Political & Campaigning Privacy Notice

Reform UK Party Ltd

1. REFORM UK PARTY LTD – PRIVACY NOTICE

   1. Who We Are

   Reform UK Party Ltd (Company No. 16260766), a registered political party (Electoral Commission Reg. No. PP7931), with its principal office at Millbank Tower, 21–24 Millbank, London SW1P 4QP.

   ICO Registration: ZB934331
   Contact: [email protected]

   We act as a Data Controller under the UK General Data Protection Regulation (“UK GDPR”) and Data Protection Act 2018.

   2. How We Collect Your Data

   We collect personal data:

   • Directly from you (e.g. memberships, donations, competitions)
   • From publicly available sources (e.g. electoral register where permitted)
   • From third-party platforms (where lawful)

   2A. Prize Draws, Competitions and Promotions

   Where you enter competitions, prize draws or promotional campaigns, we collect:

   • Identity data (name, contact details)
   • Eligibility and entry data
   • Political opinion data (e.g. voting intention or preferences where required)

   Special Category Data

   Political opinion data constitutes special category data under UK GDPR Article 9.

   Where collected, it is processed on the following basis:

   • Article 6(1)(f) – Legitimate Interests
   • Article 9(2)(d) – Processing by a political party in the course of its legitimate activities
   • Schedule 1, Part 2 Data Protection Act 2018 (democratic engagement)

   Purpose of Processing

   We process this data to:

   • Administer competitions and verify eligibility
   • Understand engagement and participation trends
   • Inform and improve democratic engagement activities
   • Ensure fairness, transparency, and integrity of campaign activity

   Safeguards

   • Data minimisation and purpose limitation applied (UK GDPR Art 5(1)(b)-(c))
   • Restricted internal access on a need-to-know basis
   • Retention limits applied (see Section 8)
   • No use for automated decision-making or profiling producing legal effects
   3. Types of Personal Data We Process

   We may process:

   • Identity Data (name, address)
   • Contact Data (email, phone)
   • Technical Data (IP address, device)
   • Usage Data
   • Marketing Preferences
   • Donation and membership data
   • Electoral register data (where lawful)

   Special Category Data

   We may process special category data, including:

   • Political opinions (e.g. voting intention, preferences, engagement data)

   This may be:

   • Voluntarily provided, OR
   • Required as part of participation in certain activities (e.g. competitions or campaigns)

   All such processing is conducted strictly in accordance with:

   • UK GDPR Article 9(2)(d)
   • Data Protection Act 2018 Schedule 1 conditions
   • Appropriate safeguards and internal controls
   4. Lawful Bases for Processing

   We rely on:

   • Article 6(1)(a) – Consent
   • Article 6(1)(b) – Contract
   • Article 6(1)(c) – Legal obligation
   • Article 6(1)(f) – Legitimate interests

   For special category data:

   • Article 9(2)(d) – Political party exemption
   • Schedule 1 DPA 2018
   5. How We Use Your Data

   We use personal data to:

   • Manage memberships and supporters
   • Process donations
   • Administer campaigns and communications
   • Conduct democratic engagement activities
   • Operate competitions and promotions
   • Ensure compliance with legal obligations
   6. Sharing Your Data

   We may share data with:

   • Service providers (processors under Article 28 UK GDPR)
   • Regulators (e.g. Electoral Commission, ICO where required)
   • Professional advisers

   All sharing is subject to appropriate safeguards.

    

    

   7. International Transfers

   Where data is transferred outside the UK:

   • Adequacy decisions, or
   • Appropriate safeguards (e.g. SCCs) are used
   8. Data Retention

   We retain data only as long as necessary.

   • Competition data: retained for administration and audit purposes
   • Political opinion data: retained only where necessary for democratic engagement
   • Suppression records: retained to respect objections (Article 21 UK GDPR)

   Data is securely deleted or anonymised when no longer required.

   9. Your Rights

   You have the right to:

   • Access your data (Article 15)
   • Rectification (Article 16)
   • Erasure (Article 17)
   • Restriction (Article 18)
   • Object (Article 21)
   • Data portability (Article 20)

   Requests can be made to: [email protected]

   10. Complaints

   You may complain to the ICO:

   Information Commissioner’s Office
   www.ico.org.uk

   We encourage you to contact us first.

    

    

   11. Security

   We implement appropriate technical and organisational measures in accordance with:

   • UK GDPR Article 32
   • Data Protection Act 2018
   12. Updates to This Notice

   This Privacy Notice is reviewed regularly and updated as required.