Privacy and Cookie Policy

This privacy policy sets out how the Conservative Party Shop website (hereafter "the Store") uses and protects any information that you give the Store while using this website. The Store is committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified when using this website, then you can be assured that it will only be used in accordance with this privacy statement. The Store may change this policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes.

We are the Conservative and Unionist Party, commonly known as the Conservative Party (The Party) and we are Registered as a political party with the Electoral Commission under registration PP52 and a Registered Data Controller with the Information Commissioner’s Office (ICO) under registration number Z5909711.

This is the Privacy Policy for the Conservative Party and not just for our websites shop.conservatives.com and www.conservatives.com. We have specific privacy policies for other areas such as staffing. We are happy to make this policy available in other accessible formats such as braille. If you wish to obtain a copy in an accessible format, please contact our Data Protection Officer.

In this Privacy Policy we also make reference to “the wider Conservative Party”. This includes, but is not limited to, local associations, areas and regions of the Party, known as ‘accounting units’ and listed on the Electoral Commission website; elected representatives; candidates; members, volunteers and party officers. These bodies may be data controllers in their own right or data processors acting on behalf of the Party. It is intended that the wider Party will adopt the principles enshrined in this policy.

This Privacy Policy has been created in order to demonstrate the Party’s commitment to the protection of your data and to be transparent in how we deal with it.

The Party will process your data in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018.

This privacy policy was published on 23rd May 2018.

If you have any questions about this policy or for more information about how we use your data or would like to exercise any of your rights you can contact our Data Protection Officer at:

Data Protection Team

Conservative Campaign Headquarters

4 Matthew Parker Street

London

SW1H 9HQ

You may contact us by e-mail at [email protected]

You may call us at +44 (0) 20 7984 8300.

We may collect the following information:

• name
• Date of Birth
• contact information (e.g. address, email address, telephone number, mobile number, social media)
• Communication Preferences
• Direct Marketing Preferences
• Electoral Register Data
• demographic information such as postcode, preferences and interests
• Financial transaction data
• Opinions on topical issues
• Issues that you raise with us
• Family connections
• IP address, cookies and other technical information that you may share when you interact with our website
• Commercially available data – such as consumer, lifestyle, household and behavioural data
• Occupation data
• Publicly available data
• other information relevant to customer surveys and/or offers

We may also collect special categories of information such as:

Political Opinions

Voting intentions

Racial or ethnic origin

Religious views

We collect data about you in the following ways:

• In person, when you speak to one of our representatives or volunteers
• Through a telephone call, either where you call us or we call you
• On paper, such as if you return a printed survey or a reply slip on a leaflet
• Digitally, such as if you fill in a form on a website or interact with the Party online via our website or social media platforms
• When you offer or ask about volunteering, or take part in party activities
• When you enter into a transaction with the Party, such as donating, joining, purchasing a product or paying for an event
• When you consent to receiving marketing emails etc
• When you attend a conference or campaign event

• When data is shared with us from the wider Conservative Party.
• Indirectly from publicly accessible sources or other public records, including the full electoral register to which the Party is legally entitled on social media platforms, where you have made the information public, or you have made the information available in a social media forum run by the Party.
• From commercial organisations with whom we have a contract guaranteeing full data protection compliance.
• CCTV, if you visit Conservative Party Headquarters
• The Party is legally entitled to, and receives, the electoral registration records of all electors in the United Kingdom by Councils across the United Kingdom as per The Representation of the People (England and Wales) (Amendment) Regulations 2002 and the Representation of the People Regulations 2001 in Scotland. We receive an updated version of these every time an update is published, which is usually every month.
• We collect data with the intention of using it primarily for political activities.
• The Conservative Party uses the data that we collect about you in order to build a picture of you and the United Kingdom electorate. We use automated means to analyse this variety of data and collate it (sometimes referred to as “profiling”). For example we may combine electoral register data, commercially available modelled consumer data and publicly available data from the land registry in order to make a prediction about your lifestyle and habits. We do this in order to:
• understand the matters and issues that are likely to be of relevance and significance to you and better inform our future policies if our predictions are incorrect, decide whether we send you our campaigning materials,
• select what campaigning material we send to you and which messages we put on it,
• evaluate whether we think you are likely to vote and for whom you will likely vote for during an election or a referendum,
• We have determined that this kind of automation and profiling does not create legal or significant effects for you. Nor does it affect the legal rights that you have over your data.

