Privacy policy

Right to Make exists to show lawmakers exactly who opposes California AB 2047, by name. That only works if we handle your data honestly, so this policy is written to be read. The short version: we collect what the petition needs and nothing else, we never sell or share your data for marketing, your email is never public, and you can export or erase everything yourself, at any time, without asking us.

The Right to Make campaign is operated by Keep On Making Ltd, a company registered in England and Wales (company number 16688194), Prospect House, 50 Leigh Road, Eastleigh, SO50 9DT, United Kingdom. Contact: hello@righttomake.com.

When you sign: your first and last name, email address, country and area, what best describes you (your sector), an optional note, your badge and visibility choices, and timestamps of your consent and verification. We use this to (1) verify that every signature belongs to a real, unique person (one signature per email), (2) show the public wall and map according to your visibility choice, and (3) deliver the petition, with signers' names, roles, and locations, to California lawmakers. That delivery is the entire point of signing, so it always includes your details even if you hide them on the public wall. Your email address is never published and never given to lawmakers.

The lawful basis for all of this is your consent, recorded when you sign. Campaign email updates are a separate, optional consent: we only send them if you switched them on, and you can switch them off in your account at any time. Updates cover this campaign and the wider right to make movement (laws like AB 2047 appear elsewhere too); your signature itself always stays attached to exactly the petition you signed, and is never repurposed for a different one.

No advertising, no data sales, no profiling, no tracking cookies. Our analytics (Vercel Web Analytics) are cookieless and aggregate only: we can see that pages were visited, not who you are. The only cookies we set are the strictly necessary ones that keep you signed in to your own account.

Your signature is stored with Supabase in the European Union (Ireland). Supporting services process limited data on our behalf: Resend (sends the verification and account emails), Vercel (hosts the website), and Cloudflare (network security and the anti-bot check on the form). Each acts under a data processing agreement, and where a provider processes data outside the UK/EU, transfers are covered by recognised safeguards (the EU-US Data Privacy Framework or standard contractual clauses). We never hand your data to anyone for their own purposes.

For as long as the campaign against AB 2047 (and successor efforts it explicitly continues into) runs, because the petition's weight is its verified, standing record, or until you erase your signature, whichever comes first. Unverified signatures that are never confirmed are periodically deleted.

You can sign in to your account at any time to: see everything we hold about you, export it, change what is publicly visible, change your badge, switch email updates on or off, or erase your signature and account completely (erasure is immediate and total, including your entry on the wall and map). You also have the legal rights to access, rectification, erasure, restriction, portability, and to withdraw consent, and you can exercise any of them by email: hello@righttomake.com. If you believe we have handled your data badly, you can complain to the UK Information Commissioner's Office at ico.org.uk.

The petition is not directed at children under 13, and we do not knowingly accept their signatures. If you believe a child has signed, email us and we will erase it.

If this policy changes in a way that matters, we will update this page and, where the change affects how your existing data is used, tell signers who opted into email updates. The date at the top always reflects the current version.