Labour Party Donations 

This privacy notice is for anyone that have made a donation to the Labour Party at any time and of any size donation.

Terms and conditions of making a donation can be found here: https://labour.org.uk/terms-and-conditions/

The Labour Party recognises that some people want to make a donation to the Labour Party although may not want to be a Labour Party Member receive further information as a Labour Party Supporter.

If you check a box asking to find out more about our campaigns or to receive further information you are providing consent to marketing and will be known to the Labour Party as a Supporter. You can opt-out of being a Supporter at any time. You can access our Supporters Privacy Notice within the list of notices.

What personal data do we collect? 

Below is a list of personal data we collect when you make a donation and therefore become a donor to the Labour Party.

• Title, first name, last name, home address, post code, email address, telephone number(s), date of birth, and sex;
• If applicable, Labour membership number, and name of the trade union you are a member of;
• The amount you donate and the frequency of donations by you;
• If you donate more than £500 we will review the information about you held on our copy of the electoral register;
• The source of a donation and how it is associated with you;
• If setting up a direct debit, the name of your bank, account holder name, account number, sort code, your signature and a service user number we allocate;
• If you are making a single donation, the amount you are donating, 16 digit card number; card issue number, start date, expiry date, name of card holder and signature;
• Inferred political opinion by donating to the Labour Party;
• Whether you are part of the Labour’s ‘Rose Network’ of donors;
• If required for review, publicly available information on websites inc. Companies House, Land Registry, news and broadcast media or historical publications etc.;
• If required for review, language and behaviour of yourself within the public domain such as social media posts (X, Meta platforms, YouTube etc.);
• Further information about yourself, your family and your circumstances you divulge in conversation and/or communications and/or relevant research you are participating in with/for Labour;
• If required for review, details of any suspensions/expulsions from any political party, any safeguarding issues related to yourself, your religious or philosophical beliefs, health data, sex life, sexual orientation, details of any complaints or concerns you have made or that are against or about you, witness evidence or information, any complaint resolution and outcomes, and criminal offence or information on any criminal activity;
• If required for review, information that may be provided to us from government institutions, public bodies and law enforcement agencies, complainants or legal practitioners, including any police or criminal records checks we conduct;
• If required for review, information on any individual or business related endorsements you have made or make, any business connections you may have, and biographies or literature that is made available to us which is about you; and
• If required for review, opinions about you from sources known to Labour or any previously recorded notes about you and your conduct, your membership eligibility criteria based on any information we hold about you, and names and opinions of other individual(s) relevant to any legal case brought against you.

Where do we get your personal data? 

We may collect personal data in a variety of ways and at a variety of times throughout our interactions with you. We refer to “direct data collection” when data is collected directly from you and we refer to “indirect data collection” when the data is not collected directly from you. Here is the list of ways we may collect your personal data from you:

• From yourself when you make a donation (direct data collection);
• From yourself via email, telephone or face to face communications we have with you (direct data collection);
• From Labour Party Members or members of staff who are updating your personal data in our IT systems used to manage our supporters (indirect data collection);
• From individuals within Labour’s Rose Network of donors (indirect data collection);
• If applicable, from other Labour Members, MPs, Candidates, Specialist Volunteers, volunteers, a Constituency Labour Party (CLP), Labour Councillors, Local Councils where you are Labour Councillor, other affiliated Party supporters or groups, the Cooperative Party, Trade Unions, affiliated organisations, relevant socialist societies, universities, publishers, and media institutions & organisations (indirect data collection);
• If applicable, from publicly available websites including, but not limited to, professional registration sites, Companies House, Land Registry, social media sites, company websites, news outlets, and online publications etc. (indirect data collection);
• From specialist fundraising screening organisations, who gather information about you from publicly available sources, for example, Companies House, the Electoral Register, company websites, ‘rich lists’, social networks such as LinkedIn, political and property registers and news archives. This may include people connected to our current major supporters, trustees or other lead volunteers. We also use publicly available sources to carry out due diligence on donors in line with the charity’s Gift Acceptance Policy and to meet money laundering regulations;
• If required, from an organisation we contract to conduct any due diligence checks (indirect data collection); and
• If applicable, from Police, Law Enforcement Agencies, Healthcare Services including the NHS, Adult Services, Children Services, Local Authority Designated Officers (LADO), charities, charitable organisations or agencies or any other safeguarding related institutions or organisation(s) (indirect data collection).