How your data is used is protected by law and we only use your data where we have an acceptable reason for doing so. The reasons we process your data are:

• Internal record keeping.
• In pursuit of an activity that supports or promotes democratic engagement (Public Interest), or
• When it is our legal duty (legal obligation), or
• When you provide consent (consent), or
• In order to fulfil a contract with you (contract), or
• When we have a legitimate interest (legitimate interest).
• We may use the information to improve our products and services.
• We may periodically send promotional emails about new products, special offers or other information which we think you may find interesting using the email address which you have provided.
• From time to time, we may also use your information to contact you for market research purposes. We may contact you by email, phone, fax or mail. We may use the information to customise the website according to your interests.

The law restricts the processing of what is termed “special categories of personal data”. The work of the Conservative Party, and the wider Conservative Party, is deemed to be of substantial public interest and therefore we are permitted to process special categories of personal data relating to your political opinions and voting intentions.

The table below lists examples of how we use your data and our justification and legal basis for it.

Purpose	Legal Basis and Justification
Canvass Political Support	In pursuit of an activity that supports or promotes democratic engagement and our legitimate interest to identify Conservative supporters.
Send you messages about our campaigns and policies, including via social media adverts	In pursuit of an activity that supports or promotes democratic engagement and our legitimate interest to inform the electorate about what the Conservative Party is doing.
Contact you about issues or queries that you have told us about	In pursuit of an activity that supports or promotes democratic engagement and our legitimate interests to engage with the electorate.
Process and record voting intentions and political opinions	In pursuit of an activity that supports or promotes democratic engagement and our legitimate interest to understand the electorate and identify Conservative supporters.
Send you surveys and process your responses	In pursuit of an activity that supports or promotes democratic engagement.
Process your application for membership and administration of your membership	Contractual necessity and our legitimate interest in engaging with our membership base.
Send you information by post about fundraising activities to support the Party	In pursuit of an activity that supports or promotes democratic engagement and our legitimate interests to raise funds for the Party.
Process your donation and checking your eligibility to donate	We have a legitimate interest to process your donation and a legal duty to check your eligibility to donate amounts of more than £500.
Assess suitability of prospective members and donors using publicly available sources	We have a legitimate interest to ensure that our members and donors will not bring the Party into disrepute.
Send you electronic messages about our campaigns	When you sign up to receive emails from the Conservative Party you are providing us with your consent to process your data for these purposes.
Identifying potential supporters using commercially available modelled data	In pursuit of an activity that supports or promotes democratic engagement and our legitimate interests to identify Conservative supporters.
Conduct anonymised market research	We have a legitimate interest to get a sense of general political opinion across the UK.

Our legitimate interests:

Our objective is to promote our values and to elect Conservative candidates at every level of government across the United Kingdom, or when we campaign in referenda. In order to do this, we rely upon the support of our members, donors, volunteers and supporters. We rely on being able to communicate and engage with the United Kingdom Electorate and those eligible to vote.

As a member: If you join the Party, we have a legitimate interest in processing your data and contacting you about all aspects of your membership including information about your entitlements as a member and about Party events; either by post or by electronic means. The party is run by its members and therefore we have a legitimate interest in member engagement and retention. If you do not renew your membership with the Party, we will continue to send you information about the Conservative Party, including information on how to re-join, for a reasonable period after your membership lapses. We also have a legitimate interest to retain your data after your membership lapses, as well as a legal duty to keep a record of the financial transaction.

As a donor: If you donate money to the Party then we have a legitimate interest in processing and retaining your information and to send you marketing about our fundraising activities; either by post or by electronic means. We justify this because our activities are funded by donations. For donations over certain thresholds, we also have a legal obligation to report it to our regulator, the Electoral Commission, who will publish certain details on their website.

