Website visitors privacy notice
What personal data do we collect?
When you visit our website, we will collect the following information about you:
- Information about the device used to access our website, your visits and use of the website including your IP address, internet log information, location, browser type and version, referrer and activity, and details of visitor behaviour patterns;
- We record your activity and preferences when visiting our website through the use of cookies (see “Cookies”, below); and
- IP address, operating system and browser information.
Where do we get your personal data?
We collect data about you from your device and via third-party website analytics services such as Google Analytics and cookies (see below) when you visit our website. We do not make, and do not allow our Google Analytics settings to make, any attempt to find out the identities of those visiting our website.
This website includes embedded content (e.g., videos, images, articles, etc.) from other websites and links to external websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow other parties to collect or share data about you. Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website. We do not control these external websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.
Cookies
As you interact with our website, we automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies and other similar technologies to enhance your experience of our website.
Our website uses cookies for collecting user information which may include IP address, operating system, and browser information. We use persistent cookies to track returning visitors. They expire after 12 months and enable us to compare website traffic from month to month.
Cookies are text files, which identify a user’s computer to our servers. Cookies in themselves do not identify the individual user, just the computer used.
You can manage and delete cookies through your web browser. Each browser manages cookies differently, but you can learn more about cookie settings in the most common browsers using the links below:
You can also prevent your data from being used by Google Analytics by using the Google Opt-out Browser Add-on, available at this link.
What do we use your personal data for and what is our lawful basis for using it?
The table below is relevant to everyone who visits this website.
| Purpose for using personal data | Lawful basis for using |
| Monitor the website and keep it secure, it helps us understand how we might improve the website through numbers of visits, visitor patterns and behaviour. | The lawful basis we shall be relying on is the legitimate interest of the Data Controller in accordance with UK GDPR Article 6.1(f). |
| Run our organisation, provide administration and IT services, ensure network security, and prevent fraud. | |
| Collect information to understand more about our stakeholders’ interests and preferences and to inform our marketing strategy. | |
| To keep our website updated and relevant, to develop our organisation, and to inform our marketing strategies. | |
| Answer any enquiries you submit to us via the website inclusive of information submitted via any webform, survey, poll or information capture on any part of the website. | |
| There are a number of reasons for Labour’s use of cookies which can be found on our Cookie Policy and you can access by clicking here. | The consent you have provided us for this use of your personal data in accordance with UK GDPR Article 6.1(a). |
| To add you to digital communications activities lists and send you content where you have indicated your consent for us to do so. | |
| To identify personal data and take relevant action upon submission of a data subject rights request. | Compliance with a legal obligation under UK GDPR Article 6.1(c). The legal obligation is the UK General Data Protection Regulation to uphold your data protection rights. Special categories of personal data used for the purpose of Substantial Public Interest (Preventing or detecting unlawful acts; Protecting the public; Regulatory requirements) under UK GDPR Article 9.2(g). |
| To be able to assess any impact on individuals of a data breach involving personal data held on Labour Party systems or on third party systems. | |
| To help protect an individual from neglect or physical, mental or emotional harm, or protect the physical, mental or emotional well-being of an individual. | Use of the personal data is necessary to protect the vital interests of an individual or individuals in accordance with UK GDPR Article 6.1(d). Special categories of personal data used for the purpose of Substantial Public Interest (Preventing or detecting unlawful acts; Protecting the public; Regulatory requirements) under UK GDPR Article 9.2(g). |
| To deal with legal claims and ongoing litigation cases. | Compliance with a legal obligation under UK GDPR Article 6.1(c). The legal obligation is the UK General Data Protection Regulation to uphold your data protection rights. Special categories of personal data used for the establishment, exercise or defence of legal claims or whenever courts are acting in their judicial capacity under UK GDPR Article 9.2(f). |
NOTE: This notice is specific to the use of the website you are currently on and not relevant to any other Labour platforms which may be accessible via this website or any other website of a similar name.
If you have interacted with Labour in a different way and if you expected to see something different to the list above, you can access all of our privacy notices by clicking here. If it is still not there, feel free to get in touch as mentioned below.
Who do we share your personal data with?
Any data shared with the below categories of recipients is the minimum necessary for the task they have been instructed to carry out on our behalf or in conjunction with us. Each category of recipient is subject to review by the Data Protection Team to make sure they have the right methods in place for keeping your personal data secure.
Where the sharing of personal data is within the context of a product or service being supplied under contract to Labour, a Data Processing Agreement, in accordance with GDPR Article 28 is put in place. This makes sure the supplier cannot use your personal data outside of the list of uses above.
Within the purposes of using your personal data, as listed above, we will share your personal data with the following:
- Pre-approved website and analytics services and hosting service providers; and
- Pre-approved cloud services and IT security services providers that manage, monitor and track all website uses including all data captured from our website.
There may be scenarios where we are subject to a legal obligation to disclose or share your personal data, such as with law enforcement agencies, regulatory bodies or public authorities in order to prevent or detect crime, or prove we have adhered to their request. We will only ever disclose your personal data to these third parties to the extent we are required to do so by law.
How long will we keep your personal data?
We will only keep personal information for as long as it is needed to fulfil the purpose for which it was collected.
Depending on your reason for visiting the website and how you decide to interact with our website will determine the amount of time we retain your personal information outlined above.
What are your rights and how can you express them?
To understand your data privacy rights and to submit a rights request, the best way to do so is by visiting the ‘YOUR RIGHTS’ page on our website which you can get to by clicking here.
How can you complain about our use your personal data?
The best way to make a complaint is by visiting our page on ‘HOW TO MAKE A DATA PROTECTION COMPLAINT’ which you can access by clicking here.
How can you contact us about this privacy notice?
If you have any questions about the information in this privacy notice, then you can contact the Data Protection Team via email using [email protected] or by post within a letter to:
Labour Statutory Data Protection Officer
The Labour Party, Southworks, 20 Rushworth Street, United Kingdom, SE1 0SS
When was this privacy notice last updated?
We may update this notice (and any supplemental privacy notice), from time to time as shown below. We will notify you of the changes where required by applicable law to do so. Last modified: 05 March 2024.