Privacy

Last updated: August 2026

About this Privacy Policy

This Privacy Policy explains how the Michael Marra for Leader campaign ("the Campaign", "we", "our" or "us") collects, uses and protects personal information when you visit our website or contact the campaign.

We are committed to protecting your privacy and handling your personal information fairly, lawfully and transparently in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

This website is operated by the Michael Marra for Leader Campaign in connection with the Scottish Labour Party Leadership Election.

For any questions about this Privacy Policy or how your information is used, please contact:

Email: [Insert campaign email]

Information we collect

We may collect personal information that you choose to provide, including:

your name
email address
telephone number
postal address
any information you include in correspondence with us
records of communications between you and the campaign

We also collect limited technical information automatically when you visit our website, including:

IP address
browser type
operating system
pages visited
time spent on the website
referring website
cookie preferences

This information is used to help improve the performance, security and accessibility of the website.

How we use your information

We only use your personal information where we have a lawful basis to do so.

Depending on how you interact with the campaign, we may use your information to:

respond to enquiries
provide information you have requested
administer campaign events
communicate with supporters who have asked to hear from us
improve our website and campaign communications
protect the security of our website
comply with legal obligations

We will never use your information for purposes that are incompatible with those explained in this Privacy Policy.

Leadership Election Membership Data

As part of the Scottish Labour Party Leadership Election, the Campaign may receive membership or elector information directly from the Scottish Labour Party under the Party's Leadership Election Rules.

This information:

is supplied solely by the Scottish Labour Party;
remains subject to the Party's Leadership Election Code;
is used only for communicating with eligible electors about the leadership election;
is not merged with information collected through this website;
is held separately from website data;
is deleted in accordance with the Party's requirements at the end of the election.

This website does not collect or publish Party membership information.

Lawful basis for processing

Depending upon the circumstances, we process personal information because:

you have given consent;
processing is necessary for our legitimate interests in operating the campaign and responding to enquiries;
processing is necessary to comply with legal obligations;
where applicable, processing is carried out in accordance with the provisions governing political activities under UK data protection legislation.

Where Special Category Data is processed in connection with the Leadership Election, this is done only in accordance with the lawful conditions provided under the UK GDPR, the Data Protection Act 2018 and the Scottish Labour Party Leadership Election Code.

Sharing your information

We do not sell personal information.

We will only share information where necessary:

with service providers who process information on our behalf;
where required by law;
where necessary to protect legal rights;
where required under the Scottish Labour Party Leadership Election Rules.

Any organisation processing information on our behalf is required to maintain appropriate security measures and process information only on our instructions.

International transfers

It is unlikely that we’ll ever share personal data outside the UK or the EU. If, however, it becomes necessary we will only share it with organisations in countries:

• Where the UK or European Commission have said the country is ‘adequate’ (this means countries that have a similar level of data protection law as we have in the UK) – the UK and EU are ‘adequate’ for each other;

• On the basis of an International Data transfer Agreement (IDTA) or European Commission Standard Contractual Clauses (SCCs) with an addendum required by the UK (both of these are contracts which require the organisation to use and protect your personal data to the standard we expect within the UK); or

• On the basis of a supplier sharing data to another of their offices located outside the UK and EU and they have implemented contractual arrangements call ‘Binding Corporate Rules’. (These need to be verified by data protection regulators and do not allow an organisation to share data outside of their contracted network of suppliers and their own offices).

All suppliers that use personal data on our behalf have an agreement in place with us no matter where the data is going. This is known as a Data Processing Agreement.

Data security

We take appropriate technical and organisational measures to protect personal information.

These measures include:

encrypted website connections (HTTPS)
secure hosting
restricted access to authorised personnel
password protected systems
multi factor authentication where appropriate
regular security updates
confidentiality obligations for campaign staff and volunteers

No method of transmitting information over the internet can be guaranteed to be completely secure. However, we work to protect personal information using recognised security standards.

Our website uses cookies to improve your browsing experience and understand how visitors use the website.

Cookies may be used to:

remember preferences;
improve website functionality;
produce anonymous website statistics;
help protect website security.

Where required, you will be asked for consent before non essential cookies are placed on your device.

You can control or remove cookies through your browser settings.

How long we keep information

We retain personal information only for as long as necessary for the purposes described in this Privacy Policy or to comply with legal obligations.

Information received from the Scottish Labour Party under the Leadership Election Rules will be securely deleted in accordance with the Party's deletion timetable and will not be retained after the election.

Your rights

Under UK data protection law you have the right, in appropriate circumstances, to:

request access to your personal information;
request correction of inaccurate information;
request deletion of your information;
request restriction of processing;
object to certain processing;
request transfer of your information where applicable;
withdraw consent where processing is based on consent.

If you wish to exercise any of these rights, please contact us using the details provided above.

Where your request relates to information supplied by the Scottish Labour Party under the Leadership Election Rules, we may refer your request to the Party, as the data controller responsible for that information.

Links to other websites

This website may contain links to external websites.

We are not responsible for the privacy practices of those websites and encourage you to read their own privacy notices.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

Any significant changes will be published on this page together with the date of the latest revision.

If you have any questions about this Privacy Policy or how we use your information, please contact:

Campaign Data Protection Lead
Michael Marra for Leader Campaign

Email: [email protected]

If you remain dissatisfied with how your personal information has been handled, you have the right to complain to the Information Commissioner's Office (ICO).

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF

Website: https://ico.org.uk