What personal data do we collect? 

Below is a list of personal data we may collect during your time as a Labour Member although not all categories will be relevant for capture from all members (to understand what we use your personal data for please see further below). There may also be times when you have volunteered this information and when you have the opportunity to opt-out of providing certain pieces of information at various times: 

• Title, first name, preferred first name, last name, email address, post code, home address, telephone number(s), date of birth, and gender; 
• Ethnicity, whether you have a disability, any membership to a trade union, socialist society or any affiliated groups, your electoral roll number, and if applicable photo ID or other requested ways to verify your identity; 
• Any roles and responsibilities you have as a Labour Member (e.g. MP, PPC, CLP Secretary, Local Councillor etc.), any groups you attend, your attendance at any events and Labour Conference, and any ballots you have organised or been part of, and if relevant and required, whether you voted in them; 
• Any communications we have with you which may be over email, telephone or face to face; 
• Political affiliation(s), opinion and/or opinion(s) on various societal concerns and improvements, all of which may be at a national or local level, including policy ideas you may have and how you submitted them; 
• Availability information which may include location information, dietary requirements and any accessibility requirements you may have; 
• Possibly your job title, name of your business or employer, industry sector, work address, your CV and any type of Labour candidacy selection application forms or outcome information from any selections; 
• Audio/Visual recordings, photographs, images and any videos recorded within any interviews you have with us or you are conducting that we are (and you may be) recording; 
• Bank details including account holder name, sort code, account number, monthly membership amount, donation amounts and financial activity related to the Party; 
• Where applicable, payment and/or donation details which may mean further individual bank details and financial status tier allocation; 

• Any personal data you volunteer in any free text fields in any paper-based or digital surveys, questionnaire or webforms that are captured at the national, local, branch or ward level by any other Labour Member or member of staff; 
• Publicly available information on websites inc. Companies House, Land Registry, news and broadcast media or historical publications etc.; 
• Language and behaviour of yourself within the public domain such as social media posts (X, Meta platforms, YouTube etc.); 
• Further information about yourself, your family and your circumstances you divulge in conversation and/or communications and/or research you are participating in with/for Labour; 
• Lifestyle Data: Estimated data from third-party companies regarding lifestyle, employment, income, and property; 
• Details of any suspensions/expulsions from any political party, any safeguarding issues related to yourself, your religious or philosophical beliefs, health data, sex life, sexual orientation, details of any complaints or concerns you have made or that are against or about you, witness evidence or information, any complaint resolution and outcomes, and criminal offence or information on any criminal activity; 
• Information that may be provided to us from government institutions, public bodies and law enforcement agencies, complainants or legal practitioners, including any police or criminal records checks we conduct; 
• Information on any individual or business related endorsements you have made or make, any business connections you may have, and biographies or literature that is made available to us which is about you; 
• Opinions about you from sources known to Labour or any previously recorded notes about you and your conduct, your membership eligibility criteria based on any information we hold about you, and names and opinions of other individual(s) relevant to any disciplinary or legal case brought against you; 
• Details of how your personal data may have been involved in any data breaches and whether you may have been a causal factor to any data breaches or incidents and what the outcome of any investigations were/are;  
• Reasons why and how you discontinued your membership, your status as an ex-member and all related information (as outlined above) [NOTE: most ex-member personal data will be retained for safeguarding and statistical reasons and from time to time, we may occasionally ask you if you may like to re-join the Party. As an ex-member are free to opt-out of any recontact from us at any time.]; 
• Personal information related to the Equality Act 2010 inclusive of data known as ‘Protected Characteristics’ (age, disability, gender reassignment, marriage or civil partnership (in employment only), pregnancy and maternity, race, religion or belief, sex, sexual orientation); 
• Personal information related to our internal equality and diversity monitoring policy (geographical location, organisation, socio-economic class, caring responsibilities, educational background); and 
• Aggregated data, and pseudonymous and anonymous data we have created from your personal data but we are unable to use to directly identify you. 

Related areas of personal data collection: 

• If relevant, information related to your status as a Young Labour Member (also see out Young Members Privacy Notice); 
• Information related to any donations you make to Labour (also see our Donors Privacy Notice) 
• Information you provide in relation to surveys and questionnaires we may send you and you complete (also see our Surveys Privacy Notice); 

• Where applicable, CCTV footage of you, image and videos you have allowed us to take of you as an ‘Endorser’ to Labour  (also see our Endorsers Privacy Notice);  
• Information captured about you when you attended Labour Conference or a Labour event (also see our Conference and Events Privacy Notice); and 
• It relevant, where you have interacted with Labour Lottery (please see our Labour Lottery Privacy Notice). 

