Last updated: 30th October 2026
4 Billion Dead (Earth Services Ltd)** (“we”, “us”, or “our”) is a non-profit organization registered in England and Wales under Companies House number 17464931, with our registered office at 113 Downhills Way, London, England, N17 6AJ.
We are committed to protecting your personal data and upholding your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This notice explains how we process your personal data when you fill out or sign our online petitions, forms, or surveys (collectively, the “Forms”).
If you have any questions about this policy, please contact our Data Protection Officer (DPO) at datacontrol@4billiondead.org.
—
1. Why We Collect Your Personal Data
We process your personal data for the following purposes:
Managing Form Submissions: To process, record, and validate your participation or signature on our Forms, and prevent duplicate entries.
Campaign Updates: To send you updates regarding the specific Form you signed (e.g., campaign milestones, outcomes, next steps), where permitted.
Newsletters & Marketing:** To send you our newsletter, campaign alerts, and promotional communications (where you have consented or where legally permitted).
Public Display: To feature your name, provided comments, or photograph on our public website, only if you explicitly choose to make this public.
—
2. Personal Data We Collect
Depending on the Form, we may collect the following information (mandatory fields are clearly marked on each Form):
* Contact Data: Email address, telephone/mobile number, postal address, postcode.
* Identity Data: First name, last name, date of birth, gender.
* Visual Data: Profile photo or uploaded photograph.
* Technical & Preference Data: Session data and preferences stored locally on your device.
Note: If you do not provide the mandatory fields required for a specific Form, we will be unable to process your signature or participation.
—
3. Lawful Bases for Processing
We process your data under the following legal bases under the UK GDPR:
Legitimate Interests (Art. 6(1)(f)): For managing and validating Form submissions, ensuring platform security, and preventing fraud or duplicate entries.
Consent (Art. 6(1)(a)): For sending direct marketing communications, newsletters, or publicly displaying your photo/details on our website. You may withdraw your consent at any time by emailing datacontrol@4billiondead.org or clicking “unsubscribe” in our emails.
Explicit Consent (Art. 9(2)(a)): If any Form collects special category data (such as data revealing political opinions or biometrics/photos), we process it strictly on the basis of your explicit consent.
—
4. Who Has Access to Your Data?
Your personal data is restricted to authorized team members who require access to fulfill their roles and are bound by strict confidentiality obligations.
We may share your data with trusted third-party service providers acting as Data Processors (e.g., Dolphins SAS / Qomon, who host and maintain our online platform). These providers process data strictly under our instructions and are contractually required to maintain appropriate technical and organizational security measures.
We may also disclose your data if required to do so by court order, law enforcement, or applicable legal and regulatory obligations.
—
5. Data Storage & International Transfers
Your data is stored securely on servers located within the UK and the European Economic Area (EEA).
If we transfer your personal data outside the UK or EEA to a country not recognized as providing an adequate level of data protection, we ensure appropriate safeguards are implemented in accordance with UK GDPR requirements—such as the UK International Data Transfer Agreement (IDTA) or standard contractual addendums.
—
6. How Long We Retain Your Data
We keep your personal data only as long as necessary to fulfill the purposes for which it was collected:
Petition & Campaign Data: Retained for the duration of the relevant campaign plus 2 years to verify legitimacy, after which it is anonymized or deleted.
Marketing & Newsletter Data: Retained until you withdraw consent or unsubscribe.
Technical/Session Logs: Retained for up to 12 months for security and debugging purposes.
—
7. Your Statutory Rights
Under the UK GDPR, you hold the following rights regarding your personal data:
1. Right of Access: Request a copy of the personal data we hold about you.
2. Right to Rectification: Request correction of inaccurate or incomplete data.
3. Right to Erasure (“Right to be Forgotten”): Request deletion of your data when there is no compelling reason for its continued processing.
4. Right to Restrict Processing: Ask us to suspend processing your data in certain scenarios.
5. Right to Object: Object to processing based on legitimate interests or direct marketing.
6. Right to Data Portability: Request the transfer of your data to you or another controller in a structured, machine-readable format.
7. Right to Withdraw Consent: Withdraw previously given consent at any time without affecting the lawfulness of processing prior to withdrawal.
How to Exercise Your Rights
To exercise any of these rights, please contact us with proof of identity at:
Email: datacontrol@4billiondead.org
Post: 113 Downhills Way, London, England, N17 6AJ
Complaints
If you are unhappy with how we process your personal data, you have the right to lodge a complaint with the UK supervisory authority:
Information Commissioner’s Office (ICO)
Website: [ico.org.uk](https://ico.org.uk)
Helpline: 0303 123 1113