FuturePack CIC is a UK community interest company (Company No. 12084972, VAT No. 341722228) that operates the website futurepack.org. We are the data controller for the personal data we collect through this website.
If you have any questions about this privacy policy or how we handle your data, please contact us at:
Email: info@futurepack.org Organisation: FuturePack CIC
When you subscribe to the FuturePack Regulatory Briefing newsletter, we collect your email address. We use double opt-in, meaning you must confirm your subscription by clicking a link in a confirmation email before we add you to our mailing list.
When you submit an enquiry through our contact form, we collect your name, email address, company name (optional), enquiry type, and message content.
We use Google Analytics to understand how visitors use our website. Google Analytics uses cookies to collect anonymised data including pages visited, time spent on the site, referral source, approximate geographic location (country/region level), device type, and browser. This data is aggregated and does not identify you personally. Analytics cookies are only placed after you consent via our cookie banner.
Our website uses cookies. Please see Section 8 (Cookies) below for full details of what cookies we use and how you can manage your preferences.
We use your personal data for the following purposes:
Newsletter delivery: We use your email address to send the fortnightly FuturePack Regulatory Briefing. Lawful basis: Consent (Article 6(1)(a) UK GDPR).
Contact form enquiries: We use your name, email, company, and message to respond to your enquiry. Lawful basis: Legitimate interest (Article 6(1)(f) UK GDPR).
Website analytics: We use anonymised browsing data to understand how visitors use our site and improve our content. Lawful basis: Consent (for cookies).
We will never sell, rent, or share your personal data with third parties for their marketing purposes.
We use the following third-party services to process your data on our behalf. Each acts as a data processor under UK GDPR and processes data only on our instructions:
MailerLite (EU — Lithuania): Newsletter delivery and subscriber management. Processes email addresses, subscription dates, and engagement data.
Brevo (EU — France): Contact form email delivery. Processes names, email addresses, and message content.
Google Workspace (EU/UK data centres): Email hosting and file storage. Processes email correspondence.
Google Analytics (US, with UK GDPR safeguards): Website analytics. Processes anonymised browsing data via cookies.
GoDaddy (US/EU data centres): Website hosting. Processes server logs including IP addresses and access times.
Where data is transferred outside the UK, we ensure that appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) and the UK International Data Transfer Agreement (IDTA), as required by UK GDPR.
Newsletter subscribers: Your email address is retained for as long as you remain subscribed. When you unsubscribe, your email is moved to a suppression list (to prevent us re-subscribing you inadvertently) and all other data is deleted within 30 days.
Contact form enquiries: Correspondence is retained for up to 24 months from the date of the last communication, after which it is deleted.
Analytics data: Google Analytics data is retained for 14 months (the default GA4 retention period), after which it is automatically deleted.
Server logs: GoDaddy hosting logs are retained for up to 90 days.
Under UK GDPR, you have the following rights in relation to your personal data:
Right of access: You can request a copy of the personal data we hold about you.
Right to rectification: You can ask us to correct any inaccurate or incomplete data.
Right to erasure: You can ask us to delete your personal data (the “right to be forgotten”).
Right to restrict processing: You can ask us to limit how we use your data.
Right to data portability: You can request your data in a structured, machine-readable format.
Right to object: You can object to our processing of your data where we rely on legitimate interest.
Right to withdraw consent: Where we process data based on your consent (such as the newsletter), you can withdraw consent at any time by clicking the unsubscribe link in any newsletter or by contacting us at info@futurepack.org.
To exercise any of these rights, please email info@futurepack.org. We will respond to your request within one month, as required by UK GDPR.
Our website and services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.
Cookies are small text files stored on your device when you visit a website. We use the following types of cookies:
These are required for the website to function and cannot be switched off. They include WordPress session cookies and security cookies. No consent is required for these cookies under PECR.
We use Google Analytics (GA4) to understand how visitors interact with our website. These cookies collect anonymised data about page views, session duration, referral sources, and general geographic location. Analytics cookies are only placed after you give consent via our cookie banner.
The cookies used are: _ga (distinguishes unique users, duration 2 years) and ga[ID] (maintains session state, duration 2 years), both set by Google Analytics.
When you first visit our website, a cookie consent banner will ask whether you accept or reject non-essential cookies. You can change your preferences at any time by clicking the Cookie Settings link in our website footer. You can also control cookies through your browser settings — all major browsers allow you to block or delete cookies.
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include SSL/TLS encryption on all pages of our website, secure authentication for all administrative access, Data Processing Agreements with all third-party processors, and regular review of data access and retention practices.
We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. The “Last updated” date at the top of this page indicates when the policy was most recently revised. We encourage you to review this page periodically.
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
Website: ico.org.uk Telephone: 0303 123 1113 Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
We would appreciate the opportunity to address your concerns before you contact the ICO, so please do get in touch with us first at info@futurepack.org.