Privacy Notice
This website and all data collected herein are owned by Lucy for Deputy Leader Limited (a company which is currently being registered at Companies House and is referred to in this document as “we”, “us” or “our”).
We are committed to protecting your privacy, including online, and in the transparent use of any online information you give us in accordance with our legal obligations. This Privacy Policy sets out in detail the purposes for which we process your personal data, who we share it with, and what rights you have in relation to your data.
Personal data means data which relate to an individual who can be identified (i) from the data, or (ii) from the data and other information which is in the possession of, or is likely to come into the possession of, the data controller, and includes any expression of opinion about the individual and any indication of the intentions of the data controller or any other person in respect of the individual.
In accordance with Data Protection law, we are a Data Controller and accountable for the way we process your data. Protecting your privacy is very important to us and we are committed to protecting your privacy in accordance with our legal obligation.
This privacy notice tells you what to expect us to do with your personal information.
Contact details: Hello@lucyfordeputy.co.uk.
What information we collect, use, and why
We may collect data from website subscription forms, petitions and surveys and cookies and IP addresses. We collect or use the following information:
Names and contact details
Addresses
Marketing preferences
IP addresses
Other information you have inputted in our website forms, petitions and surveys,
Records of consent
What do we use your data for?
Lawful bases and data protection rights
Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR, which you can find here: Data protection principles, definitions, and key terms | ICO.
Our lawful bases for collecting or using personal information for service updates or marketing purposes are:
Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
Legitimate interest - We may also use legitimate interest where we believe the individual may have a reasonable expectation that their data is processed, for instance to inform members and supporters of campaign activities.
Which lawful basis we rely on may affect your data protection rights which are set out in brief below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website, here: Individual rights - guidance and resources | ICO.
Your right of access - You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for.
Your right to rectification - You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete.
Your right to erasure - You have the right to ask us to delete your personal information.
Your right to restriction of processing - You have the right to ask us to limit how we can use your personal information.
Your right to object to processing - You have the right to object to the processing of your personal data.
Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you.
Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time.
If you make a request, we must respond to you without undue delay and in any event within one month.
To make a data protection rights request, please contact us at Hello@lucyfordeputy.co.uk.
Where we get personal information from
Directly from you.
How long we keep information
Your data will be kept for 12 months. Where you have donated to the campaign, the related data may be held for a period of 6 years to ensure that we can comply with our legal obligations.
Who we share information with
From time to time we may need to share some of your data with a third party processor (such as technology providers, website hosts, online systems). Where we do so we will have a data processing agreement with the third party, and where they are located outside of the United Kingdom we will ensure that they provide rough security and privacy to enable us to meet our legal obligations to you.
How to complain
If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.
If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
Website: https://www.ico.org.uk/make-a-complaint
Last updated: 13 September, 2025
Schedule 5 – Privacy Notice for the Labour Party Deputy Leadership Election 2025
Introduction
We are the Labour Party a century old political organisation, borne out of the trade union movement and built on equality, social justice and compassion. We are committed to placing the rights of individuals at the centre of how we collect, hold and use personal data.
The Labour Party and the validly nominated candidates (“we”, “us”, “our”) for the Labour Party Deputy Leadership Election 2025 (“Election”) is committed to protecting the privacy and security of the personal data used in this Election. Together we are the data Controller.
The Labour Party is registered with the Information Commissioner’s Office (ICO) for data protection purposes (registration number Z5487928). All uses of personal data within this Election is in accordance with the rules of the UK Data Protection Regulation, the Data Use and Access Act 2025, and the UK General Data Protection Regulation (UK GDPR).
Please read this privacy notice carefully as it provides important information about how we handle your personal information and your rights.
If you have any questions about any aspect of any of this privacy notice you can contact us by emailing us at dataprotection@labour.org.uk quoting “Deputy Leadership Election 2025”.
Personal data used and accessed in this Election
We shall be using the data of several types of individual (Data Subject) and have been collected by the organisation or party in which you are a member at the point of joining as a member. Please read the section below that is relevant to you:
1. Political Officers of Affiliated Organisations (Trade Unions and Socialist Societies)
Contact name; Email Address; Name of Trade Union or Socialist Society
2. Those Eligible to Vote in this Election (Labour Party Members and Eligible Individuals within Affiliated Organisations)
First name; Middle name; Family name; Date of Birth; Postal Address; Postcode; Mobile number; Email address; Union or Socialist Society Reference; Voting Eligibility status; Whether voting for the candidate or not.
