What personal data do we collect? 

To accommodate your visit to our offices we will process the following categories of personal information: 

• Name(s), Email Address, Phone number; 
• Job Title, occupation, place of work, employer; 
• Information that may aid accessibility needs including any relevant special categories of information (“Health Data”); 
• Reason for visiting; 
• Areas of professional, governmental, societal sector or public policy interest; 
• Personal data recorded in any verbal or digital communications we may have with you; 
• Time of entry and exit, and duration of visit; 
• Recorded footage of you (where we are video recording an event that is either live or pre-recorded); and 
• CCTV footage of you. 

Where do we get your personal data? 

Office visitor information will be collected via email from yourself, or the individual that has arranged your visit on your behalf, or via a third party which we will pass on to building management or our facilities team so they can communicate your arrival to us.  

Your personal information may also be collected from you when you add your details to a building management visitors book should the office you visit have one. 

If you are visiting Labour offices to attend an event you may be asked to write your personal information on a name badge/sticker and you may be filmed should we be recording the event. You are also likely to be filmed by our security cameras and any related CCTV we have around our building locations. 

What do we use your personal data for and what is our lawful basis for using it? 

The lawful basis we will be relying on for using your personal data during the arrangement of your visit and during your visit to any of our office locations is the legitimate interest of the Data Controller in accordance with UK GDPR Article 6.1(f). 

When you visit Labour offices we will use your personal information to register you at the reception of our building who will log entry and exit times as part of building security measures.  

It is likely that our facilities team and/or the individual or department you are visiting will also log your contact details in a database or digital calendar so we can monitor and manage your visit. 

Depending on the building location you are visiting, you may be asked to write your name and further details into a visitors’ book by building entrance staff. You will also be captured on CCTV cameras during your visit which is also for security and monitoring purposes. 

Your personal information will be limited to those who you would expect to know of your visit and where you voluntarily interact with Labour employees, or other office or building attendees.  

Your personal information will also be stored in an electronic calendar application and used as a lookup to understand arrival and departure times and to identify when you last visited.  

Should you be visiting for an event at one of our offices we may produce name badges for ease of identification by ourselves and others in attendance, and we may make a video recording (filming) of the event where you may be in the background. We may ask you to be in the foreground of a video recording of an event i.e., conduct an ad hoc interview with you or record you asking a question to a panel member.  

You are under no obligation to be in the foreground of any filming we do at an event, and we will inform you of recording taking place so you are able to move to a location where you do not appear in the background of any filming should you not wish.  

Please do let us know either before, during or after a filmed event if you no longer wish to be recognised within a recording and we shall endeavour to remove or obscure the image so you would not be identifiable on any recordings we have made. Also see our Conference and Events Privacy Notice which you can access by clicking here. 

Further Purposes and Lawful Bases for using personal data 

Purpose for using personal data	Lawful basis for using
To identify personal data and take relevant action upon submission of a data subject rights request.	Compliance with a legal obligation under UK GDPR Article 6.1(c). The legal obligation is the UK General Data Protection Regulation to uphold your data protection rights. Special categories of personal data used for the purpose of Substantial Public Interest (Preventing or detecting unlawful acts; Protecting the public; Regulatory requirements) under UK GDPR Article 9.2(g).
To be able to assess any impact on individuals of a data breach involving personal data held on Labour Party systems or on third party systems.
To help protect an individual from neglect or physical, mental or emotional harm, or protect the physical, mental or emotional well-being of an individual.	Use of the personal data is necessary to protect the vital interests of an individual or individuals in accordance with UK GDPR Article 6.1(d). Special categories of personal data used for the purpose of Substantial Public Interest (Preventing or detecting unlawful acts; Protecting the public; Regulatory requirements) under UK GDPR Article 9.2(g).
To deal with legal claims and ongoing litigation cases.	Compliance with a legal obligation under UK GDPR Article 6.1(c). The legal obligation is the UK General Data Protection Regulation to uphold your data protection rights. Special categories of personal data used for the establishment, exercise or defence of legal claims or whenever courts are acting in their judicial capacity under UK GDPR Article 9.2(f).

If you have interacted with Labour in a different way and if you expected to see something different to the list above, you can access all of our privacy notices by clicking here. If it is still not there, feel free to get in touch as mentioned below. 

Who do we share your personal data with? 

Any data shared with the below categories of recipients is the minimum necessary for the task they have been instructed to carry out on our behalf or in conjunction with us. Each category of recipient is subject to review by the Data Protection Team to make sure they have the right methods in place for keeping your personal data secure. 

Where the sharing of personal data is within the context of a product or service being supplied under contract to Labour, a Data Processing Agreement, in accordance with GDPR Article 28 is put in place. This makes sure the supplier cannot use your personal data outside of the list of uses above. 

Within the purposes of using your personal data, as listed above, we will share your personal data with the following: 

• Pre-approved digital communications and storage providers; and 
• Pre-approved office location or building management service providers. 

There may be scenarios where we are subject to a legal obligation to disclose or share your personal data, such as with law enforcement agencies, regulatory bodies or public authorities in order to prevent or detect crime, or prove we have adhered to their request. We will only ever disclose your personal data to these third parties to the extent we are required to do so by law. 

In all circumstances, the unlawful and unauthorised sharing of copies of personal data in which the Labour Party is the data controller is expressly prohibited. Any unauthorised sharing of Labour Party data is classified as a data breach which we will record and report to the ICO as required. 

How long will we keep your personal data? 

We will only keep personal information for as long as it is needed to fulfil the purpose for which it was collected. 

Your personal information shall be retained within digital email calendars and subject to archiving processes conducted on an ad hoc basis. Name badges will be destroyed when you leave the premises. Any ID that is requested to be shown at the building front desk is for verification purposes only and we won’t always record this information.  

Closed-circuit television (CCTV) operates inside and outside the buildings for security purposes. The information is viewed by the building security company on a live feed and may be recorded at the discretion of the provision of security services supplied by the buildings we occupy. 

When we provide you Wi-Fi on site for the use of visitors, we’ll provide you with the login details. We record the device address and will automatically allocate you an IP address whilst on site. We also log traffic information in the form of sites visited, duration and date sent/received. This information is retained for a reasonable period of time to monitor the security of Wi-Fi use when onsite. 

What are your rights and how can you express them? 

To understand your data privacy rights and to submit a rights request, the best way to do so is by visiting the ‘YOUR RIGHTS’ page on our website which you can get to by clicking here. 

How can you complain about our use your personal data? 

The best way to make a complaint is by visiting our page on ‘HOW TO MAKE A DATA PROTECTION COMPLAINT’ which you can access by clicking here.  

How can you contact us about this privacy notice? 

If you have any questions about the information in this privacy notice, then you can contact the Data Protection Team via email using [email protected] or by post within a letter to: 

Labour Statutory Data Protection Officer 

The Labour Party, Southworks, 20 Rushworth Street, United Kingdom, SE1 0SS 

When was this privacy notice last updated? 

We may update this notice (and any supplemental privacy notice), from time to time as shown below. We will notify you of the changes where required by applicable law to do so. 

Last modified: 05 March 2024.