What do we use your personal data for and what is our lawful basis for using it? 

We may use your personal data for the following purposes and on the following lawful bases. Not all purposes for using members personal data will be relevant to all members all of the time.

NOTE: We do not sell your personal data to any third parties.

Purpose for using personal data	Lawful basis for using
To process donations we receive from you.	The lawful basis we shall be relying on is the legitimate interest of the Data Controller in accordance with UK GDPR Article 6.1(f). Special categories of personal data used for the purpose of Substantial Public Interest under UK GDPR Article 9.2(g) in line with Schedule 1, Part 2, Paragraph 22 Political Parties of the Data Protection Act 2018.
To notify you of further donation opportunities over email, text (SMS) or by post.	The lawful basis we shall be relying on is the legitimate interest of the Data Controller in accordance with UK GDPR Article 6.1(f). Special categories of personal data used for the purpose of Substantial Public Interest under UK GDPR Article 9.2(g) in line with Schedule 1, Part 2, Paragraph 22 Political Parties of the Data Protection Act 2018.
To share relevant contact details, or access to them, with relevant Labour Staff who process donations. This may mean making contact with you where there is an issue with a donation or other related reasons	The lawful basis we shall be relying on is the legitimate interest of the Data Controller in accordance with UK GDPR Article 6.1(f). Special categories of personal data used for the purpose of Substantial Public Interest under UK GDPR Article 9.2(g) in line with Schedule 1, Part 2, Paragraph 22 Political Parties of the Data Protection Act 2018.
To conduct wealth screening exercises to ensure follow-up donation requests are aligned to the correct means available to the donor. [You will always have the right to opt out of this processing by sending an email to [email protected]] This research helps us to understand more about you as an individual so we can focus conversations we have with you about fundraising in the most effective way, and ensure that we provide you with an experience as a donor which is appropriate for you.	The lawful basis we shall be relying on is the legitimate interest of the Data Controller in accordance with UK GDPR Article 6.1(f). Special categories of personal data used for the purpose of Substantial Public Interest under UK GDPR Article 9.2(g) in line with Schedule 1, Part 2, Paragraph 22 Political Parties of the Data Protection Act 2018.
If applicable, to include you in one of the four circles of giving within the Rose Network, each offering opportunities to engage with our work through a range of events, including presentations, discussions, receptions, and Q&A sessions.	The lawful basis we shall be relying on is the legitimate interest of the Data Controller in accordance with UK GDPR Article 6.1(f). Special categories of personal data used for the purpose of Substantial Public Interest under UK GDPR Article 9.2(g) in line with Schedule 1, Part 2, Paragraph 22 Political Parties of the Data Protection Act 2018.
So a Rose Network Ambassador, acting as an authorised volunteer representative of the Labour Party, can contact you personally to encourage renewed participation in the Rose Network or further donations, where you are a current or former Rose Network member and have been allocated to an Ambassador for this purpose.	The lawful basis we shall be relying on is the legitimate interest of the Data Controller in accordance with UK GDPR Article 6.1(f). Special categories of personal data used for the purpose of Substantial Public Interest under UK GDPR Article 9.2(g) in line with Schedule 1, Part 2, Paragraph 22 Political Parties of the Data Protection Act 2018.
To invite you to join the Labour Party as a member.	The lawful basis we shall be relying on is the legitimate interest of the Data Controller in accordance with UK GDPR Article 6.1(f). Special categories of personal data used for the purpose of Substantial Public Interest under UK GDPR Article 9.2(g) in line with Schedule 1, Part 2, Paragraph 22 Political Parties of the Data Protection Act 2018.
