Privacy policy
Last updated: 22 August 2026
This page explains how Steven Webb's Campaign Hub stores volunteer details. Read it once, tick the box when you register, and you can forget the paperwork. If you later want your data changed or deleted, email the address below.
Who is responsible
The data controller is Cllr Steven Webb, representing Moresk and Trehaverne, Cornwall. Contact: email@stevenwebb.com.
What we collect when you register
- Your name (your first name can appear on the leaderboard and on walks you claim)
- Email address and username
- Password, stored only as a one-way hash — nobody can read the original password
- Telephone number, if you give one
- Whether leaflets should be posted to your home or collected, and your home address if you choose posting
- The date and time you accepted these terms and this privacy policy
If an organiser adds you by hand, they may store your name and, optionally, email, phone, and address. Those accounts do not use the public registration form.
What we add later
- Which delivery walks you claim and complete
- Door and leaflet totals credited to you
- Optional notes you leave on a walk
- Whether your account is pending, approved, or rejected
Why we use it
We use this information only to run leaflet rounds:
- To create your account and decide whether to approve it
- To know where to send leaflets, or that you will collect them
- To show which walks are available, claimed, or done
- To email you campaign updates if you have given an email address
- To notify the organiser when a walk is claimed or completed
We do not sell your data, use it for advertising, or share it for other campaigns.
Who can see your details
- The campaign organiser can see your full account, including phone and leaflet address, and may receive those details in a claim or completion email.
- Other volunteers can see your first name on a claimed walk and on the leaderboard. They cannot see your email, phone, address, or password.
How it is stored and protected
Your information is held in a MySQL database on a UK Plesk server for leaflets.stevenwebb.uk. Access to admin pages is limited to approved organiser accounts. The site uses:
- Encrypted HTTPS connections
- Passwords hashed with PHP's one-way password function
- Prepared database queries to reduce the risk of misuse
- A security token on forms, to stop other sites submitting them in your name
- A login cookie that is HttpOnly, Secure on HTTPS, and SameSite=Lax, kept for up to 28 days so you stay signed in
Cookies
We use essential cookies only: one to keep you logged in, and one to protect forms. There are no analytics, advertising, or tracking cookies, so there is no cookie banner.
Services that help run the site
- Resend (when configured) or the server mail function, to send organiser notices and volunteer emails
- OpenAI, only when an organiser uploads a walk map. That is campaign map data, not your account
- Google Fonts and Leaflet map files, loaded in your browser from their content networks
How long we keep it
We keep your account and delivery record while you volunteer, and for a reasonable time afterwards so the campaign has a complete round history. You can ask for deletion at any time.
Your rights
Under UK GDPR you can ask to see the data we hold, correct it, delete it, or restrict how it is used. You can also complain to the Information Commissioner's Office at ico.org.uk.
To use any of these rights, email email@stevenwebb.com. We will reply within one month.
How to have your data removed
Email email@stevenwebb.com and we will delete your account as soon as practicable, unless the law requires us to keep a particular record.
Changes
If this policy changes, the new version will be on this page with an updated date.