1.1  Under the Data Protection Act 1998 and the General Data Protection Regulation, I am required to explain to you why I may ask for information about you, how I intend to use the information you provide and whether I will share this with anyone else.

1.2 Mike Amesbury is the data controller

Who to contact

2.1 If you have any concerns or questions about my use of your personal data, you can contact me in writing at  The Old Police Station, Mersey Road, Runcorn WA7 1DF or at mike.amesbury.mp@parliament.uk

Why am I collecting your information?

3.1 The information that you provide to be by email or verbally on the phone or in person, or in writing is completely voluntary and is needed to enable me and my staff to assist with your enquiry.

What information am I collecting?

4.1 The information which I or my staff are collecting about you is the information you provide by email, on the phone, in person, or in writing.

4.2 We may also use the electoral register to confirm names and addresses.

4.3 It is possible that some of the information which we collect will be special categories of personal data (also called sensitive personal data):

• racial or ethnic origin;

• political opinions;

• religious beliefs;

• trade union membership;

• health;

• sexual life;

• alleged criminal activity; or

• court proceedings

What am I going to do with your information?

5.1 The information you provide to me will be used by myself and my staff for the following purposes:

5.1.1 It will be stored and used by me and my staff in accordance with this privacy statement and also in accordance with your rights under the Data Protection Act 1998 and the General Data Protection Regulation;

5.1.2. It will allow me to make representations on your behalf to try and resolve any issues you have. This may mean contacting other organisations, such as the Council or a Government Department or utility companies on your behalf. I will only do this with your consent;

5.1.3. It will allow me to provide assistance tailored to your needs.

5.2. An understanding of your personal situation and individual needs will allow me to provide tailored assistance to help with any physical, cultural, or financial needs that you may have.

5.3. Some of the information which I and my staff collect will be special categories of personal data (also called sensitive personal data), such as your financial situation or any disability you may have.  You need to be aware that we will use this information to help resolve any problems or issues that you have informed us about and that we will use this information in an appropriate manner.  This may include passing this sensitive information onto third-party agencies (such as Government Departments and Local Authorities) if I believe this to be necessary to pursue the matter you have raised with me. By providing this information you consent to our use of this information for this purpose.

What is the legal basis for using your information?

6.1 In accordance with the data protection laws, I need a “legal basis” for collecting and using information about you.  There are a variety of different legal bases for being a Data Controller for your personal data which are set out in the data protection laws.

6.2. The lawful basis on which I rely in order to be a Data Controller is;

6.2.1 It is necessary for tasks in the public interest or exercise of authority vested in the controller. Ie that I undertake these actions in my role as a Member of Parliament.

Consent

7.1 Under Section 2 of the Data Protection Act, implied consent is a valid form of consent for the purposes of an MP processing personal data in relation to constituency casework. However where there is uncertainty about a constituent’s wishes, further verbal or written consent may be sought.

7.2 The Data Protection (Processing of Sensitive Personal Data)(Elected Representatives) Order 2002 (“the order”) provides an additional condition (Schedule 3) so that explicit consent is not always needed when an MP processes sensitive personal data in connection with constituency casework.  However, the processing must be fair and lawful.

7.2.1 When a constituent contacts me for a reply or assistance, consent will be assumed at the point of contact.  Under the GDPR rules consent must be freely given, specific, informed and unambiguous.  Should you wish to withdraw your consent at any time, please contact me. 

7.3 Occasionally third party organisations require express written consent in addition to the representations from the MP, in this instance you will be requested to complete a Consent Form in order to satisfy the third-party organisation that consent was given by the constituent.

Transferring your information abroad

8.1. I will not transfer the information you provide outside of the European Economic Area.

Security of your information

9.1 The information you provide will be stored securely on my systems and processed through a 3rd Party company which also has a privacy statement that can be accessed here.  Any printed emails, written notes, letters, or hard copies of forms you have completed with personal data will be stored securely for a maximum of 2 years and will then be destroyed.  Electronic data will be held securely using 3rd party systems for 2 years.

9.2 Names and emails of those who sign up for the newsletter will be held on a Labour Party emailing system. This data will not be used for any other campaigning material. Requests to be removed from this newsletter email list should be sent to mike.amesbury.mp@parliament.uk

9.4 Only relevant members of staff will access the information you provide to me.

9.5 My security measures and procedures reflect the seriousness with which we approach security and the value I attach to your information.

Storing your information and deleting it

10.1. I will store the personal data which you provide to me electronically for a maximum period of one parliamentary term (5 years) unless you contact me to advise you want it to be removed.

10.2. I may keep hard copy (paper) files for a maximum of one parliamentary term (5 years) unless you contact me to advise you want it to be destroyed.

Your rights

11.1. In relation to the information which I hold about you, you are entitled to:

11.1.1 Ask for access to the information;

11.1.2 Ask to rectify the information where it is inaccurate or incomplete;

11.1.3. Ask me to erase the information;

11.1.4. Ask me to limit what we do with your information;

11.1.5. Object to my use of your information and ask me to stop that use;

11.1.6. Instruct me to provide you with the information I hold about you in a structured and commonly used format or transmit that information directly to another organisation.

11.2 Where I am using the information because you have provided your consent to that use, you are entitled to withdraw your consent at any time. The lawfulness of my use of your information before consent was withdrawn is not affected.

11.3. To exercise any of the rights referred to above, you should contact me by writing to Mike Amesbury, at The Old Police Station, Mersey Road, Runcorn, WA7 1DF or email mike.amesbury.mp@parliament.uk

11.4. You also have the right to complain to the Information Commissioner’s Office (the “ICO”) if you are not satisfied with the way I use your information.  You can contact the ICO by writing to Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF