anchor.diff:      </p>
   
       <p>
  -      Details about the lawful basis for processing personal data can be found on the
  +      Guidance about the lawful basis for processing personal data can be found on the
         <a href="https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/lawful-basis-for-processing/" target="_blank">
  -        Information Commissioner’s website.
  +        Information Commissioner’s website
         </a>
  -    </p>
  -
  -    <p>
  -      Unboxed Consulting Limited who provide technical support for the petitions system
  -      will also have access to the system for troubleshooting and maintenance purposes only.
       </p>
   
       <section id="sharing-personal-data" aria-labelledby="sharing-personal-data">
  
positive.code:         </li>
          <li>
            Other organisations where there is a lawful basis to do so or a duty to
            disclose in order to comply with any legal obligation.  For example, the Police,
            for the purposes of prevention and detection of crime
          </li>
        </ul>
  
        <p>
          We will never share or sell your personal data to other organisations for direct marketing purposes.
  
negative.code:       </ul>
  
        <p>
          Where we are relying on your consent to use your personal data, you can withdraw
          that consent at any time by contacting
          <a href="mailto:petitionscommitteeprivacy@parliament.uk"> petitionscommitteeprivacy@parliament.uk</a>
          or the Data Protection Officer. 
        </p>
  
        <p>
          Personal data associated with the signing of an e-petition can only be erased
          by removing the signature from the petition, in cases where a petition has been
          signed by mistake or where the requester no longer supports the request of the petition.
          This is to ensure that validity and accuracy of the total number of signatures on each
          petition. You can request the removal of your signature from a petition for these reasons
          by contacting <a href="mailto:petitionscommitteeprivacy@parliament.uk"> petitionscommitteeprivacy@parliament.uk</a>
          or the Data Protection Officer.
        </p>
  
        <p>
          Some of your rights are subject to the exceptions specified in the UK GDPR
          and Data Protection Act 2018, in particular:
        </p>
  
        <ul class="list-bullet">
          <li>
            Processing for the performance of a public task – some rights do not apply
            for the processing of personal data for the starting or signing of e-petitions.  
          </li>
          <li>
            Parliamentary Privilege - some rights do not apply where required for
            the purpose of avoiding an infringement of the privileges of either House
            of Parliament. (para. 13 of Schedule 2 DPA 2018)
          </li>
          <li>
            Archiving in the public interest – some rights do not apply for the processing
            of personal data for archiving purposes (para. 28 of schedule 2 DPA)
          </li>
        </ul>
  
        <p>
          Please note: Formal Individual Rights Requests are managed by the House of Commons
          Information Compliance Service who will retain your request, including any relevant
          personal data, to demonstrate we have met our legal obligations under data protection
          legislation.  These records are kept securely for two years, after which they are destroyed.  
        </p>
  
        <p>
          If you have any concerns relating to the use of your personal data by the Petitions
          Committee please contact 
          <a href="mailto:petitionscommitteeprivacy@parliament.uk"> petitionscommitteeprivacy@parliament.uk</a>
          in the first instance.  
        </p>
  
        <p>
          You may also complain to the Data Protection Officer whose contact details can be found at Section 1.
        </p>
  
        <p>
  