Privacy Policy

Updated: 5th January 2026
Email: compliance@objectnow.co.uk

1. Purpose and Legal Status of this Policy

1.1 This Privacy Policy explains how personal data and related information is collected, processed, stored, and protected by ObjectNow.
1.2 This Policy is intended to comply with the Data Protection Act 2018 and the UK General Data Protection Regulation.
1.3 It applies to all use of the ObjectNow website, the objection letter generation platform, and associated online services.
1.4 This Policy forms part of the contractual framework governing use of the platform and should be read alongside the Terms and Conditions.
1.5 Nothing in this Policy limits or excludes statutory rights available to individuals under data protection law.

2. Identity, Status, and Role of ObjectNow

2.1 ObjectNow operates as a civic participation platform created and maintained by campaigners acting in a voluntary capacity.
2.2 ObjectNow is not operated as a commercial business and is not constituted as a charity, trust, or incorporated entity.
2.3 For the purposes of data protection law, ObjectNow acts as a data controller in respect of personal data processed through its website and services.
2.4 ObjectNow determines the purposes and means of processing personal data only to the extent necessary to operate the platform and facilitate civic participation.

3. Scope of this Privacy Policy

3.1 This Policy applies to all use of the ObjectNow website, including general browsing, viewing of content, interaction with pages, completion of forms, and use of the objection letter generator.
3.2 It applies whether or not a user completes or submits an objection.
3.3 It applies to personal data provided directly by users and to limited technical data generated through interaction with the website for security, reliability, and operational purposes.
3.4 This Policy also applies to ObjectNow’s official social media presence, to the extent that ObjectNow acts as a data controller in respect of interactions it controls.
3.5 This Policy does not apply to third party websites, platforms, or services linked to or from the ObjectNow website or social media accounts.

4. Lawful Basis for Processing

4.1 ObjectNow processes personal data where such processing is necessary for the performance of a contract with the user, namely the provision of the objection generation and submission service.
4.2 Processing is also carried out where necessary for compliance with legal obligations and for legitimate interests relating to platform security, abuse prevention, and the protection of users and volunteers.
4.3 ObjectNow does not rely on consent as the primary lawful basis for core objection processing.
4.4 Where consent is required by law, including in relation to certain cookies, it is obtained explicitly.

5. Categories of Personal Data Collected

5.1 ObjectNow collects only personal data that is strictly necessary for the operation of the platform.
5.2 This may include name, postal address, postcode, email address, and any personal comments voluntarily provided by the user.
5.3 Technical and security related data may also be processed, including IP addresses, timestamps, and limited server log information.
5.4 ObjectNow does not intentionally collect special category personal data and users are advised not to submit such information.

6. How Personal Data is Collected

6.1 Personal data is collected directly from users when they interact with the website, complete forms, or submit objections.
6.2 Technical data, including IP addresses and server access information, may be generated automatically through interaction with the website.
6.3 Such data is collected solely for security monitoring, abuse prevention, fault diagnosis, and service reliability.
6.4 ObjectNow does not obtain personal data from third party data brokers.

7. Purpose of Processing

7.1 Personal data is processed solely to generate objection letters, transmit objections to relevant authorities, maintain submission records, issue supporter codes where applicable, and ensure platform security and integrity.
7.2 IP address data is processed to protect the platform against unauthorised access, denial of service attacks, automated abuse, and other unlawful or malicious activity.
7.3 Where required by law, or where there is a reasonable belief that unlawful activity has occurred, relevant technical data may be disclosed to competent authorities.
7.4 Personal data is not used for marketing, advertising, profiling, or behavioural tracking.
7.5 ObjectNow does not carry out automated decision making or profiling within the meaning of data protection law.

8. Artificial Intelligence and Data Use

8.1 Artificial intelligence tools are used only to assist with drafting and assembling objection content.
8.2 Personal data is not used to train artificial intelligence models for external or unrelated purposes.
8.3 Cached objection content reused by the system is non personal and cannot be linked to identifiable individuals.
8.4 Human oversight applies to all foundational objection content prior to public use.

