Updated 22nd September

PRIVACY NOTICE

1. Who We Are

Soho Says Yes Limited is a company registered in England and Wales (company number 17450234). We are the "Data Controller" for your personal data under UK GDPR and the Data Protection Act 2018.

Registered office: Hazelwood Cottage, Stroud, GL69AL

If you have any questions about this notice, contact us at: [email protected]

ICO registration number:  ZC250534 

2. What Data We Collect

We may collect and process:

  • Name

  • Email address

  • Postal/home address (where relevant to identifying Soho residents so we can keep them informed about the campaign)

  • Phone number, where you give it to us directly (e.g. by registering on our website, or messaging us on WhatsApp), which we use to contact you via WhatsApp

  • Details of any contribution you make

  • Any other information you submit via sign-up forms, event registrations, or volunteering

  • The content of messages you send us (e.g. via WhatsApp, email, or our website)

3. How We Collect Your Data

We collect data in two ways:

  • Directly from you: when you sign up to our newsletter, register for an event, contact us, volunteer or make a contribution.

  • From other sources: so we can identify and contact residents in the Soho area about the campaign, we may compile names and addresses from publicly available records and canvassing.

  • If we hold your details this way, you can ask us to remove you from our records at any time by contacting us.

4. WhatsApp

We use WhatsApp Business to communicate with supporters. If you message us directly, we will see your phone number as part of that conversation. If we message you via a broadcast list, other recipients cannot see your number or that you received the message. WhatsApp is provided by Meta, and messages sent this way are also subject to WhatsApps’ own privacy policy.

5. How We Use Your Data

We use your data to:

  • Identify who local residents are and keep them informed about the campaign's aims

  • Invite residents and supporters to any successor legal organisation that may be established as a result of the campaign (e.g. a residents' association or community society)

  • Manage event and meeting registrations

  • Process contributions made in support of the campaign

  • Send newsletters and updates, where you've consented

  • Let you know how you can further support the campaign

  • Comply with legal and regulatory obligations

6. Lawful Basis for Processing

  • Consent: e.g. newsletter sign-up, event registration

  • Legitimate interests: e.g. contacting local residents about a campaign that affects their area

  • Contract: e.g. processing a contribution

  • Legal obligation: e.g. retaining financial records for tax purposes

7. Contributions

If you choose to support the campaign, we collect your name, contact details and, in the event of a payment, the information needed to process this contribution. Payments are handled by Stripe and/or Tide; we do not store your full card details. We keep records for as long as required by law (currently a minimum of 6 years for accounting purposes).

8. How We Share Your Data

We do not sell your data, and we do not disclose your name or contact details to third parties for their own marketing purposes.

We do use trusted service providers ("data processors") to help run the campaign. They only process your data on our instructions and are contractually required to keep it secure:

  • FunnelSketchers (our CRM/campaign platform)

  • WhatsApp Business (Meta): if you contact us this way

  • Google Workspace (email hosting): if you contact us directly by email

  • Tide (part of ClearBank): if you make a financial contribution to the campaign

  • Stripe: if you make a financial contribution to the campaign

We may also share data where required by law or a regulatory authority.

9. International Transfers

Some of our service providers store or process data outside the UK. This includes WhatsApp/Meta, and FunnelSketchers, which integrates with providers such as Go High Level (CRM), Mailgun (email delivery), and Facebook, some of which are based outside the UK. Where this happens, appropriate safeguards are used, such as Standard Contractual Clauses.

10. How We Protect Your Data

We take appropriate technical and organisational measures to protect your data from loss, misuse, or unauthorised access. Access is limited to those who need it to carry out campaign activities.

11. Your Rights

You have the right to:

  • Request access to your personal data

  • Request correction or deletion of your data

  • Withdraw your consent at any time

  • Object to or restrict certain types of processing

To exercise these rights, contact: [email protected]

You also have the right to complain to the Information Commissioner's Office (ICO):

Information Commissioner's Office Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Helpline: 0303 123 1113

Website: ico.org.uk/make-a-complaint

12. Data Retention

We only keep your data for as long as necessary for the purposes set out in this notice.

13. If Our Structure Changes in the Future

The Soho Says Yes campaign may create a successor legal organisation — for example, a residents' association or community society. To ensure the campaign's work can continue, your contact data will be transferred to that new organisation so they can keep you updated and invite you to stay involved.

We will rely on 'Legitimate Interests' to do this. We will always notify you in advance before any transfer takes place, and you will have the opportunity to opt out. You can also opt out at any time, now or in the future, by contacting us directly or using the unsubscribe link in our emails.

14. Changes to This Notice

We may update this notice from time to time. Updates will be posted on this page and, where appropriate, notified to you by email.

Soho Says Yes Limited | Company number 17450234 |

Registered in England & Wales. Soho Says Yes is a Company Limited by Guarantee.

Privacy policy | Cookie policy | Terms of use

© 2026 Soho Says Yes Limited