Political & Campaigning Privacy Notice

Reform UK Party Ltd

1. Who We Are

Reform UK Party Ltd
Company No. 16260766
Registered Political Party (Electoral Commission Reg. No. PP7931)
Principal Office: Millbank Tower, 21–24 Millbank, London, SW1P 4QP
ICO Registration Reference: ZB934331

Reform UK Party Ltd (“Reform UK”, “we”, “us”, “our”) is a registered political party in the United Kingdom.

For the purposes of the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018 (“DPA 2018”) and the Data Use and Access Act 2025 (“DUAA 2025”), Reform UK Party Ltd acts as a Data Controller when processing personal data for political, campaigning, membership, fundraising and electoral purposes.

For data protection matters, please contact:
Email: [email protected]

2. Purpose of This Notice

This Political & Campaigning Privacy Notice explains how we collect, use, store and protect personal data in connection with:

• Political campaigning and elections
• Membership administration
• Supporter engagement
• Fundraising and donations
• Canvassing and voter contact
• Policy consultation and surveys
• Events and volunteer coordination

This notice supplements our general Privacy Policy and applies specifically to political and campaigning activities.

3. What Personal Data We Process

We may process the following categories of personal data:

Identity & Contact Data

• Full name
• Residential address
• Email address
• Telephone number
• Constituency and ward
• Social media identifiers

Electoral Register Data

• Data obtained from the electoral register as permitted by electoral law
• Polling district and registration status

Political Opinion Data (Special Category Data)

Where individuals:

• Join Reform UK as members
• Donate to the Party
• Sign petitions
• Respond to surveys
• Express political views
• Engage with campaign messaging
• Volunteer or canvass

Political opinion data constitutes Special Category Data under UK GDPR Article 9.

Engagement & Campaign Interaction Data

• Email opens and click-through data
• SMS responses
• Website interactions
• Event attendance
• Volunteer activity

Donation & Compliance Data

• Donation amount and date
• Payment confirmation details
• Due diligence information required under electoral law

4. Lawful Basis for Processing

We process personal data under the following lawful bases in UK GDPR Article 6:

• Article 6(1)(f) – Legitimate Interests
  Democratic engagement, political campaigning and supporter communication.
• Article 6(1)(c) – Legal Obligation
  Compliance with electoral law, reporting duties and statutory obligations.
• Article 6(1)(a) – Consent
  Where required, particularly for electronic marketing under PECR 2003.

For Special Category Data (political opinions), we rely on:

• Article 9(2)(d) UK GDPR – Processing by a political party in the course of legitimate activities
• Schedule 1, Part 2, Paragraph 22 DPA 2018

Reform UK maintains an Appropriate Policy Document in accordance with Schedule 1 DPA 2018.

5. How We Obtain Personal Data

We may obtain personal data:

• Directly from you (membership forms, petitions, events, surveys)
• From the electoral register (as permitted by law)
• From public sources
• From campaign interactions
• From approved service providers acting on our instructions

6. Profiling & Targeting

To improve campaign effectiveness and engagement, we may analyse demographic, geographic and engagement data to:

• Understand supporter interests
• Allocate campaign resources
• Tailor messaging
• Identify likely areas of interest

We do not carry out solely automated decision-making that produces legal or similarly significant effects under Article 22 UK GDPR.

7. Electronic Communications

We communicate by:

• Email
• SMS
• Telephone
• Post

Electronic communications are sent in accordance with:

• UK GDPR
• Data Protection Act 2018
• Data Use and Access Act 2025
• Privacy and Electronic Communications Regulations (PECR) 2003

Where required, we rely on consent. All electronic communications contain a clear opt-out mechanism.

You may withdraw consent or object to processing at any time.

8. Data Sharing

We may share personal data with:

• Approved data processors (e.g. CRM systems, email platforms, canvassing tools)
• Professional advisers
• Electoral authorities where legally required

All processors are subject to Article 28 UK GDPR contracts and appropriate security obligations.

We do not sell personal data.

9. International Transfers

Where service providers operate outside the United Kingdom, transfers are protected by:

• UK adequacy regulations
• International Data Transfer Agreements (IDTAs)
• UK Addendum to Standard Contractual Clauses

10. Data Retention

We retain personal data only as long as necessary for:

• Electoral cycles
• Membership administration
• Ongoing political engagement
• Legal reporting requirements

Retention is governed by our internal Data Retention Policy in accordance with:

• UK GDPR Article 5(1)(e)
• DUAA 2025 transparency provisions

11. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Rectification
• Erasure (where applicable)
• Restriction of processing
• Object to processing (including political campaigning)
• Data portability (where applicable)

You may exercise your rights by contacting: [email protected]

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO): www.ico.org.uk

12. Security Measures

Reform UK implements appropriate technical and organisational measures in accordance with:

• UK GDPR Article 32
• Data Protection Act 2018
• Data Use and Access Act 2025

These include access controls, encryption, role-based permissions, audit logging and structured governance oversight.

13. Updates to This Notice

This notice may be updated periodically to reflect changes in law, regulatory guidance or Party operations. The most current version will always be available on our website.