Privacy Policy for Richard Burgon MP Constituency Newsletter

This privacy policy sets out how Richard Burgon MP will use and protect your personal data. We collect, process and retain data for use in political campaigning and associated activities.

Contents

1. Who we are

2. Contacting us

3. Changes to the privacy policy

4. The purpose of this privacy policy

5. The data that we collect about you

6. How do we collect your personal data

7. How do we use your personal data

8. When we will share your data

9. Cookies

10. Third party links

11. Privacy shield

12. Data security

13. How long we will hold your personal data for

14. Your legal rights

15. Your right to lodge a complaint

1. Who we are

Richard Burgon MP is the data controller and responsible for your personal data (referred to as “we”, “us” or “our” in this privacy policy).

2. Contacting us:

If you would like to get in touch with us about questions you have about this privacy policy or concerns or complaints about how your data has been processed, please contact Richard at Richard@RichardBurgon.com

3. Changes to the privacy policy

We keep our privacy policy under regular review and will notify you of any substantive changes. Any revisions to our privacy policy can be reviewed on this website.

4. The purpose of this privacy policy

This privacy policy gives you information on how we collect and process your personal data through:

your use of this website (including, but not limited to, any data you may provide through this website by, for example, signing-up to receive updates about Richard’s work as an MP); and/or

engaging with us on third party websites (this includes, but is not limited to, Facebook, Instagram and Twitter).

By collecting such data, we will be able to keep you updated about Richard’s work as an MP.

We do not knowingly process any personal details from individuals under the age of 14 without parent/guardian consent.

It is important that you read this privacy policy, and any other privacy policy or fair processing policy we may provide on specific occasions when we are collecting or processing personal data about you.

This privacy policy supplements other notices and privacy policies and is not intended to override them.

We want you to be fully aware of how and why we are using your data.

5. The data that we collect about you

Personal data, or personal information, means any information from which your individual identity could be discerned. It does not include anonymous data where the identity has been removed. We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

identity data, including first name, maiden name, last name, username or similar identifier, marital status, title, date of birth and/or gender;

contact data, including address, email address and/or telephone number(s);

technical data, including internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website and/or third party websites hosting our content;

profile data, including your username, your interests, preferences, feedback and/or survey responses;

usage data, including information about how you use our website; and/or

We also collect, use and share aggregated data such as statistical or demographic data for any purpose. Aggregated data could be derived from your personal data but is not considered personal data in law as this data will not directly or indirectly reveal your identity. For example, we may aggregate your usage data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect aggregated data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy policy.

6. How do we collect your personal data

We use different methods to collect data from and about you.

Provided by you – directly

You may give us your name and other contact details by filling in forms or by corresponding with us by post, phone, email or otherwise.

7. How do we use your personal data

We will only use your personal data when the law allows us to. We will use your personal data in the following circumstances:

Inform and engage you about Richard’s work as an MP;

Inform and engage you with any other campaigns and movements that share the values, principles and aims of Richard Burgon;

Comply with our legal obligations; and/or

Answer your queries and respond to your questions and/or complaints.

The legal bases

Where you have specifically consented to a particular use of your data (such as where you have subscribed to receive information about Richard Burgon’s work as an MP);

Where it is a necessary lawful basis for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests; or

Where we are obliged to process your data in a particular way by law (for example, if we are required to notify any authority or regulator of the nature or value of your donations).

8. When we will share your data

We will never sell your personal data to any other organisation. We will not share your personal data unless it is obvious that this is what we are going to do (such as the signing of a petition).

We may share your data with third parties to perform services on your behalf and to help promote the work of Richard Burgon by serving you advertisements and content online about our politicians, campaigns and policies we think you might be interested in. We may also share your data:

To enable transfers to take place (where appropriate);

Where we need to comply with a legal obligation; and/or

With suppliers who act as our ‘data processors’ and who provide the means of processing financial transactions including, but not limited to, MailChimp, PayPal and others.

We do not allow our third party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

9. Cookies

A cookie is a tiny text file that is stored on your computer. We may use cookie data, on page website behaviour, and click through data from digital media to personalise your website experience. We may use cookies – including analytics cookies provided by companies such as Google – in order to tailor your experience on our site according to the preferences you have specified. However, we will only access the information that we stored in your cookie file. We will not access any information stored in a cookie placed by other websites.

10. Third party links

This website may include links to third party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third party websites and are not responsible for their privacy policies or statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.

11. Privacy shield

Occasionally, in order to complete your request as outlined above, we may need to transfer personal information you submit to us to countries or jurisdictions outside the EEA. In each case, we ensure that our suppliers provide adequate protection for the rights of data individuals in connection with the transfer of their personal data. Currently, we expect all suppliers to use the standard contractual clause approved by the European Union or be subject to Privacy Shield scheme in the United States.

12. Data security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality. We will notify you and any applicable regulator of a breach where we are legally required to do so.

13. How long we will hold your personal data for

We will only retain personal data for so long as it is required to meet the purposes set out in this privacy policy. This includes only retaining your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.

To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.

14. Your legal rights

You have a number of rights in relation to your personal information and the opportunity to choose how it is used. You can: obtain copies of the personal information we hold about you (known as a “subject access request”); request that we correct or updates personal information we hold about you; ask that we erase or restrict the way in which we use your information; request that personal information you have given your consent for us to use is provided in an electronic format so it can be transferred to another data controller (also known as “data portability”)

We provide you with the opportunity to opt-out of receiving communications from us.

15. Your right to lodge a complaint

If you are unhappy with the way that we have processed or handled your data then you have a right to complain to the Information Commissioner’s Office (ICO). The ICO is the supervisory body authorised by the Data Protection Act 2018 to regulate the handling of personal data within the United Kingdom.

The contact details for the ICO are:

Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF

Telephone: 0303 123 1113

Website: https://ico.org.uk/concerns/

Copyright © 2020 Richard Burgon.