Privacy Notice - Donna Jones for Mayor Campaign

This privacy notice explains how the Donna Jones for Mayor campaign (“we”, “us”, “our”) collects, stores, uses, and shares your personal data. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We are committed to safeguarding your privacy and ensuring your data is used responsibly for democratic engagement.

⸻

1. Data Controller

The data controller responsible for your personal data is:

Donna Jones for Mayor Campaign
14 East St, Fareham PO16 0BN, United Kingdom
[email protected]

We use NationBuilder, a political CRM and website platform, as our primary data system. When using NationBuilder services, we and NationBuilder Inc. may act as joint controllers for certain processing operations, particularly those necessary for running supporter databases, petitions, email communications, and online forms.

We may also act as joint controllers with The Conservative Party, including its national headquarters, regional bodies, and local associations, where data is used for shared political campaigning.

⸻

2. Personal Data We Collect

We may collect, generate, or receive the following categories of personal data:

Information you provide directly
• Name, address, email address, phone number
• Your petition signatures, survey responses, volunteering interests, or correspondence
• Donations and payment information (processed through NationBuilder-integrated payment providers)
• Preferences for communication, including opt-ins and opt-outs

Data relating to democratic engagement
• Electoral roll information provided to the campaign under electoral law
• Polling district, elector number, and demographic or geographic identifiers
• Information you choose to share about political opinions or voting intentions

Digital interaction data
• Website interactions via NationBuilder-hosted pages
• IP addresses, device information, cookie identifiers, and engagement statistics
• Responses to emails, petitions, forms, social media engagement, and digital advertising

Data from third parties
• Information from The Conservative Party, including supporter lists
• Voter data supplied under election regulations
• Publicly available sources such as social media or the open electoral register

⸻

3. How Your Data Is Stored

Your data is stored securely within NationBuilder’s servers, which may be located outside the UK. Transfers outside the UK are protected by appropriate safeguards such as Standard Contractual Clauses.

Additional secure systems may be used for email delivery, analytics, volunteer management, advertising platforms, and compliance reporting. All providers must meet UK GDPR standards.

⸻

4. Legal Bases for Processing

We rely on the following legal bases:

Article 6(1)(e) – Public task

Processing carried out in the public interest for democratic engagement, including communicating with voters, encouraging participation, and promoting political ideas.

Article 6(1)(f) – Legitimate interests

Running a political campaign, informing voters, managing supporters, improving outreach, and preventing misuse of campaign systems.

Article 6(1)(c) – Legal obligation

Compliance with electoral law, donation reporting, financial transparency, and regulatory requirements.

Article 9(2)(g) – Substantial public interest

Processing of political opinions and sensitive data for political campaigning, in line with Schedule 1 of the Data Protection Act 2018.

Where required, we may also rely on Article 6(1)(a) – Consent, which you may withdraw at any time.

⸻

5. How We Use Your Data

Your personal data may be used to:
• Contact you about the mayoral campaign, including updates, newsletters, petitions, and event information
• Manage and analyse campaign communications through NationBuilder
• Process donations, event registrations, and volunteer activities
• Customise political messaging and digital advertising
• Coordinate activities with The Conservative Party
• Conduct voter outreach, canvassing, and mobilisation
• Perform data analytics to measure campaign effectiveness
• Meet statutory obligations under electoral and donations law

We do not use your data for automated decision-making that produces legal or similar significant effects.

⸻

6. How Your Data Is Shared

We may share personal data with:

The Conservative Party

Including national, regional, and local structures, for coordinated political campaigning, supporter engagement, data updating, and election activity.

NationBuilder Inc.

As a joint controller for specific functions related to supporter management and digital engagement.

Trusted Data Processors

Including providers of:
• Email systems
• Petition and form handling
• Payment processing
• Digital advertising platforms (Meta, Google, etc.)
• Cloud hosting and website management
• Analytics and reporting tools

All processors operate under strict contracts requiring compliance with UK GDPR.

Regulators

Such as the Electoral Commission and law enforcement bodies, where disclosure is required by law.

No sale of data

We never sell, rent, or commercially trade your personal data.

⸻

7. International Data Transfers

Where your data is transferred outside the UK—such as to NationBuilder’s infrastructure—transfers are protected by legally approved mechanisms, including Standard Contractual Clauses and NationBuilder’s own compliance frameworks.

⸻

8. Data Retention

We retain data only for as long as necessary for democratic engagement, campaign management, legal obligations, and financial reporting. Data that is no longer required will be anonymised or securely deleted.

Some categories, such as donation records, must be retained for statutory periods under electoral law.

⸻

9. Your Rights

Under UK GDPR, you have the right to:
• Access your personal data
• Request correction of inaccurate information
• Request deletion of your data (where lawful)
• Object to or restrict processing
• Withdraw consent for communications
• Request data portability (where applicable)
• Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise your rights, please contact us using the details provided above.

⸻

10. Data Security

We implement robust organisational and technical measures to safeguard personal data. Access to data is restricted to individuals who require it for campaign purposes and who are trained in data protection obligations.

⸻

11. Updates to This Notice

We may update this notice from time to time. Updated versions will be published on our website with the revised date.

Last updated: 8 December 2025