BeyondtheVote
Sign in

Privacy Policy

Beyond The Vote is an independent, non-partisan project operated by Ten Days Consulting Limited, a company registered in England and Wales (company number 14320570). This policy explains what personal data we collect, how we use it, and what rights you have under UK GDPR and the Data Protection Act 2018.

Last updated: 17 April 2026.

Who’s responsible for your data

Ten Days Consulting Limited is the data controller for the personal data processed by Beyond The Vote. You can contact us about any privacy matter at hello@beyondthevote.co.uk.

What We Collect

If you browse without signing in

With your consent (see the cookie banner), we collect anonymous usage data to understand how the site is used: which pages are visited, which sections are viewed, and how interactive features (such as filters and search) are used. If you decline analytics in the cookie banner, none of this is collected.

We do not use third-party analytics services or advertising trackers. On-site analytics are processed on our own servers and are never shared with third parties.

If you create an account

When you sign up, we store the information you provide: your email address and, if you sign in with Google, your name. We use this to authenticate you and to associate your preferences (such as followed constituencies) with your account.

When you are signed in and have consented to analytics, usage data is linked to your account so we can improve the service.

If you ask a question in the Ask feature

Questions you submit to the Ask feature are sent to Anthropic (in the United States), who provide the AI model that generates the answer. We also store the question text, the generated answer, retrieval plan, token counts, and latency in our own database so we can audit and improve answer quality. Please don’t submit personal data, confidential information, or anything you wouldn’t want logged as part of your question.

If you submit feedback or a correction

Messages you submit via the feedback widget or “Report an issue” link are stored alongside the page you submitted them from. If you provide an email address, we store it so we can reply.

If you pay for a subscription

Payment processing is handled by Stripe. Stripe stores your card details and bills you on our behalf — we never see or store your card number. We do store a record of your subscription (status, tier, renewal date, and the Stripe customer/subscription identifiers) so we can deliver the service and meet our tax record-keeping obligations.

Legal Bases for Processing

  • Consent (Art. 6(1)(a)) — analytics cookies, newsletter/briefing subscriptions, and any marketing email.
  • Contract (Art. 6(1)(b)) — providing the account and subscription services you sign up for.
  • Legal obligation (Art. 6(1)(c)) — retaining financial records for HMRC (six years).
  • Legitimate interests (Art. 6(1)(f)) — improving answer quality (Ask logs), preventing abuse, and responding to feedback.

Processors & International Transfers

We use the following third-party processors. When data leaves the UK, we rely on the UK’s standard transfer safeguards (the UK International Data Transfer Addendum).

  • Railway (infrastructure hosting) — United States.
  • Cloudflare (DNS, content delivery, object storage) — United States with UK edge locations.
  • Resend (transactional and newsletter email) — United States. Stores email open and click events on our behalf.
  • Anthropic (AI model for the Ask feature) — United States. Under Anthropic’s commercial terms, API inputs are not used to train their models.
  • Stripe Payments UK, Ltd. (payments) — United Kingdom and United States.
  • Google (optional sign-in only) — only if you choose Google sign-in. Governed by Google’s privacy policy.

We do not sell or share your personal data for advertising or marketing by any third party.

Cookies & Storage

We divide cookies and browser storage into two groups:

Strictly necessary — always on

  • Session cookie — keeps you signed in if you have an account.
  • CSRF cookie — protects authenticated form submissions from cross-site request forgery.
  • View & glossary preferences — remember your display choices (“At a Glance” vs “Full” view, glossary on/off).

These don’t need consent under UK rules.

Analytics — consent required

  • Session identifier in sessionStorage — a random ID used to group your page views within a single visit.
  • Consent record in localStorage (btv.consent) — remembers your accept/reject choice so we don’t re-ask every visit. Set only once you’ve made a choice.

We collect these only if you accept the cookie banner.

Email Tracking

Emails we send to subscribers (such as constituency briefings, digests, and feature updates) include a small invisible image that lets us tell when the email is opened, and links rewritten through links.beyondthevote.co.uk that record which links you click. We use this to measure whether our emails are useful and to improve what we send. Authentication emails (sign-in links and password resets) are not tracked.

Open and click data is processed by Resend (our email provider) and stored on our own servers, joined to your account.

You can opt out of newsletter and digest emails at any time using the unsubscribe link in any email, by unfollowing constituencies, or by changing your email preferences in your account.

How Long We Keep Data

  • Account data — until you delete your account, then within 30 days before we fully erase it.
  • Page analytics — 24 months, then deleted or aggregated to an anonymised form.
  • Ask logs (question, answer, retrieval plan) — 12 months linked to your account; thereafter the user link is removed and the Q&A text is retained in anonymised form for quality analysis.
  • Feedback and correction submissions — retained indefinitely for audit; user link removed on account deletion.
  • Email open / click events — 12 months.
  • Subscription and payment records — 6 years from the end of the accounting period, as required for UK tax compliance.

Your Rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you (Art. 15)
  • Ask us to correct inaccurate data (Art. 16)
  • Ask us to delete your account and associated data (Art. 17)
  • Port your data to another service in a machine-readable form (Art. 20)
  • Object to processing based on legitimate interests (Art. 21)
  • Withdraw consent at any time (Art. 7(3))

To use any of these rights, email hello@beyondthevote.co.uk. Signed-in users can also export and delete their data self-service from the account settings page.

If you believe we have mishandled your data, you have the right to lodge a complaint with the UK Information Commissioner’s Office at ico.org.uk/concerns.

Children

Beyond The Vote is not intended for children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has signed up, contact us and we will delete the account.

Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via the site. The “last updated” date at the top of this page reflects the most recent revision.