3. Candidate Only: Election Campaign Doners
This will follow the same rules and criteria as set out in the Labour Party Doners Privacy Notice: https://labour.org.uk/privacy/privacy-notices/donations-privacy notice/
4. Candidate Only: Election Campaign Supporters
This will follow the same rules and criteria as set out in the Labour Party Supporters Privacy Notice: https://labour.org.uk/privacy/privacy-notices/labour-party supporters/
The Candidate will act as an independent data controller for the personal data related to Donors and Supporters. This data will not be managed or shared with the Labour Party unless there is a legal obligation to do so. The data of eligible voters and political officers is managed by both organisations as joint data controllers (only for the uses within this Election).
Purposes for which we use personal data and the legal basis
When conducting the research study, we may use your personal data for the following purposes and on the following lawful bases. The table below is relevant to all data subjects involved in the research study:
Purpose
Purpose
- For the Labour Party to issue Ballot’s to all individuals who are eligible to cast a vote in this Election.
- For the Labour Party’s independent Election ballot management service provider to run a de-duplication procedure to ensure all individuals who are eligible to vote are accounted for.
- For the Labour Party to manage Ballot issuing concerns.
Lawful Basis for Processing
Lawful Basis for Processing
- The lawful basis we shall be relying on is the for the performance of a task carried out in the public interest by a data controller in accordance with UK GDPR Article 6.1(e), also known as “Public Task”. The basis in law for this use of personal data is found in the Section 8 of the Data Protection Act 2018, Explanatory Notes for “Democratic Engagement”.
And,
Special categories of personal data used for the purpose of Substantial Public Interest under UK GDPR Article 9.2(g) in line with Schedule 1, Part 2, Paragraph 22 Political Parties of the Data Protection Act 2018.
Purpose
Purpose
- For the Labour Party’s validly nominated deputy party leadership candidates to have access to systems that allow them to contact Labour Members and use their personal data to campaign to you. This includes, invitations to their campaign events, making calls, sending emails, and sending campaign material in the post.
Lawful Basis for Processing
Lawful Basis for Processing
- The lawful basis we shall be relying in accordance with UK General Data Protection Regulation (GDPR) Article 6.1(b) where the use your personal data is necessary in the performance of a contract which you have agreed to or where we are working to enter into a contract with you.
And,
Special categories of personal data used for the purpose of Substantial Public Interest under UK GDPR Article 9.2(g) in line with Schedule 1, Part 2, Paragraph 22 Political Parties of the Data Protection Act 2018.
Purpose
Purpose
- For Donors (where the data has been collected by the Candidate and not shared from the Labour Party to the Candidate): To check your eligibility to donate or loan sums of more than £500 and to report relevant donations to the Electoral Commission.
- For Donors (where the data has been collected by the Candidate and not shared from the Labour Party to the Candidate): To share relevant contact details, or access to them, with relevant Labour Staff who process donations. This may mean making contact with you where there is an issue with a donation or other related reasons.
- For Supporters (where the data has been collected by the Candidate and not shared from the Labour Party to the Candidate): To send you invitations to participate in the Candidate’s campaign.
Lawful Basis for Processing
Lawful Basis for Processing
- The lawful basis we shall be relying on is the legitimate interest of the Data Controller in accordance with UK GDPR Article 6.1(f).
And,
Special categories of personal data used for the purpose of Substantial Public Interest under UK GDPR Article 9.2(g) in line with Schedule 1, Part 2, Paragraph 22 Political Parties of the Data Protection Act 2018.
Purpose
Purpose
- For Donors (where the data has been collected by the Candidate and not shared from the Labour Party to the Candidate): To conduct investigations into concerns or complaints about electoral fraud, financial fraud, or related criminality.
- To conduct investigations into concerns or complaints about electoral fraud, financial fraud, criminality, safeguarding issues, welfare issues, inappropriate behaviour displayed toward members of the public or other Members, or any other activities which may cause or have the possibility of causing harm to others, either about you, where you may have been harmed, or where you are assisting us or acting as a witness. Where relevant, based on the outcome of investigation, we will also administer membership suspensions and expulsions based on the investigation.
Lawful Basis for Processing
Lawful Basis for Processing
- Use of the personal data is necessary to protect the vital interests of an individual or individuals in accordance with UK GDPR Article 6.1(d).
And,
Special categories of personal data used for the purpose of Substantial Public Interest under UK GDPR Article 9.2(g) in line with Schedule 1, Part 2, Paragraph 18 - Safeguarding of children and of individuals at risk; and Paragraph 19 -
Safeguarding of economic well-being of certain individuals, of the Data Protection Act 2018.
Purpose
Purpose
- To identify personal data and take relevant action upon submission of a data subject rights request.
