UK Parliament manages your data in line with our responsibilities under the General Data Protection Regulation (GDPR) and Data Protection Act 2018. This Privacy Notice explains the personal data that we collect from you and how we use your information.
In this Privacy Notice, references to ‘us’, ‘our’ or ‘we’ are to UK Parliament. Everything that we do with your data – for example storing it, working with it or deleting it – is referred to as “processing”.
1. About us
The Corporate Officers of the House of Commons (HC) and House of Lords (HL) are joint data controllers for any personal data described in this notice.
The Data Protection Officers are the Head of Information Rights and Information Security (IRIS), House of Commons and the Head of Information Compliance, House of Lords.
• Email:IRIS@parliament.uk or email@example.com
• Telephone: 0207 219 4296 (HC) or 0207 219 0100/8481 (HL)
• Post: IRIS, House of Commons, SW1A 0AA or Information Compliance Team, House of Lords, SW1A 0PW.
2. The personal data we collect
When you submit information to request our resources, we store and use your personal data. This includes: name, postal address, phone number and email address.
If you opt-in to provide feedback we will send you a survey separately. We will contact you using the email address you have provided and we will collect information about your experience of using our resources.
3. Use of your personal data and lawful bases
We will use your information to process your order requests and collect statistics, and if you have opted in to collect feedback on our service. By using this service, we are relying on the lawful basis of:
• The processing is necessary for the exercise of a function of either House of Parliament (GDPR Article 6, 9(e) and DPA Part 2, Chapter 2, 8 (b)). Outreach through education and engagement is a public function of the Houses of Parliament.
4. Who we share your personal data with
We share your data with the following processors to enable us to send resources to you:
• PartridgesUK Ltd a third party distribution company who send out resources and Parliament Week kits following registration
We may also disclose your personal data to third parties where permitted to do so such as other organisations where a lawful basis exists.
5. Storage and security
We take the security of your personal data seriously. Personal data collected related to order requests and statistics will be stored securely, both physically and electronically by PartridgsUK Ltd. We have an information security process in place to oversee the effective and secure processing of your personal data.
Your personal data will be used by PartridgsUK Ltd to send your resources to you and will be disposed of after six months. If you opt-in to us using your personal data to contact you to get feedback about our resources, we will retain your personal data for a period of one year . If you do not want to be contacted during this time, or would like us to cease contacting you at any point during period, please contact us.Further information on retention periods can be found in the Houses of Parliament Authorised Records Disposal Practice (ARDP).
6. Your rights
We will ensure you can exercise your rights in relation to the personal data you provide to us, for example:
• Where we are relying on your consent to use your personal data, you can withdraw that consent by unsubscribing from our services or writing to the Data Protection Officers. Details are available at the top of this notice.
• You can request access to the personal data we hold about you or ask for certain data in a machine-readable format by contacting the Data Protection Officers.
• You can ask us to update your personal data if it changes. In certain circumstances, you can request we erase the personal data we hold or ask us to stop or restrict processing if you have an objection.
• If you have any concerns relating to the use of your personal data, you may complain to the Data Protection Officers.
Full details about your rights are available from the regulator, the Information Commissioners office (ICO).
7. Right to complain
If you are unhappy with the processing of your personal data by the Houses of Parliament you should contact the Data Protection Officers, whose details are above.
You also have the right to complain to the supervisory authority, the Information Commissioners office (ICO).