Privacy Policy

Safer Fireworks is operated by the British Fireworks Association.

Privacy contact: info@saferfireworks.co.uk

The Consultation Assistant asks for information you choose to provide so it can prepare editable responses to the Government consultation.

• your role or relationship to fireworks
• selected views and concerns
• selected occasions
• optional free-text details
• optional personal experiences
• business-impact information where relevant

This information is used to create consultation answers that you can review, edit and copy into the official Government form.

Your consultation answers and generated drafts may be stored locally in your browser on this device so you can continue later. This information is not stored in a BFA consultation database.

Selected interview answers and relevant response context are sent securely to the OpenAI API to generate consultation responses and MP-email text.

• The website does not send the MP lookup address, postcode, surname or personal email address to OpenAI.
• The MP-email prompt may include the first name, MP name, constituency, selected views and generated consultation responses.
• User input sent through the API may be subject to OpenAI's API data-handling and abuse-monitoring retention terms.
• Data sent through the OpenAI API is not used to train OpenAI models by default unless the account holder has opted into sharing.

OpenAI states that API abuse-monitoring logs may be retained for up to 30 days by default, and that Zero Data Retention requires separate approval. See OpenAI API data controls.

Interview progress, generated consultation drafts, edits, improvement history and the active workspace stage may be saved locally in your browser so you can continue later.

• This information remains on your device until it is cleared, reset or removed through browser controls.
• This information is not stored in a BFA consultation database.
• You can clear it through browser controls.
• The assistant includes a control to clear saved consultation data from this browser.

The Consultation Assistant also includes a "Clear my saved consultation data" control that removes this site's consultation-related local storage from the current browser.

The site also stores a small first-party privacy-preferences record in local storage so it knows whether the first-visit privacy notice has already been shown. That record contains only a version number, optionalAccepted:false and an update time.

The optional MP-email feature asks for first name, surname, address line 1, town or city, postcode and email address.

• The postcode is used server-side to identify your MP.
• Parliament's public Members API is used for the lookup.
• The address information is used to support the constituent context.
• The site does not automatically send the email.
• The details are not stored in a database.
• Your name, address, postcode and personal email address are not stored in local storage by this website.
• Your postcode is used temporarily to identify your MP and is not sent to OpenAI.
• The information exists temporarily in the browser and request memory while the email text is prepared.
• These details must not be deliberately logged or sent to analytics.
• The site may record anonymous aggregate MP coverage events using public MP and constituency identifiers only.

The optional email-form route asks for the details required by the official Government response form: name, email address, whether you are responding as an individual or organisation, and organisation details where relevant.

• These details are used temporarily to create the completed response document.
• Your name, email address and organisation details are not stored in local storage by this website.
• The document is generated when you request it and downloaded to your device.
• The BFA website does not send the response to Government. You send it yourself from your own email account.
• These identity fields are not sent to OpenAI.
• Vercel Analytics events for this feature use only broad action or outcome categories and do not include these fields.

The website is hosted by Vercel and Vercel Web Analytics is enabled. Vercel Web Analytics records anonymous aggregate page and event information. This implementation is cookie-free for analytics and does not use a cross-site persistent visitor cookie.

Custom events contain only broad non-identifying categories and actions. Free-text consultation answers, addresses, postcodes, names and email content are not intentionally sent to analytics.

When a user generates a consultation response, the site may send aggregate structured option-selection events so the BFA can understand campaign performance. These events contain only a question identifier and an option identifier. They do not include free-text answers, generated responses, names, addresses, postcodes, email addresses or draft ids.

We may record anonymous aggregate information about which MPs and parliamentary constituencies our MP-email tool is used for. This helps us understand campaign reach. We do not record which individual contacted an MP, their postcode, or the content of their email as part of this analytics event.

Authorised BFA administrators may view aggregate analytics dashboards and exports. The dashboard is designed to show campaign totals and trends only, not individual respondents.

Hosting infrastructure may still process technical information needed to serve and secure the website. See Vercel Web Analytics privacy information.

The postcode is sent to Parliament's Members service to identify the relevant MP and retrieve published parliamentary contact information. The current implementation does not ask Parliament to verify the full address.

"Open in my email app" uses a mailto link. Your browser or email software handles that action. The website does not send the message.

The website can prepare a completed Government consultation response email in your own email application. Your name, email address, organisation details and generated consultation text are used only to build that email or response document in the current browser session and are not added to BFA analytics.

Copied email content is handled by your device clipboard and by whichever email provider you choose to use.

• providing the requested response-writing service: processing necessary to provide the service requested by the user
• optional MP lookup and email preparation: processing initiated at the user's request
• anonymous aggregate website analytics and site security: legitimate operational interests, subject to applicable data-protection law and storage/access rules
• privacy-preference record: remembering the user's privacy-notice choice
• legal obligations where applicable

• No consultation-response database is intentionally maintained by the application.
• Browser-stored consultation workspace data remains until it is cleared, reset or removed by browser controls.
• The privacy-preferences record remains until it is removed through browser controls or the site changes its storage practices and asks again.
• MP lookup details are not deliberately persisted by the application.
• Government response-email and response-document respondent details are not deliberately persisted by the application.
• Hosting and API providers may keep technical or abuse-monitoring records under their own terms.
• Vercel Analytics retains data according to the project plan and Vercel's published terms.
• OpenAI API abuse-monitoring logs may be retained for up to 30 days by default unless different approved data controls apply.

• Vercel, for hosting and Web Analytics
• OpenAI, for consultation response and MP-email text generation
• UK Parliament Members API, for MP lookup
• your selected email provider, only when you choose to use it
• lawful authorities where legally required

Some service providers may process information outside the UK. Where this happens, those providers are expected to use their own contractual and data-transfer safeguards. This policy does not make guarantees that have not been independently verified.

UK data-protection law may give you rights to access, correct, delete, restrict or object to certain processing of your personal data.

Because most consultation data is not stored in an identifiable BFA database, the BFA may not be able to retrieve browser-local data or anonymous analytics events.

You can complain to the UK Information Commissioner's Office. See the ICO website.

This service is intended for people capable of understanding and responding to the Government consultation. Children should use it with a parent, guardian or responsible adult.

Last updated: 29 July 2026.