Information on ‘Special Category’ personal data: 

The Labour Party will sometimes need to process more sensitive data known under the Data Protection Act as “special category data”. For the regulator’s definition and further information on what is meant by “special category data” you can access it on the Information Commissioner’s Office (ICO) website by clicking here. 

One of the main areas where this occurs is in relation to your political opinions, which the Labour Party compiles in the course of working with members. We also use this as part of the day-to-day running of a political party.  When using this data, the Labour Party does so within the constitution, as set out in the Rule Book and also to administer any request made directly by you. For further information on how we keep your information secure you can access our security information by clicking here. 

Where do we get your personal data? 

We may collect personal data in a variety of ways and at a variety of times throughout our interactions with you. We refer to “direct data collection” when data is collected directly from you and we refer to “indirect data collection” when the data is not collected directly from you. Here is the list of ways we may collect your personal data from you: 

• From yourself when you became a Labour Member or when you renew your membership (direct data collection); 
• From the Electoral Register (indirect data collection); 
• From yourself via email, telephone or face to face communications we have with you (direct data collection); 
• From yourself when you add any information about yourself to any of Labour’s digital systems we give you access to via a secure portal [only access to your own personal data] (direct data collection); 
• From yourself when you decide to apply to part of a selection process and/or a candidacy process (direct data collection); 
• From yourself when you make a payment to us (direct data collection); 
• From any photographs/video taken by any individual representing Labour as a photographer or videographer on behalf of Labour at any Labour meeting, conference or event at a national, local, branch, or ward level of the Party (indirect data collection); 
• From other Labour Members who are updating your personal data in our membership systems based on a request you have made for them to do so (indirect data collection); 
• If relevant, indirectly from yourself when you completed a survey, questionnaire, poll or other webform presented to you by any part of the Party or a survey/web-capture provider who is under contract to Labour (indirect data collection (also, please refer to that platform’s privacy notice)); 

• If applicable, from other Labour Members, MPs, Candidates, Specialist Volunteers, volunteers, a Constituency Labour Party (CLP), Labour Councillors, Local Councils where you are Labour Councillor, other affiliated Party supporters or groups, the Cooperative Party, Trade Unions, affiliated organisations, relevant socialist societies, universities, publishers, and media institutions & organisations (indirect data collection); 
• From yourself when you have interacted with Labour in any capacity which may be on the doorstep, at a rally, at an event, online (including social media), and physical or digital communications you have had with us at any time where you have provided means for us to contact you about something (direct data collection); 
• From yourself when you access or make changes to any personal data when you have been allocated a privileged position in the Party which allows access to further information that is held securely (known as meta-data) (direct data collection); 
• From the analysis of personal data from all sources we have legitimate and transparent access to personal data (including Experian and data analytics brokers which do not directly identify you but provide aggregated information about households) i.e. production of derived data to help us manage and organise our members (indirect data collection); 
• From publicly available websites including, but not limited to, professional registration sites, Companies House, Land Registry, social media sites, company websites, news outlets, and online publications etc. (indirect data collection); 
• We may collect Personal Data that you manifestly choose to make public, including via social media (to the extent that you choose to make your profile publicly visible) (indirect data collection); 
• Where there may be an issue we may gain personal information about you from the venues we use, travel companies, food and beverage companies or other relevant service providers you interact with (indirect data collection);  
• From any organisation we contract to conduct any due diligence checks on members for either financial or safeguarding reasons we may have (indirect data collection); and  
• If applicable, from Police, Law Enforcement Agencies, Healthcare Services including the NHS, Adult Services, Children Services, Local Authority Designated Officers (LADO), charities, charitable organisations or agencies or any other safeguarding related institutions or organisation(s) (indirect data collection). 

What do we use your personal data for and what is our lawful basis for using it? 

We may use your personal data for the following purposes and on the following lawful bases. Not all purposes for using members personal data will be relevant to all members all of the time. NOTE: We do not sell your personal data to any third parties. 

