer your data outside the UK or EEA, though some of these providers may process data internationally as part of their service.
We retain your personal data only as long as necessary for the purposes described in this policy:
Contact form submissions — retained for as long as needed to respond to and resolve your enquiry, then deleted.
Newsletter subscribers — retained until you unsubscribe.
Analytics data — retained in accordance with the default retention periods of Google Analytics and Hotjar.
Data security
We take reasonable precautions to protect your data from loss, misuse, or unauthorised access. Data is stored securely with access limited to authorised personnel. Where we use third-party providers, they are required to implement appropriate security measures.
Your rights
Under UK data protection law, you have the right to:
access the personal data we hold about you;
request correction of inaccurate data;
request deletion of your data where we have no ongoing reason to retain it;
request that we restrict how we use your data while a concern is being resolved;
object to processing based on legitimate interests;
receive a copy of your data in a portable format;
withdraw consent at any time, where consent is our basis for processing;
complain to us about how we have handled your data (see below);
complain to the Information Commissioner’s Office (ICO) if you believe we have not met our obligations — ico.org.uk.
To exercise any of these rights, contact us at hello@stirtoaction.com or write to us at the address below.
Data complaints procedure
You have the right to make a complaint to Stir to Action about any aspect of how we have handled your data.
You can submit a complaint by emailing us at hello@stirtoaction.com, or by writing to us at:
Stir to Action Ltd
c/o Bridport United Church
34 East Street
Bridport, Dorset
DT6 3LJ
You can also raise a concern with us by phone, in person, or through our social media channels. However you contact us, we will accept and investigate your complaint.
We will acknowledge your complaint as soon as we can, and no later than 30 days after we receive it, as required by the Data Use and Access Act 2025. We will investigate your complaint and inform you of the outcome as soon as we can. If the investigation is complex and likely to take some time, we will keep you informed along the way.
If you are not satisfied with our response, or at any point, you have the right to complain to the Information Commissioner’s Office (ICO). You can do so through the ICO website at ico.org.uk, or by calling their helpline on 0303 123 1113.
Changes to this policy
We may update this policy from time to time. Any material changes will be reflected in the “last updated” date above. We encourage you to review this policy periodically.
Contact us
If you have any questions about this policy or about how we handle your personal data, contact us at:
Stir to Action Ltd
c/o Bridport United Church
34 East Street
Bridport, Dorset
DT6 3LJ