As a volunteer: If you volunteer for the Party or enquire about volunteering for the Party, and are not a member, we have a legitimate interest in processing and retaining your information and contacting you about volunteering opportunities. We justify this because of the vital function that volunteers perform both during and outside of elections.

If you attend an event: If you attend one of our events such as Party conference or one of our social events, and are not a member of the Party, we have a legitimate interest in retaining your information and to send you marketing about future similar events which we think might be of interest to you; either by post or by electronic means. We have a legitimate interest in inviting people to our events in order to raise vital funds for the Party and have determined that attendees would expect to receive such communications from us.

Much of the work of the Party is conducted by the wider Conservative Party. For this reason, we have a legitimate interest in sharing certain personal information with the wider Party when it is necessary for our campaigns or activities.

Whilst a lot of our political activities are considered to be tasks carried out in the public interest, we also have a legitimate interest to carry out these tasks. We justify this due to our defined objective as a political party.

You will always have the opportunity to opt out of receiving any messages from the Conservative Party or to exercise any of your legal rights.

We are committed to respecting your rights over your data and in some circumstances, we will have a legitimate interest to continue to process your data even where you have exercised one of your rights. For example, if you request that we stop processing your data for purposes of direct marketing then we justify keeping a record of this request in order to ensure that your wishes are respected.

Data Processed with your Consent

Where we use consent as our legal basis for processing your data, or process special categories of your data on the basis of your explicit consent, you have the right to withdraw your consent at any time. This does not affect our right to process your data before you decide to withdraw your consent.

Who we share your data with: We will never sell your data but sometimes it is necessary to share your information, either within the wider Conservative Party, or with our service providers and data processors. Data is only ever shared where we have a justification and when the law allows us to do so.

We share data with:

• The wider Conservative Party
• Business associates and professional advisers
• Suppliers
• Service providers
• Financial organisations – such as credit card payment providers
• Political organisations
• Elected representatives
• Regulatory bodies
• Market researchers
• Healthcare and welfare organisations
• Law enforcement agencies

Where we use a service provider to process your data on our behalf, we will ensure that this processing is governed by a legally enforceable contract that sets out their responsibilities for protecting your data and your rights.

Where we share data with the wider Conservative Party, we ensure that the recipient of the data signs an undertaking that they will use the data only for the purposes for which it was provided and will take necessary measures to ensure its security. Members of the wider Party receive training on data protection.

Transferring your data outside of the European Economic Area

Some of our service providers are located outside of the European Economic Area (EEA) and therefore it may be necessary to transfer your personal data outside of the EEA. Where we do transfer your data outside of the EEA, we will make sure that it is protected in the same way as if the data was inside the EEA.

We will use one of the following safeguards to ensure this:

Where the European Commission has issued an adequacy decision determining that a non-EEA country or organisation ensures an adequate level of data protection.

A contract is put in place with the recipient of the data obliging them to protect the data to the same standards as the EEA.

The transfer is to an organisation that complies with the EU-US Privacy Shield.

How long we retain your data for

We constantly review the data that we hold and regularly review its relevance and our need to hold onto it. Whilst we do not set finite periods for data retention, we use several factors to determine whether we need to hold onto the data. Factors we take into consideration are:

Retention periods as required by law – for example the Conservative Party is under a statutory duty to retain financial information for a period of 6 years.

The purpose for which the data was provided or obtained.

Our legitimate interests in holding onto your data.

Whether holding onto your data will infringe your rights over your data.

Legal and regulatory obligations that may require reference to your data.

Security

We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.

Log Files and Statistics

We use IP addresses, URLs of requested resources, timestamps and HTTP user-agents to analyse trends, administer the system and gather broad demographic information for aggregate use. In addition to this we use Google Analytics, a web analytics service provided by Google, Inc ("Google"). Google Analytics uses cookies, to help analyse how visitors use our site. The information generated by the cookie about the use of our website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of our website, compiling reports on website activity for the Conservative Party and providing other services relating to website activity and Internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your Web browser, however, please note that if you do this you may not be able to make full use of our website. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.

