Last updated: 29th May 2024

Privacy Policy

This document outlines the procedures employed by Jo Gideon in the management and processing of personal data, covering the following aspects:

Data Controller
Jo Gideon acts as the Data Controller.

Contact
For inquiries regarding this policy or to obtain more information on how your data is utilised or to exercise your rights, please contact Jo Gideon.

Lawful Basis for Processing
All processing activities are conducted with explicit consent or fall under the legitimate interests of Jo Gideon, or public interest. These activities encompass casework, campaigning, and communication, all aimed at supporting or promoting democratic engagement, including fundraising endeavours.

Data Sources
The data held is primarily provided by individuals during direct contact and through correspondence with third parties concerning cases taken up on their behalf. Additionally, data provided by individuals during interactions initiated by Jo Gideon, such as surveys or petitions, may also be retained. To respect privacy preferences, individuals are advised against providing telephone contact information if they do not wish to be contacted via this method.

Data Security
Personal data is securely stored electronically, ensuring compliance with stringent standards. Our data is hosted on servers within the UK, and our service providers are held to the same high standards.

Special Category Data
Special category data is processed in accordance with the lawful basis outlined in section 3, as permitted by applicable regulations.

Transferring Your Data Outside of the European Economic Area
Data transfers outside of the European Economic Area (EEA) adhere to relevant data protection regulations, ensuring data protection standards are maintained. Necessary safeguards, such as contractual agreements, are employed to uphold data security standards.

Data Retention Policy
Personal data is retained only for as long as necessary, typically up to two election cycles. Regular reviews are conducted during each election cycle to determine data retention status, in compliance with relevant guidelines.

Subject Access Requests
Requests for access to personal data are processed promptly, following verification of identity. A log of Subject Access Requests is maintained indefinitely, as per applicable regulations.

Sharing Your Data
Personal or policy-related data may be shared with third parties involved in addressing individual inquiries, such as local authorities or government agencies. Any such sharing is conducted securely and solely for the intended purpose.

Data Rights
Individuals retain rights concerning their personal data, including access, rectification, erasure, objection, and judicial review. Procedures for exercising these rights are outlined.

Making a Complaint
Individuals have the right to lodge complaints regarding data handling with the relevant regulatory authority. Contact details for the regulatory authority are provided by clicking here.