How I handle your data

Who I am

I'm Rachel Glover, the Independent candidate for Onchan. I'm the data controller for everything submitted through this site. You can contact me at [email protected].

What I collect, and why

When you sign up to the newsletter

I store your email address. I send a confirmation email; you only get added to the list once you click the link in it. The lawful basis is your consent. You can unsubscribe at any time using the link at the bottom of every email.

When you contact me through the site

I store the name, email, message, and (if you provided it) phone number you submitted. I use it to reply to you. Private contact stays private. The lawful basis is my legitimate interest in being able to respond to constituents.

When you submit a question for the public Q&A

I store the question and your email so I can let you know if I publish my answer. If you ticked the box giving me permission to publish, I may publish your question (with my answer) but never your email. The lawful basis is your consent.

When you book a meeting

I store your name, email, the time you booked, and (for in-person meetings) the address or postcode you supplied so I can come and see you. The lawful basis is performance of the meeting you've asked for.

When you comment on a blog post

I store your name, email, comment, your IP address, and a hash of your IP. Your name and comment appear publicly once approved; your email, IP address, and IP hash do not — they're only ever visible to me, used to moderate comments and identify repeat or abusive submitters. The lawful basis is your consent (you submitted the comment knowing it would be published) combined with my legitimate interest in keeping the comments section workable.

Where your data lives

The site and its database are hosted by fortrabbit in Germany. Transactional and newsletter email is sent through Resend. Both are GDPR-aligned. I do not transfer your data outside the EU/UK other than via these providers, and I do not use US-based marketing platforms (no Mailchimp, Constant Contact etc.).

How long I keep it

The election is on 24 September 2026. After that, regardless of the result:

• Contact cases and meeting bookings are deleted within 30 days.
• Volunteer records are deleted within 30 days unless you've opted in to staying on the newsletter.
• Newsletter subscribers: I'll write to you before deletion to ask whether you'd like to stay subscribed for any post-election communications.
• Unsubscribe records are kept indefinitely as a suppression list, that's a legal requirement so we never accidentally email someone who's opted out.
• Published Q&A pairs and blog comments stay as long as the site does (they're content), but personal identifiers attached to them are minimised.

Who I share it with

Nobody, except the hosting and email providers named above when that's required to deliver the service. I do not sell, trade, or share your data with other candidates, parties, or any commercial third party.

Your rights

Under the Isle of Man Data Protection Act 2018 and (where applicable) UK/EU GDPR, you can:

• ask me what data I hold on you,
• ask me to correct it,
• ask me to delete it,
• ask me to give you a copy of it,
• withdraw consent for any processing based on consent (for example, unsubscribe from the newsletter),
• complain to the Isle of Man Information Commissioner if you think I've handled your data unfairly: inforights.im.

Email me at [email protected] and I'll come back to you within 30 days.

Cookies and analytics

I keep these to a minimum. There's a separate cookies page with the full list and a way to change your mind any time.

Changes to this policy

If anything material changes here, I'll bump the "last updated" date at the top and write about it on the blog so people on the newsletter know.