How we protect your data:

The security of your data is paramount to the Party and as such we ensure that appropriate technical and organisational measures are in place to protect it. We constantly review our measures to ensure that your data is protected from any threats that may emerge.

Your rights over your data

Right of access to your data

You have the right to request a copy of your personal information that we hold. This is commonly known as a Subject Access Request. We follow the ICO’s “Subject Access Code of Practice” when dealing with requests for access to personal data. You can read this code by visiting https://ico.org.uk/media/for-organisations/documents/2014223/subject-access-code-of-practice.pdf

Right of rectification of your data

You have the right to request that inaccurate or incomplete information that we hold about you is corrected.

Right to be forgotten

In certain circumstances you can ask for the data we hold about you to be erased from our records. When we do so, we keep the bare minimum of your information in order to continue to respect your wishes when your personal data is next provided to us by a local authority, which is at least annually.

Right to restriction of processing

You have the right to request that we restrict the processing of your data where you are contesting the accuracy of the data or when the data has been unlawfully processed.

Right to data portability

You have the right to have the data we hold about you transferred to a third party organisation and you can ask that we provide it in a machine readable format.

Right to object

You have a right to opt out of your data being used for direct marketing.

If we process your data on the basis of “legitimate interests” or “a task carried out in the public interest” then you have the right to object to us using your data in that way. This right is not absolute and we may continue to process your data if we can demonstrate compelling legitimate grounds for the processing.

Automated individual decision-making, including profiling

We may use computer software to make decisions about you or to create a profile about you. You have the right not to be subject to such a decision or to that profiling where it creates legal effects concerning you or where it significantly affects you.

Making a complaint

If you are unhappy with the way that we have processed or handled your data then you have a right to complain to the Information Commissioner’s Office (ICO). The ICO is the supervisory body authorised by the Data Protection Act 2018 to regulate the handling of personal data within the United Kingdom.

The contact details for the Information Commissioner’s Office are:

Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF

Telephone: 0303 123 1113

Website: https://ico.org.uk/make-a-complaint/

How we use cookies

You can control what cookies you accept through your internet browser. For details on how to do this, and to learn more about how you can control what cookies you allow, please visit https://aboutcookies.org/

Please be aware, that by deleting our cookies or disabling future cookies you may not be able to access certain areas or features of our website.

Cookies are a technology we use to provide you with a tailored experience on our website, as well as on other online platforms that we operate on.

A cookie is a piece of code that is sent to your internet browser and is stored on your system.

From time to time, we may test and experiment with new technologies to improve your online experience. You can control what cookies are used, by editing the settings in your web browser.

Cookies may be either "persistent" cookies or "session" cookies: a persistent cookie will be stored by a web browser and will remain valid until its set expiry date, unless deleted by the user before the expiry date; a session cookie, on the other hand, will expire at the end of the user session, when the web browser is closed.

Cookies do not typically contain any information that personally identifies a user, but personal information that we store about you may be linked to the information stored in and obtained from cookies.

Cookies can be used by web servers to identify and track users as they navigate different pages on a website and identify users returning to a website.

Please see below a list of the main cookies this website currently uses. Any cookies that are currently being tested will not be documented in this list, until we decide to permanently implement them. All cookies will be visible to you through your web browser’s settings or using third party tools depending on your web browser.

We use traffic log cookies to identify which pages are being used. This helps us analyse data about web page traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system.

Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us. You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.

Links to other websites

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.

Controlling your personal information

You may choose to restrict the collection or use of your personal information in the following ways:

• whenever you are asked to fill in a form on the website, look for the box that you can click to indicate that you do not want the information to be used by anybody for direct marketing purposes
• if you have previously agreed to us using your personal information for direct marketing purposes, you may change your mind at any time by letting us know using our Contact Us information

We will not sell, distribute or lease your personal information to third parties unless we have your permission or are required by law to do so. We may use your personal information to send you promotional information about third parties which we think you may find interesting if you tell us that you wish this to happen.

