What personal data do we collect? 

We will be collecting and using the following personal data: 

• Title, first name, last name, email address, mobile number, home address; 
• Delivery address, billing address, other saved addresses; 
• Payment details; 
• Whether you are a Labour Member and any particular role you may have within the Party; 
• You purchase history, browsing history, buying patterns and products stored in your e-commerce “basket” which may act as a wish list; 
• Technical information about your computer, tablet or phone (including your IP address, screen resolution, browser type, operating system software type and device type); and 
• Any further information you provide when communicating with us. 

We may also collect, use and share data relating to you which is not “personal data”, such as demographic data or details of your typical use of our website and app.  You can’t be identified from this information. We will use this information, for example, to improve our website and app, tailor our marketing strategy and help us stock products we think you will like. 

Where do we get your personal data? 

We may collect personal data in a variety of ways and at a variety of times throughout our interactions with you. We refer to “direct data collection” when data is collected directly from you and we refer to “indirect data collection” when the data is not collected directly from you. Here is the list of ways we will collect your personal data from you: 

Voters 

• From yourself when you make a purchase on the Labour Shop website (direct data collection) 
• From yourself when you create a customer account on the Labour Shop website and any time you login (direct data collection) 
• From yourself within emails your send us or withing online/telephone conversations with us (direct data collection) 
• Automatically collected as part of using our website and via cookies on the website [See our Cookies Policy for more details] (direct data collection). 

What do we use your personal data for and what is our lawful basis for using it? 

We will use your personal data for the following purposes and on the following lawful bases.  

Purpose for using personal data	Lawful basis for using
To sell Labour Party products.	The lawful basis we shall be relying in accordance with UK GDPR Article 6.1(b) where the use your personal data is necessary in the performance of a contract which you have agreed to or where we are working to enter into a contract with you.
To register your account with us and allow you to sign in.
To process your order and payment, and to be able to deliver any orders you place with us.
To deal with any returns, refunds or customer services enquiries.
To register your membership of any loyalty scheme we operate from time to time.
Where you have not created a customer account and have not yet made a purchase, where you have given your consent we will send you updates about new products, services within Labour Shop.	The consent you have provided us for this use of your personal data in accordance with UK GDPR Article 6.1(a).
Where you have not yet made a purchase, where you have given your consent we will send you updates about Labour and it’s activities including invitations to participate in the democratic process, become a Labour member and to ask you for your support via a donation.
To ensure the general administration of the Labour Party shop, including keeping a record of your transaction and processing orders.	The lawful basis we shall be relying on is the legitimate interest of the Data Controller in accordance with UK GDPR Article 6.1(f).
Storage of your personal data so it is easier for you to login/order on your next visit.
To improving the use of our website and IT systems.
To deal with your comments/questions and contact you about this, if necessary.
To ensure appropriate system administration and troubleshooting of website issues, to track the pages you have visited in order to improve the quality of the site and to personalise the website experience.
To analyse how many Labour Members are using Labour Shop and identify if a role they may have within Labour means we are able to target more relevant products to them. We may analyse this information against other information Labour holds about its Labour Members (also see Labour Members Privacy Notice).
To keep track of and solve issues users are experiencing with our technology systems.
Upon creating a customer account or becoming a customer, unless you have indicated you do not want any further contact about similar products, services and updates on Labour Shop, we will send you updates of new items and products as they become available (including updates to our terms and policies).
To analyse what products/offers we think you will like and display adverts to you when you are browsing third party websites and social media.
Because of a purchase you have made of a Labour product (whether you have created an account or not), we may contact you from time to time to ask if you may like to increase your interaction with the Labour Party by becoming a Labour Member, a volunteer, or whether you would like to make a donation to Labour to help us achieve our aims.
To identify personal data and take relevant action upon submission of a data subject rights request.	Compliance with a legal obligation under UK GDPR Article 6.1(c). The legal obligation is the UK General Data Protection Regulation to uphold your data protection rights. Special categories of personal data used for the purpose of Substantial Public Interest (Preventing or detecting unlawful acts; Protecting the public; Regulatory requirements) under UK GDPR Article 9.2(g).
To be able to assess any impact on individuals of a data breach involving personal data held on Labour Party systems or on third party systems.
To help protect an individual from neglect or physical, mental or emotional harm, or protect the physical, mental or emotional well-being of an individual.	Use of the personal data is necessary to protect the vital interests of an individual or individuals in accordance with UK GDPR Article 6.1(d). Special categories of personal data used for the purpose of Substantial Public Interest (Preventing or detecting unlawful acts; Protecting the public; Regulatory requirements) under UK GDPR Article 9.2(g).
To deal with legal claims and ongoing litigation cases.	Compliance with a legal obligation under UK GDPR Article 6.1(c). The legal obligation is the UK General Data Protection Regulation to uphold your data protection rights. Special categories of personal data used for the establishment, exercise or defence of legal claims or whenever courts are acting in their judicial capacity under UK GDPR Article 9.2(f).