To ask you if you are happy to be contacted about your donation by your local Constituency Labour Party (CLP), local Labour MP or local Labour Candidate. If agreed, any further contact by the above will be governed by their relevant privacy notice and they will be the data controller for that communication.	The lawful basis we shall be relying on is the legitimate interest of the Data Controller in accordance with UK GDPR Article 6.1(f). Special categories of personal data used for the purpose of Substantial Public Interest under UK GDPR Article 9.2(g) in line with Schedule 1, Part 2, Paragraph 22 Political Parties of the Data Protection Act 2018.
To retain your personal data for at least 5 years (an election cycle) so we can understand patterns of donation and see how you have donated to us in the past.	The lawful basis we shall be relying on is the legitimate interest of the Data Controller in accordance with UK GDPR Article 6.1(f). Special categories of personal data used for the purpose of Substantial Public Interest under UK GDPR Article 9.2(g) in line with Schedule 1, Part 2, Paragraph 22 Political Parties of the Data Protection Act 2018.
To test, monitor and develop any of our physical or digital systems that hold your information and also develop models for targeting of donation campaign messaging to certain demographics and geographies.	The lawful basis we shall be relying on is the legitimate interest of the Data Controller in accordance with UK GDPR Article 6.1(f). Special categories of personal data used for the purpose of Substantial Public Interest under UK GDPR Article 9.2(g) in line with Schedule 1, Part 2, Paragraph 22 Political Parties of the Data Protection Act 2018.
To conduct investigations into concerns or complaints about electoral fraud, financial fraud, or related criminality.	Use of the personal data is necessary to protect the vital interests of an individual or individuals in accordance with UK GDPR Article 6.1(d). Special categories of personal data used for the purpose of Substantial Public Interest under UK GDPR Article 9.2(g) in line with Schedule 1, Part 2, Paragraph 18 – Safeguarding of children and of individuals at risk; and Paragraph 19 – Safeguarding of economic well-being of certain individuals, of the Data Protection Act 2018.
To identify personal data and take relevant action upon submission of a data subject rights request.	Compliance with a legal obligation under UK GDPR Article 6.1(c). The legal obligation is the UK General Data Protection Regulation to uphold your data protection rights. Special categories of personal data used for the purpose of Substantial Public Interest (Preventing or detecting unlawful acts; Protecting the public; Regulatory requirements) under UK GDPR Article 9.2(g).
To be able to assess any impact on individuals of a data breach involving personal data held on Labour Party systems or on third party systems.	Compliance with a legal obligation under UK GDPR Article 6.1(c). The legal obligation is the UK General Data Protection Regulation to uphold your data protection rights. Special categories of personal data used for the purpose of Substantial Public Interest (Preventing or detecting unlawful acts; Protecting the public; Regulatory requirements) under UK GDPR Article 9.2(g).
To help protect an individual from neglect or physical, mental or emotional harm, or protect the physical, mental or emotional well-being of an individual.	Use of the personal data is necessary to protect the vital interests of an individual or individuals in accordance with UK GDPR Article 6.1(d). Special categories of personal data used for the purpose of Substantial Public Interest (Preventing or detecting unlawful acts; Protecting the public; Regulatory requirements) under UK GDPR Article 9.2(g).
To deal with legal claims and ongoing litigation cases.	Compliance with a legal obligation under UK GDPR Article 6.1(c). The legal obligation is the UK General Data Protection Regulation to uphold your data protection rights. Special categories of personal data used for the establishment, exercise or defence of legal claims or whenever courts are acting in their judicial capacity under UK GDPR Article 9.2(f).

