Privacy Policy

Summary for constituents

  • What I use your data for: mainly to deal with constituency issues you raise with me (“casework”), represent your views, and carry out my duties as your MP.
  • What I don’t do: I do not sell your data or use it for commercial gain.
  • Who I share it with: only when needed (for example, with government departments or other organisations that can help resolve your case), and with trusted service providers who support my office.
  • Sensitive information: casework can involve sensitive details (for example about health). I handle this with additional legal safeguards.
  • Your choices and rights: you can ask to see the data I hold about you, ask for corrections, object in some circumstances, and (where applicable) ask for deletion or restriction.
  • Marketing and newsletters: if you sign up to receive regular newsletters or campaign updates, you can unsubscribe at any time.

1. Introduction

This Privacy Policy explains how I, Josh MacAlister MP, and my office use your personal data. For the purposes of data protection law, I am a data controller in relation to the personal data described in this notice. My use of your data is separate from any use by the Labour Party, which has its own privacy notices available on its website.

2. What is Personal Data?

Personal data is information that identifies you, or could reasonably be used to identify you, either on its own or when combined with other information.

Some of the data I process may be special category data, which is more sensitive and includes information about:

  • racial or ethnic origin
  • political opinions
  • religious or philosophical beliefs
  • trade union membership
  • health
  • sex life or sexual orientation

3. Why I Use Your Personal Data

The primary reason I use personal data is for democratic engagement. This allows me to carry out my duties as your elected representative and includes:

  • communicating with you about issues that matter to you
  • understanding and representing your views in Parliament
  • conducting and managing constituency casework
  • inviting you to meetings, events, or consultations
  • keeping you informed about my work locally and nationally

If you contact me for constituency casework, I will use your information to respond and to take reasonable action on your behalf. I may continue to contact you about your case while it is ongoing and contact you with relevant updates on the issue after your case is closed.

If I want to use your contact details to send you regular newsletters or other general updates that are not necessary for responding to your case, I will ask for your consent first. You can unsubscribe or opt out at any time.

Democratic engagement may also include:

  • campaigning on local, national, or global issues
  • registering supporters and volunteers
  • fundraising and processing donations
  • taking photographs or videos at events for use on websites or social media
  • inviting you to participate in campaigning activity

I also use personal data to build and maintain relationships with constituents, community groups, local organisations, charities, schools, faith groups, businesses, and public bodies. Where appropriate, I may invite you to join an influential supporter or stakeholder network. Participation is always optional and you may opt out at any time.

In some cases, I may need to share your contact details with others to assist with your casework or to create a beneficial connection for you. I will only do this where appropriate and, where required, with your agreement.

4. Other Uses of Your Data

I may also use personal data for the following purposes:

  • recruitment for paid or voluntary roles
  • managing complaints, political concerns, or legal matters
  • safeguarding, including sharing concerns with the Labour Party safeguarding team where necessary
  • thanking donors and supporters and inviting further involvement

My office uses CCTV for security purposes. My website uses cookies, pixels, and IP address monitoring to ensure security and to understand how the site is used. You can manage cookie preferences through the cookie banner.

5. Research and Analysis

I conduct research to better understand the views and concerns of constituents. This may include surveys, polling, interviews, social media analysis, and the use of aggregated or publicly available data. I also use secure government data sources where permitted.

Research may be carried out with trusted partners and data intermediaries under strict security controls. Data used for research is anonymised or minimised wherever possible, and each project is subject to a data protection risk assessment.

Personal data is not used to train artificial intelligence systems. Where AI tools are used, they operate only on anonymous data and are subject to impact assessments and safeguards.

6. How Personal Data is Collected

I collect personal data primarily from you, including when you:

  • contact me by e-mail, letter, phone, website form, or social media
  • engage with me at events or while campaigning
  • submit casework
  • sign up for updates
  • complete surveys, polls or petitions
  • make a donation

I may also collect data:

  • from publicly available sources where they may be able to assist with casework or policy development
  • from third parties who believe I may be able to help you (I will confirm you are happy to be contacted)
  • from the full electoral register, which I am legally entitled to access
  • from Labour Party systems where you have engaged with the Party or are a member within my constituency

My website and digital platforms automatically collect certain technical data when you use them.

I do not knowingly collect data about children unless it arises in the context of casework or safeguarding.

7. Who Your Data is Shared With

I only share personal data where necessary and never sell it or use it for commercial purposes. Data may be shared with:

  • trusted IT, e-mail, survey, and communications service providers
  • the Parliamentary Digital Service (PDS), which provides secure parliamentary e-mail and systems
  • local or national government departments where required for casework
  • charities or individuals, where agreed and relevant
  • secure research organisations and data intermediaries
  • safeguarding bodies, law enforcement, health or social services, or legal advisers where required by law or to protect vital interests

Appropriate contracts and data sharing agreements are in place to protect your information.

8. Legal Basis for Processing

I process personal data in accordance with UK data protection law, including:

  • the UK General Data Protection Regulation (UK GDPR)
  • the Data Protection Act 2018
  • the Representation of the People Act 2001
  • the Political Parties, Elections and Referendums Act 2000

Most processing is carried out as a task in the public interest (democratic engagement). Other lawful bases include legitimate interests, legal obligations, vital interests, and consent (for example, for campaign marketing).

9. How Long Data is Kept

I keep personal data for no longer than is necessary for the purposes set out in this Policy.

  • Casework: I keep casework information for as long as needed to deal with your issue. After that, I will minimise what I keep (for example, keeping a brief record of contact and the outcome) in case you contact me again.
  • Campaign and communications: if you have consented to receive newsletters or campaign updates, I keep your details until you unsubscribe or otherwise ask me to stop.
  • Legal and safeguarding: where required, I may retain information for longer to comply with legal obligations, deal with complaints or disputes, or address safeguarding concerns.
When I end my role or constituency boundaries change

If I stop being your MP (including where constituency boundaries change), I will review the personal data I hold and securely delete or dispose of it unless there is a clear reason to retain it (for example, where I must keep it for legal, complaints-handling, or safeguarding reasons). Any handover of casework information to another representative is not standard practice and would only occur where appropriate and lawful.

10. Data Security

I follow Labour Party data security standards and apply appropriate technical and organisational measures to protect your personal data. Access is limited to those who need it, and breaches are reported where legally required.

11. Your Rights

You have rights under UK data protection law. The most relevant rights in this context include:

  • Right to be informed – to receive clear information about how your data is used.
  • Right of access – to request a copy of the personal data I hold about you (often called a “subject access request”).
  • Right to rectification – to correct inaccurate or incomplete data.
  • Right to erasure – to request deletion in certain circumstances.
  • Right to restrict processing – to ask me to limit how I use your data in certain circumstances.
  • Right to object – to object to certain types of processing (including where I rely on legitimate interests).
  • Right to withdraw consent – where I rely on your consent (for example, for newsletters or campaign updates).

To exercise your rights, please contact me.

Time limits: I will usually respond to rights requests within one month.

You may also wish to contact the Labour Party directly, as I do not control all Labour Party systems and cannot action rights requests across those systems.

12. Complaints

If you are concerned about how your data has been handled, please contact me.

You also have the right to complain to the Information Commissioner’s Office (ICO). Further details are available on the ICO website or via their helpline on 0303 123 1113.

13. Updates to This Policy

This Privacy Policy may be updated from time to time. Where required, I will notify you of significant changes.

Last updated: 19th January 2026