Skip to main content

GDPR and Personal Data

What is GDPR?

GDPR stands for General Data Protection Regulation.

It’s the UK version of EU data protection legislation. If we break this law, we risk consequences to the whole organisation and our ability to communicate.

Plus, we want to take care of each other, and that includes being careful with information about each other, so complying with GDPR rules is totally in accordance with our XR Principles and Values.

Following GDPR is about showing respect to rebels. We want to ensure that all rebels’ personal data is treated with respect and protected from misuse. GDPR provides a sensible set of principles that can help us to do that. If you’re collecting or using personal data, the resources here will help you to understand what you need to do.

  • Watch the short 6-minute video explainer of why GDPR is important to you and XR.
  • Check your understanding using our GDPR training deck. Quick and easy exercises to help you remember the core concepts!

Note: It's important to learn more about 'phishing' - about how spam email/texts etc can trick us into giving access to our own and other's data.

What to do next

Once you know what "personal data" is, check out the Data Plan below if you:

  • Plan to get personal data - so you need to make a Data Plan.
  • Already have personal data and you haven't created a Data Plan yet.
  • You are changing how you use personal data - so your Data Plan needs updating.

Writing a Data Plan will help you safely plan any collection of new data. If you already have data, the same process of making a data plan will help you know if it's safe, if anything needs deleting and how long to keep it.

Unsubscribing and data deletion

Ways to do this yourself...

Action Network emails lists
Follow this link to find more information about how to unsubscribe, update details or join a new local group.

Hub, Forum, Cloud, Mattermost and Vault
You can remove yourself from The Hub, Forums, Cloud, Mattermost and the Vault - click the person icon at the top right of the Hub, click Settings, then click Delete me.

How to get help with this...

If you don't want to hear from XR services again e.g. from The Hub, Mattermost, Volunteer website, Rebel Toolkit, Rebellion Academy, CRM systems, Action Network, TESN, Arrestee & Legal Support or Finance contact dataprotection@rebellion.earth. Please specify in your email which systems you want to stop messages from (otherwise someone has to spend a long time checking all of them).

If you want to be removed from our systems, contact dataprotection@rebellion.earth. It would help us to know which systems you want to be removed from (otherwise someone has to spend a long time checking all of them). In some cases we won't be able to remove all your entries - in which case we'll let you know which we need to keep.


You can contact us via our GDPR & Security Reception channel on Mattermost or by email at dataprotection@rebellion.earth.