Purpose for using personal data	Lawful basis for using
To process your membership application, register you as a member, manage your membership and communicate with you about all membership related matters over email, text (SMS) or by post e.g. policies, ballots, campaigns, events, Conference, fund-raising, party updates etc.	The lawful basis we shall be relying in accordance with UK General Data Protection Regulation (GDPR) Article 6.1(b) where the use your personal data is necessary in the performance of a contract which you have agreed to or where we are working to enter into a contract with you. And, Special categories of personal data used for the purpose of Substantial Public Interest under UK GDPR Article 9.2(g) in line with Schedule 1, Part 2, Paragraph 22 Political Parties of the Data Protection Act 2018.
To ensure you meet the conditions of membership at all times as outlined in the Labour Party Members Rule Book.
To share your membership details and relevant contact details, or access to them, with Labour Staff, Local Labour Organisers, other Labour Members (who are authorised vie internal protocols) within your Constituency Labour Party (CLP), Branch Labour Party (BLP) and Ward, and Local Labour Councillors. [NOTE: we have tiered secure access based on a person’s role in the Party and the geography they are associated to.]
For the Labour Party, elected representatives of the Labour Party, and any candidates in internal Labour Party elections, in which you are entitled to participate, to contact you and also use your information to campaign to you.
To send you constitutional emails, including but not limited to, notifications related to your membership payments, notifications about annual general meetings, parliamentary selections, and leadership selections etc. [NOTE: you will receive these even where you have opted out of any other forms of communications with you.]
To process any applications you make and subsequent procedures for any type of government or parliamentary candidate selection processes you are involved in, in line with the Labour Party Members Rule Book.
To allow the Labour Party to check your eligibility to participate in and administer the ballot process for relevant internal elections, as determined by the Labour Party’s National Executive Committee (“NEC”), including sending electronic ballots.
Where you have specifically indicated to us as appropriate to share personal data with the relevant affiliated organisation to verify you are a member of that organisation and to allow that affiliated organisation to update their records on the basis of the information you have provided.
To process membership payment, donation payments, and, if applicable, allow expenses generated in your role as a member to be reimbursed by the Labour Party.
To perform our activities of democratic engagement with you. [From the Data Protection Act 2018: “The term “democratic engagement” is intended to cover a wide range of political activities inside and outside election periods, including but not limited to: democratic representation; communicating with electors and interested parties; surveying and opinion gathering, campaigning activities; activities to increase voter turnout; supporting the work of elected representatives, prospective candidates and official candidates; and fundraising to support any of these activities“]	The lawful basis we shall be relying on is the for the performance of a task carried out in the public interest by a data controller in accordance with UK GDPR Article 6.1(e), also known as “Public Task”. And, Special categories of personal data used for the purpose of Substantial Public Interest under UK GDPR Article 9.2(g) in line with Schedule 1, Part 2, Paragraph 22 Political Parties of the Data Protection Act 2018.
For Labour and yourselves to conduct “political activities” which include campaigning, fund-raising, political surveys and case-work.
To help us develop Labour policy and documentation based on your views and opinions and any communications you have with us.
To conduct polls, petitions and ballots.
To administer membership suspensions and expulsions.
For us to identify and send you the most effective political campaign messaging to you and for you to be able to use. [NOTE: this is generally aggregated data we have purchased and usually is not able to directly identify you]	The lawful basis we shall be relying on is the legitimate interest of the Data Controller in accordance with UK GDPR Article 6.1(f). And, Special categories of personal data used for the purpose of Substantial Public Interest under UK GDPR Article 9.2(g) in line with Schedule 1, Part 2, Paragraph 22 Political Parties of the Data Protection Act 2018.