You may request details of personal information which we hold about you under the Data Protection Act 1998. A small fee will be payable. If you would like a copy of the information held on you please email us this request using our Contact Us information.

If you believe that any information we are holding on you is incorrect or incomplete, please write to or email us as soon as possible, at the above address. We will promptly correct any information found to be incorrect.

List of cookies we collect

The table below lists the cookies we collect and what information they store.

Cookie Name	Cookie Description
FORM_KEY	Stores randomly generated key used to prevent forged requests.
PHPSESSID	Your session ID on the server.
GUEST-VIEW	Allows guests to view and edit their orders.
PERSISTENT_SHOPPING_CART	A link to information about your cart and viewing history, if you have asked for this.
STF	Information on products you have emailed to friends.
STORE	The store view or language you have selected.
USER_ALLOWED_SAVE_COOKIE	Indicates whether a customer allowed to use cookies.
MAGE-CACHE-SESSID	Facilitates caching of content on the browser to make pages load faster.
MAGE-CACHE-STORAGE	Facilitates caching of content on the browser to make pages load faster.
MAGE-CACHE-STORAGE-SECTION-INVALIDATION	Facilitates caching of content on the browser to make pages load faster.
MAGE-CACHE-TIMEOUT	Facilitates caching of content on the browser to make pages load faster.
SECTION-DATA-IDS	Facilitates caching of content on the browser to make pages load faster.
PRIVATE_CONTENT_VERSION	Facilitates caching of content on the browser to make pages load faster.
X-MAGENTO-VARY	Facilitates caching of content on the server to make pages load faster.
MAGE-TRANSLATION-FILE-VERSION	Facilitates translation of content to other languages.
MAGE-TRANSLATION-STORAGE	Facilitates translation of content to other languages.

Analytics cookies

We use Google Analytics to analyse the use of our website.

Our analytics service provider generates statistical and other information about website use by means of cookies.

The analytics cookies used by our website have the following names: _ga, _utma, _utmb and _utmz.

The information generated relating to our website is used to create reports about the use of our website.

Our analytics service provider's privacy policy is available at: http://www.google.com/policies/privacy/

Blocking cookies

Most browsers allow you to refuse to accept cookies; for example:

(a) in Internet Explorer (version 11) you can block cookies using the cookie handling override settings available by clicking "Tools", "Internet Options", "Privacy" and then "Advanced";

(b) in Firefox (version 36) you can block all cookies by clicking "Tools", "Options", "Privacy", selecting "Use custom settings for history" from the drop-down menu, and unticking "Accept cookies from sites"; and

(c) in Chrome (version 41), you can block all cookies by accessing the "Customise and control" menu, and clicking "Settings", "Show advanced settings" and "Content settings", and then selecting "Block sites from setting any data" under the "Cookies" heading.

Blocking all cookies will have a negative impact upon the usability of many websites.

If you block cookies, you will not be able to use all the features on our website.

Deleting cookies

You can delete cookies already stored on your computer; for example:

in Internet Explorer (version 11), you must manually delete cookie files (you can find instructions for doing so at http://windows.microsoft.com/en-gb/internet-explorer/delete-manage-cookies#ie=ie-11);

in Firefox (version 36), you can delete cookies by clicking "Tools", "Options" and "Privacy", then selecting "Use custom settings for history" from the drop-down menu, clicking "Show Cookies", and then clicking "Remove All Cookies"; and

in Chrome (version 41), you can delete all cookies by accessing the "Customise and control" menu, and clicking "Settings", "Show advanced settings" and "Clear browsing data", and then selecting "Cookies and other site and plug-in data" before clicking "Clear browsing data"

Deleting cookies will have a negative impact on the usability of many websites

Cookie preferences

The website does not have any cookie preference management facilities.

Our details

This website is owned by The Conservative Party (principal place of business is at 4 Matthew Parker Street, Westminster, London, SW1H 9HQ).

This website is operated by Paragon Customer Communications (principal place of business is at Park House, 16-18 Finsbury Circus, London, EC2M 7EB) who are data processors on behalf of the Party with whom we have a legally enforceable contract which sets out their responsibilities for protecting your data and your rights