Privacy Policy

Last updated: 1 May 2026

Template — not legal advice. These policies are a starting point modelled on what comparable UK activist tools publish. Have a solicitor review before you go live, especially if you handle data on behalf of organisations larger than you can personally vouch for.

Who we are

Campaign Mailer is a tool that helps people email their MP or councillors. The campaign organiser running this instance is the data controller for the data described below. Get in touch at harry@sassoon.uk.

What we collect, and why

When you use a campaign page on this site, we collect the minimum needed to make the tool work and to count how many emails were sent.

Your postcode. Used to find your MP or local councillors. We do not store the full postcode against your identity beyond what's needed for analytics; rough geographic breakdowns use only the outward code (e.g. SW1A).
Your name. Inserted into the pre-filled email body so it reads naturally. We don't share it with anyone other than the recipient you choose to email.
Your IP address (hashed). We hash your IP with a salt before storing, and only use the hash to rate-limit obvious abuse and to count unique senders. We do not store plain IPs.
Your country and the campaign you visited. Captured for aggregate reports. Country is provided by Cloudflare based on your IP geolocation.
Your browser type, language, and referrer. Helps us debug and track where supporters arrived from.

What we do NOT collect

The content of the email you actually send. The email is composed in your own mail client, sent from your own address, and we don't see it. The only exception is when an organiser has enabled "reply capture" — in that case, if you choose to forward an MP's reply to our forwarding address, the contents of that forwarded email are stored against the campaign (see "Reply capture" below).
Your email address. We don't ask for it. The recipient (your MP / councillor) sees your real email because you sent from your own client — that's their copy, not ours.
Browsing across other sites. No third-party advertising trackers. No retargeting cookies.

BCC send confirmation

The mailto link we generate includes a unique BCC address on a domain we operate. When you press send, your email client copies that BCC and delivers a copy back to us. We use it only to confirm the email actually went out (not just that you clicked the button) and we don't read or forward it. The BCC is per-click and contains no personal data — just a random token tying it to your click.

Reply capture (optional, per campaign)

Some campaigns invite you to forward MP/councillor replies back to us so the organiser can see what's coming back. Forwarding is entirely your choice. If you do, we store the forwarded subject, the original recipient's address, and the body of the reply, against the campaign. Reply capture is never enabled silently — the campaign page will tell you when this option is offered.

Cookies

We set one strictly-necessary cookie (cm_session) only on logged-in admin pages. The public campaign pages set no cookies of our own. If a campaign organiser has plugged in Google Analytics, GA's cookies will be set on their pages — see our Cookie Policy for the full list.

Data sharing

We share data with the following third parties, only to the extent needed to provide the service:

Cloudflare — hosts the application, the database, and the inbound mail handler.
UK Parliament — we send your postcode to members-api.parliament.uk to look up your MP. They don't get your name.
mySociety MapIt — we send your postcode to mapit.mysociety.org to find your local council and ward.
Resend — sends invitation, password-reset, and weekly-digest emails for organiser accounts only. Not used for any campaign-supporter emails.

Retention

Aggregated event records (campaign views, postcode lookups, sends) are kept indefinitely so campaigns can be reported on after they finish. You can ask us to delete records associated with your hashed IP — see "Your rights" below.

Your rights (UK GDPR)

You can ask us to access, correct, or delete any data we hold about you. Email us at harry@sassoon.uk. Because we don't store your email or name against an identifier, we'll usually need additional context (the campaign you used and approximate date) to find the relevant records.

If you're not happy with how we've handled your data, you can complain to the Information Commissioner's Office (the UK's data-protection regulator).

Changes

We'll update this page when we change anything material, and bump the "last updated" date at the top.