- To be able to assess any impact on individuals of a data breach involving personal data held on Labour Party systems or on third party systems.
Lawful Basis for Processing
Lawful Basis for Processing
- Compliance with a legal obligation under UK GDPR Article 6.1(c). The legal obligation is the UK General Data Protection Regulation to uphold your data protection rights.
Special categories of personal data used for the purpose of Substantial Public Interest (Preventing or detecting unlawful acts; Protecting the public; Regulatory requirements) under UK GDPR Article 9.2(g).
Sharing your data
Candidates are provided secure, password protected access to the list of Political Officers of Affiliated Organisations.
Candidates are not provided with a list of Labour Members. Use of Labour Member’s personal data remains within the technical systems controlled by the Labour Party. Access credentials are limited to the Candidate and their nominated individuals within their Campaign Team. All access is monitored by the Labour Party.
Candidates and their nominated Campaign Team members will be able to call, email and send post to Labour Members through the use of digital systems that do not reveal the identity of the Labour Member they wish to contact.
Only the digital telephone calling service reveals the name of the Labour Member and the name of their Constituency Labour Party at the point of automatically dialling the Labour Member on their behalf. This is briefly displayed on the screen for the duration of the call, disappearing when the call connection has ended.
All personal data is only access from the UK. The personal data is never sold or shared with any other individuals other than those specified within this notice.
The Labour Party and the Affiliated Organisations will, separately, securely share their lists of individuals who are eligible to cast a vote in the Election ballot with the Election ballot management service provider.
The Labour Party holds information in the UK and the EU. Personal data does not move to any geographies outside the UK or EU based on the settings within the legitimate service providers used to process the data. These include, technical communications and storage, mass mailer, print and calling software service providers. The personal data is not shared with any Artificial Intelligence models at any time.
There may be scenarios where we are subject to a legal obligation to disclose or share your personal data, such as with law enforcement agencies, regulatory bodies or public authorities in order to prevent or detect crime. We will only ever disclose your personal data to these third parties to the extent we are required to do so by law.
How long we keep your data
All personal data shared with the Candidate will be deleted within 14 days of the completion of the Election. Any data access provisions provided by the Labour Party to Candidates for the Election will be revoked within 3 hours of completion of the Election.
Where a Candidate drops out of the Election for any reason, they have agreed to notify the Labour Party and delete any personal data they have been given access to within 24 hour. The Labour Party will also revoke access provisions within 3 hours of notification.
Candidates have agreed to notify the Labour Party immediately if there are any changes to the named individuals in their campaign team whose access to any data for the Election will be immediately revoked by the Labour Party. The Candidate has agreed to ensure they receive confirmation of deletion of any data provided to their ex-campaign team member.
At the completion of the Election, and upon receipt of confirmation of deletion/destruction forms from the Candidates all personal data will revert to the terms of use where the Labour Party is the sole data controller. To understand how the Labour Party will process your personal data after the Election, please refer to the relevant privacy notice on the Labour Party website: https://labour.org.uk/privacy/
How we protect your data
We implement appropriate technical and organisational measures to protect data that we process from unauthorised disclosure, use, alteration or destruction. A data protection risk assessment was conducted to account for the risks associated with the use of personal data in this Election.
Any personal data is not subject to any automated decision-making.
Your rights and options
You have the following rights in respect of your personal data:
You have the right of access to your personal data and can request copies of it and information about our processing of it.
If the personal data we hold about you is incorrect or incomplete, you can ask us to rectify or add to it.
Where we are using your personal data with your consent, you can withdraw your consent at any time.
Where we are using your personal information because it is in our legitimate interests to do so, you can object to us using it this way.
Where we are using your personal data for direct marketing, including profiling for direct marketing purposes, you can object to us doing so.
You can ask us to restrict the use of your personal data if:
it is not accurate,
It has been used unlawfully but you do not want us to delete it,
We do not need it any-more, but you want us to keep it for use in legal claims, or
if you have already asked us to stop using your data but you are waiting to receive confirmation from us as to whether we can comply with your request.
In some circumstances you can compel us to erase your personal data and request a machine-readable copy of your personal data to transfer to another service provider.
You have the right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you.
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.
If you wish to exercise your rights, please contact us at: dataprotection@labour.org.uk.
Contact us
If you have any questions, or wish to exercise any of your rights, then you can contact:
Organisation: The Labour Party
Address: Southworks, 20 Rushworth Street, United Kingdom, SE1 0SS
Alternatively, you can email us at dataprotection@labour.org.uk
Changes to this privacy notice
We will notify you of the changes where required by applicable law to do so.
Last modified 16 September 2025.