Effective from: 30 July 2025
This document outlines the approach undertaken by T4P Events, an entity operating within the jurisdiction of the United Kingdom, with specific reference to the handling, storage, and lawful processing of personal data. This privacy policy has been drafted in accordance with applicable UK data protection law, including the retained EU General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Organisational Identity and Contact Pathways
The entity herein referred to as “T4P Events” is a limited undertaking with a postal correspondence facility located at 128 City Road, within the administrative boundaries of London, United Kingdom (EC1V 2NX). Any and all queries or requests in relation to data protection matters should be addressed in writing via digital mail to the following address: data [at] togetherforpalestine [dot] org. Please substitute the appropriate symbols as necessary. We respectfully request that communications be clear, specific, and of a serious nature.
2. Scope and Application of this Policy
This Privacy Policy applies to any individual (hereinafter referred to as the “data subject”) who interacts with our online properties or digital campaigns, including but not limited to visiting our website, submitting information via digital forms, or participating in communication initiatives such as newsletters, alerts, or contact forms.
3. Categories of Data Collected
In the execution of our legitimate operations, T4P Events may collect, retain, and process the following minimal classes of personally identifiable data, specifically:
- Electronic mail addresses (i.e., email addresses);
- Mobile or landline telephony contact details (i.e., phone numbers);
- Digital interaction data, which may include information indirectly collected through the placement of tracking pixels or other widely used technologies that facilitate analytical insight, campaign performance metrics, or message delivery efficiency. Such tools may be embedded within newsletters, web properties, or digital communications. These tools may capture metadata including IP address, browser type, or interaction time.
We expressly do not solicit, collect, or store payment data, credit card information, or financial instrument identifiers.
4. Purpose of Data Processing
The data collected may be processed for the following delineated purposes:
- To enable direct communication between the organisation and interested individuals, where such contact is explicitly solicited or reasonably anticipated;
- To administer email-based updates, information about events, and/or other communications for which the data subject has voluntarily opted in;
- To measure engagement with our digital communications through technical instrumentation (e.g. pixels) to ensure message delivery or assess effectiveness;
- To comply with applicable legal obligations and internal administrative recordkeeping requirements.
All processing activities are conducted on a basis permitted by UK GDPR, including (but not limited to) the data subject’s consent and/or the pursuit of legitimate organisational interests, provided such interests are not overridden by the rights and freedoms of the data subject.
5. Legal Basis for Processing
Processing activities are grounded on one or more of the following lawful bases:
- Consent: where the data subject has affirmatively and demonstrably agreed to such processing;
- Legitimate interests: specifically including, but not limited to, the promotion of events and facilitation of protected expression, where these interests are pursued in a proportionate and rights-respecting manner;
- Compliance with legal obligations.
6. Data Retention and Storage Duration
Personal data will be retained only for the minimum duration necessary to fulfil the purposes for which it was collected. We periodically review the relevance and accuracy of retained records, and data subjects may request erasure at any time by contacting us through the aforementioned channel.
7. Third Parties and Data Disclosure
T4P Events does not sell, lease, or freely disseminate personal data to third parties. Access to data is restricted to individuals and systems with a demonstrable need, and any technical service providers (e.g. for email distribution or pixel tracking) operate under strict contractual obligations consistent with UK data protection law. We do not currently utilise external payment platforms or processors.
8. Cross-border Data Transfers
To the extent that any data is transferred beyond the borders of the United Kingdom, such transfer shall occur only where adequate safeguards are in place, in accordance with UK GDPR Chapter V provisions. This includes Standard Contractual Clauses or other mechanisms deemed lawful by the UK Information Commissioner’s Office (ICO).
9. Your Rights
Under data protection law, individuals have several rights. These include the right to:
- Access their personal data;
- Rectify inaccuracies;
- Request erasure of their data (“the right to be forgotten”);
- Restrict or object to processing in certain situations;
- Withdraw consent (where applicable);
- Lodge a complaint with the UK Information Commissioner’s Office (www.ico.org.uk) if they believe their data has been mishandled.
If you wish to exercise any of these rights, please direct your written correspondence to our nominated contact email (referenced above) with sufficient detail to facilitate a response.
10. Changes to This Policy
We reserve the right to update or modify this policy at any time, and any such revisions will be posted to this page with a revised effective date.