To send you invitations to participate in and help set up, manage and run any Labour Party events.
To invite you to help manage any volunteers who are giving us their time for our democratic processes.
To keep you up to date via newsletters, briefings, updates, and other communications that may promote the aims of the Labour Party, ask for donations or participation in things such as Labour Lottery etc. and also including providing political messages on social media. [NOTE: you can opt-out at any time although where you are already a member we are not required to gain your consent to send you this material either electronically or by post.]
To provide you with training that is of assistance to you campaigning with us.
To invite you to rejoin the Party at least twelve (12) months after you discontinued your membership. [NOTE: you can opt out of receiving our invitations to rejoin at any time although this will not mean we delete your personal data when you have stopped being a member.]
To process any appeals against suspensions and/or expulsions that you make.
To check your eligibility to donate or loan sums of more than £500 and to report relevant donations to the Electoral Commission.
To test, monitor and develop any of our physical or digital systems that hold your information and also develop models for targeting of campaign messaging to certain demographics and geographies.
To make relevant identity verification checks as a protective function based on when you contact us and what you are contacting us about, e.g. when a CLP is in “Special Measures”; Data Protection rights requests; Membership details update requests; password resets for your access to digital platforms etc.	The lawful basis we shall be relying on is the legitimate interest of the Data Controller in accordance with UK GDPR Article 6.1(f). And, Special categories of personal data used for the purpose of Substantial Public Interest under UK GDPR Article 9.2(g) in line with Schedule 1, Part 2, Paragraph 11 Protecting the public against dishonesty etc of the Data Protection Act 2018.
To conduct investigations into concerns or complaints about electoral fraud, financial fraud, criminality, safeguarding issues, welfare issues, inappropriate behaviour displayed toward members of the public or other Members, or any other activities which may cause or have the possibility of causing harm to others, either about you, where you may have been harmed, or where you are assisting us or acting as a witness. Where relevant, based on the outcome of investigation, we will also administer membership suspensions and expulsions based on the investigation.	Use of the personal data is necessary to protect the vital interests of an individual or individuals in accordance with UK GDPR Article 6.1(d). And, Special categories of personal data used for the purpose of Substantial Public Interest under UK GDPR Article 9.2(g) in line with Schedule 1, Part 2, Paragraph 18 – Safeguarding of children and of individuals at risk; and Paragraph 19 – Safeguarding of economic well-being of certain individuals, of the Data Protection Act 2018.
To identify personal data and take relevant action upon submission of a data subject rights request.	Compliance with a legal obligation under UK GDPR Article 6.1(c). The legal obligation is the UK General Data Protection Regulation to uphold your data protection rights. Special categories of personal data used for the purpose of Substantial Public Interest (Preventing or detecting unlawful acts; Protecting the public; Regulatory requirements) under UK GDPR Article 9.2(g).
To be able to assess any impact on individuals of a data breach involving personal data held on Labour Party systems or on third party systems.
To help protect an individual from neglect or physical, mental or emotional harm, or protect the physical, mental or emotional well-being of an individual.	Use of the personal data is necessary to protect the vital interests of an individual or individuals in accordance with UK GDPR Article 6.1(d). Special categories of personal data used for the purpose of Substantial Public Interest (Preventing or detecting unlawful acts; Protecting the public; Regulatory requirements) under UK GDPR Article 9.2(g).
To deal with legal claims and ongoing litigation cases.	Compliance with a legal obligation under UK GDPR Article 6.1(c). The legal obligation is the UK General Data Protection Regulation to uphold your data protection rights. Special categories of personal data used for the establishment, exercise or defence of legal claims or whenever courts are acting in their judicial capacity under UK GDPR Article 9.2(f).

