We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our website (regardless of where you visit it from) and tell you about your privacy rights and how the law protects you.
1. WHO WE ARE AND HOW TO CONTACT US
Beccy Cooper is the controller and responsible for your personal data (referred to as “we“, “us” or “our” in this privacy policy).
If you have any questions about this privacy policy or any concerns or complaints about how your data has been processed, please contact us at beccycooper4labour@gmail.com
2. PURPOSE OF THIS PRIVACY POLICY
This privacy policy aims to give you information on how we collect and process your personal data through:
- your use of this website (including, but not limited to, any data you may provide through this website by, for example, signing up as a supporter of Beccy Cooper (the Campaign)).
By collecting such data, we will be able to inform you about relevant developments that relate to the Campaign and what you can do to help the Campaign as it progresses.
In order to advance the Campaign, we may share your data with other campaigns and movements that share the values, principles and aims of Beccy Cooper and/or the Campaign (including, but not limited, to other Labour Party elections) and which are supportive of our objectives. This will only be done in limited circumstances where we are satisfied that there is a lawful basis to permit such a transfer to take place.
This website is not intended for children and we do not knowingly collect data relating to children.
It is important that you read this privacy policy, together with any other privacy policy or fair processing policy we may provide on specific occasions when we are collecting or processing personal data about you. We want you to be fully aware of how and why we are using your data.
This privacy policy supplements other notices and privacy policies (such as wording that may feature on our website alongside options to subscribe to newsletters and other communications) and is not intended to override them.
3. THE DATA WE COLLECT ABOUT YOU
Personal data, or personal information, means any information from which your individual identity could be discerned. It does not include data where the identity has been removed (anonymous data). We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:
- identity data, including first name, maiden name, last name, username or similar identifier, marital status, title, date of birth and/or gender;
- contact data, including address, email address and/or telephone number(s);
- financial data, including bank account and payment card details;
- transaction data, including details about payments to and from you and other details of products and services you have purchased from us;
- technical data, including internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website and platforms hosting our content;
- profile data, including your username, your interests, preferences, feedback and/or survey responses;
- usage data, including information about how you use our website; and/or
- marketing and communications data, including your preferences in receiving content and/or marketing from us and your communication preferences.
We also collect, use and share aggregated data such as statistical or demographic data for any purpose. Aggregated data could be derived from your personal data but is not considered personal data in law as this data will not directly or indirectly reveal your identity. For example, we may aggregate your usage data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect aggregated data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy policy.
4. HOW WE COLLECT YOUR PERSONAL DATA
We use different methods to collect data from and about you.
Provided by you – directly
You may give us your name and contact details by filling in forms or by corresponding with us by post, phone, email or otherwise.
This also includes personal data you provide when you register as a supporter of the Campaign, subscribe to any mailing lists, give feedback and/or contact us directly via such forms, email, telephone or similar mediums.
5. HOW WE USE YOUR PERSONAL DATA
The uses
We will only use your personal data when the law allows us to. We will use your personal data in the following circumstances:
- Register you as a supporter of Campaign and/or related campaigns;
- Inform and engage you about the Campaign and/or related campaigns;
- Inform and engage you with any other campaigns and movements that share the values, principles and aims of the Campaign (including, but not limited, to other Labour Party elections);
- Manage donations, payments, fees and/or charges;
- Comply with our legal obligations; and/or
- Answer your queries and respond to your questions and/or complaints.
The legal bases
- Where you have specifically consented to a particular use of your data (such as where you have subscribed to receive information about the Campaign);
- Where you have entered into a legal agreement with us that necessitates that particular use of your data (such as where you make a payment or donation to us);
- Where it is a necessary lawful basis for our legitimate interests and your interests and fundamental rights do not override those interests; or
- Where we are obliged to process your data in a particular way by law (for example, if we are required to notify any authority or regulator of the nature or value of your donations).
6. WHEN WE WILL SHARE YOUR DATA
We will never sell your personal data to any other organisation and we will not share your personal data unless it is obvious that this is what we are going to do (such as the signing of a petition). We may share your data:
- To enable transfers to take place (where appropriate);
- Where we need to comply with a legal obligation; and/or
- With suppliers who act as our ‘data processors’ and who provide the means of processing financial transactions including, but not limited to, Stripe, PayPal, The Labour Party and other commercial agents and partners of the Campaign and/or related campaign.
7. WHEN YOUR DATA MAY BE USED FOR MARKETING
Our Marketing
You will receive marketing communications (i.e. communications promoting the Campaign and/or individuals related to it) from us if you have requested information from us and/or you have subscribed to receiving that marketing.
Right to object/Opting-out
You can ask us to stop sending you marketing messages at any time by contacting us at beccycooper4labour@gmail.com
You have a right to opt-out of your data being used for direct marketing.
If we process your data on the basis of “legitimate interests” or “a task carried out in the public interest”, then you have the right to object to us using your data in that way. This right is not absolute and we may continue to process your data if we can demonstrate compelling legitimate grounds for the processing.
Where you opt-out of receiving these marketing messages, this will not apply to personal data provided to us as a result of other engagement or transactions with us (so, for example, if you opt-out of receiving messages from us – this will not cause us to change the way we use data you have provided for processing donation payments).
8. COOKIES
A cookie is a tiny text file that is stored on users’ machines (computers, tablets or mobile devices). We may use cookies in order to tailor your experience on our site according to the preferences you have specified. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.
9. CHANGE OF PURPOSE
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purposes (as set out in this privacy policy). If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us. If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.
10. CHANGES TO THE PRIVACY POLICY
We keep our privacy policy under regular review and will notify you of any substantive changes. Any revisions to our privacy policy can be reviewed on this website.
11. THIRD-PARTY LINKS
This website may include links to third-party websites, platforms, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites or platforms and are not responsible for their privacy policies or statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.
12. INTERNATIONAL TRANSFERS
In order to process your personal data for the purposes outlined in this Privacy Policy, we may need to transfer your data to countries or jurisdictions outside the European Economic Area (EEA). In each case, we ensure that our suppliers provide adequate protection for the rights of data individuals in connection with the transfer of their personal data. Currently, we expect all suppliers to use a standard contractual clause approved by the European Union or be part of the Privacy Shield scheme in the United States.
13. DATA SECURITY
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality. We will notify you and any applicable regulator of a breach where we are legally required to do so.
14. HOW LONG WE WILL HOLD YOUR PERSONAL DATA FOR
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.
To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.
15. YOUR LEGAL RIGHTS
As a data subject, you have a number of rights in relation to your personal data. Below, we have described the various rights that you have, as well as how you can exercise them.
Right of access
You may, at any time, request access to the personal data that we hold which relates to you (you may have heard of this right being described as a “subject access request“).
We follow the ICO’s “Subject Access Code of Practice” when dealing with requests for access to personal data. You can read this code by visiting https://ico.org.uk/media/for-organisations/documents/2014223/subject-access-code-of-practice.pdf.
Please note that this right entitles you to receive a copy of the personal data that we hold about you in order to enable you to check that it is correct and to ensure that we are processing that personal data lawfully. It is not a right that allows you to request personal data about other people, or a right to request specific documents from us that do not relate to or contain your personal data.
You can exercise this right at any time by contacting us at beccycooper4labour@gmail.com and telling us that you are making a subject access request. You do not have to fill in a specific form to make this kind of request