9. Cookies and Similar Technologies

9.1 ObjectNow uses cookies and similar technologies to ensure the reliable operation of its website and objection platform.
9.2 Cookies are used on the objection platform where they are strictly necessary to enable core functionality, including session handling, form progression, security validation, and submission integrity.
9.3 Without the use of essential cookies, the objection platform cannot function and objection letters cannot be generated or submitted.
9.4 Users are informed prior to use that acceptance of essential cookies is required to access the objection platform.
9.5 Where essential cookies are not accepted, the objection platform will not proceed.
9.6 Following successful submission of an objection, objection related cookies are removed from both server side and user side systems to the extent technically practicable.

9.7 The main ObjectNow website also uses cookies to improve user experience, accessibility, and navigation.
9.8 Users are provided with a clear cookie notice on both the main website and the objection platform requesting approval where required by law.
9.9 Users may disable non essential cookies via the cookie notice or browser settings.
9.10 Disabling non essential cookies may affect certain site features but will not prevent general browsing of the main website.
9.11 ObjectNow does not use cookies for advertising, third party tracking, or behavioural profiling.

10. Social Media and Third Party Platforms

10.1 ObjectNow maintains a presence on social media platforms for informational and engagement purposes.
10.2 Where users interact with ObjectNow via social media, personal data may be processed by the platform provider in accordance with that provider’s own policies.
10.3 ObjectNow has no control over how third party platforms collect, process, or use personal data.
10.4 Users are encouraged to review the privacy policies of any third party platform they use.

11. Data Storage and Security

11.1 ObjectNow implements reasonable and proportionate technical and organisational measures to protect personal data.
11.2 Personal data is stored in encrypted form where reasonably practicable.
11.3 Access to systems is restricted to what is operationally necessary.
11.4 While no internet based system can be guaranteed to be entirely secure, ObjectNow takes security obligations seriously.

12. Data Retention

12.1 Objection letters are deleted from ObjectNow systems immediately following successful submission.
12.2 Encrypted personal data and limited technical logs, including IP related security data, are retained only for as long as necessary for security, abuse investigation, and legal accountability.
12.3 Retention periods are reviewed regularly and data is not retained longer than necessary.

13. Disclosure of Personal Data

13.1 Personal data contained within objection letters is disclosed only to the relevant planning authority or public body.
13.2 Technical and security related data may be disclosed to law enforcement or regulatory authorities where required by law or where disclosure is necessary to investigate or prevent unlawful activity.
13.3 ObjectNow does not sell, rent, or share personal data for commercial purposes.

14. Publication by Authorities

14.1 Planning authorities may publish objections on publicly accessible portals.
14.2 ObjectNow includes a formal request asking that personal details be redacted from public display.
14.3 The decision whether to redact rests solely with the authority concerned.

15. International Transfers

15.1 ObjectNow does not intentionally transfer personal data outside the United Kingdom.
15.2 Where processing involves infrastructure outside the UK, appropriate safeguards are applied.

16. Data Subject Rights

16.1 Users have rights of access, rectification, erasure, restriction, and objection as provided by law.
16.2 Users have the right to lodge a complaint with the Information Commissioner’s Office.

17. Exercising Your Rights

17.1 Requests should be made using the contact mechanism provided on the ObjectNow website.
17.2 Reasonable verification of identity may be required.
17.3 Requests are handled within statutory time limits.

18. Data Breaches

18.1 ObjectNow maintains procedures to detect, assess, and respond to personal data breaches.
18.2 Where notification is required by law, ObjectNow will notify the relevant authority and affected individuals.

19. Changes to this Policy

19.1 This Privacy Policy may be updated to reflect legal or operational changes.
19.2 Updated versions will be published on the website.
19.3 Material changes will not apply retrospectively to personal data already processed.

20. Governing Law and Jurisdiction

20.1 This Privacy Policy is governed by the law of Scotland.
20.2 Any dispute arising in connection with this Policy shall be subject to the exclusive jurisdiction of the Scottish courts.