If you have interacted with Labour in a different way and if you expected to see something different to the list above, you can access all of our privacy notices by clicking here. If it is still not there, feel free to get in touch as mentioned below. 

Who do we share your personal data with? 

Any data shared with the below categories of recipients is the minimum necessary for the task they have been instructed to carry out on our behalf or in conjunction with us. Each category of recipient is subject to review by the Data Protection Team to make sure they have the right methods in place for keeping your personal data secure. 

Where the sharing of personal data is within the context of a product or service being supplied under contract to Labour, a Data Processing Agreement, in accordance with GDPR Article 28 is put in place. This makes sure the supplier cannot use your personal data outside of the list of uses above. 

Within the purposes of using your personal data, as listed above, we will share your personal data with the following: 

1. Pre-approved digital membership, communications and storage providers; 

2. Pre-approved online balloting, survey, questionnaire or web-form platform providers; 

3. Pre-approved digital campaign designers and physical printing organisations; 

4. Any department or unit within the National Labour Party with an authorised level of access to membership data; 

5. If relevant and agreed by you or your representative, Labour Candidate(s) or MP’s or their office staff (both of which are separate data controllers although this Privacy Notice will be relevant for any work you do with them); 

6. If relevant to your Constituency Labour Party (CLP) or local Labour Candidate or MP’s office your data will be made accessible to them (all of which are separate data controllers although this Privacy Notice will be relevant for any work you do with or for them); 

7. If relevant and agreed by you, any relevant socialist societies or affiliated organisations which you have an interest or, upon becoming a member, you have provided your explicit permission for sharing your data from them to us and us with them; 

8. If relevant, venues, hotels, travel companies and any other concierge services;  

9. If relevant and agreed by you, media organisations which may include news media and journalists who represent specific and relevant views; 

10. If relevant and agreed by you, charities, charitable causes or individual families which have the possibility of being positively impacted from your contact and engagement with them (if agreed, any further uses of your personal data will be in line with their privacy information and Labour takes no liability for any use of your personal data in how they use your personal data). 

There may be scenarios where we are subject to a legal obligation to disclose or share your personal data, such as with law enforcement agencies, regulatory bodies or public authorities in order to prevent or detect crime, or prove we have adhered to their request. We will only ever disclose your personal data to these third parties to the extent we are required to do so by law. 

Data sharing with a third-party organisation that is not a supplier of a product or service to Labour does not occur unless there is a legal obligation or sound lawful purpose for such sharing.  For any such sharing we put a Data Sharing Agreement in place between Labour and the third-party containing specific information in accordance with the Information Commissioner’s Office ‘Data sharing code of practice’.  

This will include giving only relevant and often only geographically restricted access to your personal data to our local Labour Party organisations, Labour Candidates hoping to be elected, Labour Councillors, Labour Mayors and Labour Members of Parliament (MPs) so they can all conduct their democratic engagement activities. 

You can find further information on how local Labour Party organisations, Labour Candidates hoping to be elected, Labour Councillors, Labour Mayors and Labour Members of Parliament (MPs) use your personal data on their respective websites and more generally within our list of privacy notices which can be accessed by clicking here. 

Information on the meaning of ‘democratic engagement’ for national and local political parties, and their candidates and elected representatives can be found by clicking here. 

In all circumstances, the unlawful and unauthorised sharing of copies of personal data in which the Labour Party is the data controller is expressly prohibited. Any unauthorised sharing of Labour Party data is classified as a data breach which we will record and report to the ICO as required. 

How long will we keep your personal data? 

Data shall be reduced, redacted, de-identified and deleted at appropriate times so we retain the minimum amount of data possible when you are a member and further reduced when you are no longer a member. 

On the basis of keeping people safe from any harm, and our legitimate interest in knowing who has or has not been a member in the past when there may be future safeguarding or legal concerns or requests for member information, we retain all personal data we have captured from you. 

Unless you specifically tell us otherwise, we will retain your personal data in all locations where it is held or until such a time it is no longer tenable to keep your personal data for any reason.  

Where you do submit a right to deletion request (which can be accessed by clicking here), we will delete you from any and all locations we hold your personal data where it would mean we may make contact with you again (outside of our copy of the Electoral Register, and outside of when you make contact with us) although we will retain your information if: 

• It has been, or is being used within a complaints, disputes or grievance process by Labour and we may need to evidence this in the future to defend legal claims; 
• We need to keep it to comply with a legal obligation; 
• Erasing your data would prejudice scientific or historical research; 
• There is information associated with your data which is of a safeguarding concern to yourself or others; 

• Erasing will mean we lose our logs of when you made any data protection rights requests; and/or 
• Erasing will mean we are unable to understand if you have been a member in the past.  

What are your rights and how can you express them? 

To understand your data privacy rights and to submit a rights request, the best way to do so is by visiting the ‘YOUR RIGHTS’ page on our website which you can get to by clicking here. 

How can you complain about our use your personal data? 

The best way to make a complaint is by visiting our page on ‘HOW TO MAKE A DATA PROTECTION COMPLAINT’ which you can access by clicking here.  

How can you contact us about this privacy notice? 

If you have any questions about the information in this privacy notice, then you can contact the Data Protection Team via email using [email protected] or by post within a letter to: 

Labour Statutory Data Protection Officer 

The Labour Party, Southworks, 20 Rushworth Street, United Kingdom, SE1 0SS 

When was this privacy notice last updated? 

We may update this notice (and any supplemental privacy notice), from time to time as shown below. We will notify you of the changes where required by applicable law to do so. 

Last modified: 05 March 2024.