Debate London will use the information you provide to deliver you relevant information about our
products and services, upcoming events hosted by Debate London and important updates to keep you in
By clicking below to submit this form, you acknowledge that the information you provide will be
For the website"
This document outlines how Debate London processes and manages personal data and:
• Identifies the data controller.
• Explains the lawful basis for processing personal data.
• Outlines the personal data held and processed.
• Outlines the scope of the special category personal data held and processed.
• Outlines the process of Subject Access Requests.
1. Data Controller
The Data Controller is Debate London.
If you have any questions about this policy or for more information about how we use your data or
would like to exercise any of your rights contact Debate London.
3. Data sources
Data held is that provided by you when you contact us and correspondence with third parties in
response to cases taken up on your behalf. We may also hold data that you provide when we contact
you – for instance, if we ask you to participate in a survey. If you do not wish for us to contact you by
telephone, please do not provide this information.
4. Data Security
Personal data is stored electronically and securely. We ensure that our service providers comply with
the same high standard that we do.
5. Transferring your data outside of the European Economic Area
The EU GDPR adequacy decision means that data can continue to flow between the UK and the
European Economic Area (EEA). Some service providers are located outside of the EEA and therefore it
may be necessary to transfer your personal data outside of the EEA. Where the transfer of your data
outside of the EEA takes place we will make sure that it is protected in the same way as if the data was
inside the EEA, and it only occurs with your consent.
6. Data retention policy
Personal data will be held for no longer than necessary. Some types of data may be held for longer than
others. Review of the data held will occur annually to determine whether it should be maintained or put
7. Subject Access Requests
We will request verification of the identity of any individual making a request, and ask for further
clarification and details if needed.
We will respond within 28 calendar days once we have confirmed it is a legitimate request.
In accordance with ICO guidelines, we keep a log of Subject Access Requests that contains details of the
request, including that which can identify you personally, indefinitely.
Data subjects have the right to the following:
To be told whether any personal data is being processed
To be given a description of the personal data, the reasons it is being processed and whether it will be
given to another organisations or people.
To be given a copy of the information comprising the data, and given details of the source of the data
where this is available.
8. Will we share your data with anyone else?
We may need to share your data with a third party, such as the police, if required to do so by law.
Any third parties that we may share your data with are obliged to keep your details securely, and to use
them only for the basis upon which they were originally intended.
Your personal data is only used as outlined here and within your reasonable expectations based on the
nature of the communication.
9. Data Rights
At any point you have the following rights:
• Right of access – you have the right to request a copy of the information held about you.
• Right of rectification – you have a right to correct data held about you that is inaccurate or incomplete.
• Right to be forgotten – in certain circumstances you can ask for the data held about you to be erased
from our records.
• Right to object – you have the right to object to certain types of processing, such as direct marketing.
• Right to object to automated processing, including profiling – you also have the right to be subject to
the legal effects of automated processing or profiling.
• Right to judicial review: if our office refuses your request under rights of access, we will provide you
with a reason why. You have the right to complain.
10. Making a complaint
If you are unhappy with the way that we have processed or handled your data then you have a right to
complain to the Information Commissioner’s Office (ICO). The ICO is the supervisory body authorised by
the Data Protection Act 2018 to regulate the handling of personal data within the United Kingdom. The
contact details for the ICO are:
• Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF
• Telephone: 0303 123 1113
• Website: https://ico.org.uk/concerns/
If you have any questions about the data held please contact Debate London via the contact information
on this website.
Please note that proof of identity is required should you choose to exercise any of the above rights in
relation to personal data.
We retain the right to update this policy at any time. If there are changes that significantly impact your
rights, we will contact you in advance.