If you have interacted with Labour in a different way and if you expected to see something different to the list above, you can access all of our privacy notices by clicking here. If it is still not there, feel free to get in touch as mentioned below. 

Who do we share your personal data with? 

We do not sell your personal data to any third parties. Any data shared with the below categories of recipients is the minimum necessary for the task they have been instructed to carry out on our behalf or in conjunction with us. Each category of recipient is subject to review by the Data Protection Team to make sure they have the right methods in place for keeping your personal data secure. 

Where the sharing of personal data is within the context of a product or service being supplied under contract to Labour, a Data Processing Agreement, in accordance with GDPR Article 28 is put in place. This makes sure the supplier cannot use your personal data outside of the list of uses above. 

Within the purposes of using your personal data, as listed above, we will share your personal data with the following: 

1. Pre-approved digital communications and storage providers; 

2. Pre-approved logistics/warehouse service providers; 

3. Pre-approved couriers and similar delivery companies; 

4. Pre-approved payment providers; 

5. Pre-approved professional partners, including our marketing agencies and website hosts; 

6. Pre-approved customer service providers; 

7. Pre-approved analytics providers; and 

8. Pre-approved IT and technical service providers to be able to run the Labour Shop website and its technical processes. 

There may be scenarios where we are subject to a legal obligation to disclose or share your personal data, such as with law enforcement agencies, regulatory bodies or public authorities in order to prevent or detect crime, or prove we have adhered to their request. We will only ever disclose your personal data to these third parties to the extent we are required to do so by law. 

Data sharing with a third-party organisation that is not a supplier of a product or service to Labour does not occur unless there is a legal obligation or sound lawful purpose for such sharing.  For any such sharing we put a Data Sharing Agreement in place between Labour and the third-party containing specific information in accordance with the Information Commissioner’s Office ‘Data sharing code of practice’.  

In all circumstances, the unlawful and unauthorised sharing of copies of personal data in which the Labour Party is the data controller is expressly prohibited. Any unauthorised sharing of Labour Party data is classified as a data breach which we will record and report to the ICO as required. 

How long will we keep your personal data? 

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting or reporting requirements. 

We will retain your name, email address, address, phone number, details of previous purchases, searches and items saved in your basket, which we collect when you hold an account with us for such time as you continue to hold an account with us. 

We will retain your name, email address, delivery address and billing address which you provide to us when you make a purchase on our website or app and all our correspondence with you for seven years following your last purchase or contact. 

We will treat your payment information in line with the PCI DSS standards which are recognised worldwide. 

Where you register to receive our latest news, products and offers, we will keep your contact details (generally your email address and/or phone number) for such time as you wish to continue to receive such updates from us. You are able to log into your Labour Shop account and change your communication preferences at any time. 

Where you have selected to receive further information about the Labour Party and its activities you can also change your preferences in your Labour Shop account although you are able to select ‘unsubscribe’ within any digital communications you receive from other Labour platforms. 

We may need to retain your personal data for other purposes, e.g. operating your account or dealing with any enquiry or legal dispute you have made. 

What are your rights and how can you express them? 

To understand your data privacy rights and to submit a rights request, the best way to do so is by visiting the ‘YOUR RIGHTS’ page on our website which you can get to by clicking here. 

How can you complain about our use your personal data? 

The best way to make a complaint is by visiting our page on ‘HOW TO MAKE A DATA PROTECTION COMPLAINT’ which you can access by clicking here.  

How can you contact us about this privacy notice? 

If you have any questions about the information in this privacy notice, then you can contact the Data Protection Team via email using [email protected] or by post within a letter to: 

Labour Statutory Data Protection Officer 

The Labour Party, Southworks, 20 Rushworth Street, United Kingdom, SE1 0SS 

When was this privacy notice last updated? 

We may update this notice (and any supplemental privacy notice), from time to time as shown below. We will notify you of the changes where required by applicable law to do so.