Note: the source notice only restates the lawful basis wording where it changes from the row above; this table repeats the applicable basis on every row for clarity. Where the source didn’t restate a basis (the data-breach impact assessment row), I’ve carried forward the nearest preceding stated basis (Article 6.1(c), regulatory/rights-protective) — worth confirming that’s the intended basis rather than a gap in the original drafting.

If you have interacted with Labour in a different way and if you expected to see something different to the list above, you can access all of our privacy notices by clicking here. If it is still not there, feel free to get in touch as mentioned below.

Who do we share your personal data with? 

Any data shared with the below categories of recipients is the minimum necessary for the task they have been instructed to carry out on our behalf or in conjunction with us. Each category of recipient is subject to review by the Data Protection Team to make sure they have the right methods in place for keeping your personal data secure.

Where the sharing of personal data is within the context of a product or service being supplied under contract to Labour, a Data Processing Agreement, in accordance with GDPR Article 28 is put in place. This makes sure the supplier cannot use your personal data outside of the list of uses above. We never sell your personal data.

Within the purposes of using your personal data, as listed above, we will share your personal data with the following:

• Pre-approved digital payment systems providers (e.g. Stripe, Fundraiseup, etc.) and banks;
• Pre-approved donation, communications and storage service providers;
• Pre-approved online survey, questionnaire or web-form platform service providers;
• Pre-approved wealth screening service providers;
• Upon approval from you, a unit within the National Labour Party with an authorised level of access to donation data or when they are interacting with you;
• If relevant and agreed by you or your representative, local Constituency Labour Party (CLP) members, Labour Candidate(s) or MP’s or their office staff; and
• If applicable and within the right conditions, with Police, Law Enforcement Agencies, Healthcare Services including the NHS, Adult Services, Children Services, Local Authority Designated Officers (LADO), charities, charitable organisations or agencies or any other safeguarding related institutions or organisation(s).
• Rose Network Ambassadors, who are authorised volunteer representatives of the Labour Party, for the purpose of contacting you personally about Rose Network participation or further donations, where you have been allocated to an Ambassador for this purpose. Ambassadors are bound by data protection and confidentiality obligations under their Volunteer Agreement and may only use your data for this authorised purpose.

There may be scenarios where we are subject to a legal obligation to disclose or share your personal data, such as with law enforcement agencies, regulatory bodies or public authorities in order to prevent or detect crime, or prove we have adhered to their request. We will only ever disclose your personal data to these third parties to the extent we are required to do so by law.

Data sharing with a third-party organisation that is not a supplier of a product or service to Labour does not occur unless there is a legal obligation or sound lawful purpose for such sharing. For any such sharing we put a Data Sharing Agreement in place between Labour and the third-party containing specific information in accordance with the Information Commissioner’s Office ‘Data sharing code of practice’.

In all circumstances, the unlawful and unauthorised sharing of copies of personal data in which the Labour Party is the data controller is expressly prohibited. Any unauthorised sharing of Labour Party data is classified as a data breach which we will record and report to the ICO as required.

How long will we keep your personal data? 

We only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, or reporting requirements.

In some circumstances we may anonymise your personal data so that it can no longer be associated with you, in which case we may use such information without further notice to you.

Once you have donated, we keep a copy of your personal data related to the donation for at least 5 years (an election cycle) from the last time you donated. We do this to be able to match your donations with previous donations you have made and to make contact with you to ask if you would like to make another donation in the lead up to large elections. If we do not have any further contact from you or another donation, we will delete or anonymise your personal data at the end of the 5 years from your last donation.

If circumstances require, on the basis of keeping people safe from any harm, and our legitimate interest in knowing who has or has not given a donation in the past when there may be future safeguarding or legal concerns or requests for your information, we will retain all personal data we have captured from you.

Where you do submit a right to deletion request we will delete you from any and all locations we hold your personal data where it would mean we may make contact with you again (outside of our copy of the Electoral Register, and outside of when you make contact with us) although we will retain your information if:

• It has been, or is being used within a complaints, disputes or grievance process by Labour and we may need to evidence this in the future to defend legal claims;
• We need to keep it to comply with a legal obligation;
• Erasing your data would prejudice scientific or historical research;
• There is information associated with your data which is of a safeguarding concern to yourself or others; and/or
• Erasing will mean we lose our logs of when you made any data protection rights requests.

What are your rights and how can you express them? 

To understand your data privacy rights and to submit a rights request, the best way to do so is by visiting the ‘YOUR RIGHTS’ page on our website which you can get to by clicking here. 

How can you complain about our use your personal data? 

The best way to make a complaint is by visiting our page on ‘HOW TO MAKE A DATA PROTECTION COMPLAINT’ which you can access by clicking here.  

How can you contact us about this privacy notice? 

If you have any questions about the information in this privacy notice, then you can contact the Data Protection Team via email using [email protected] or by post within a letter to: 

Labour Statutory Data Protection Team 

The Labour Party, Southworks, 20 Rushworth Street, United Kingdom, SE1 0SS 

When was this privacy notice last updated? 

We may update this notice (and any supplemental privacy notice), from time to time as shown below. We will notify you of the changes where required by applicable law to do so. 

Last modified: 4 August 2026.