Privacy Policy

Privacy Policy

Privacy Policy for the Office of Rory Stewart (ORS) And Rory Stewart's London Mayoral Campaign (LMC)


  1. Background
  2. Contacting us about data protection
  3. What information do we collect?
  4. The purposes for which we process individuals’ personal data
  5. How we collect data
  6. How we use your data and why we are allowed to use it
  7. Our legitimate interests
  8. Data processed with your consent
  9. Who we share your data with
  10. How long we retain your data for
  11. How we protect your data
  12. Your rights over your data
  13. Making a complaint
  14. Changes to this policy
  15. Cookies


This privacy policy relates to the personal data processed by the Office of Rory Stewart (hereafter ORS) and Rory Stewart's London Mayoral Campaign (hereafter LMC).

This privacy policy will explain how the ORS and the LMC uses the personal data we collect from you when you use our website.

The provision of your personal data to us is voluntary. However, without providing us with your personal data, your use of our services or your interaction with us may be restricted. For example, you would not be able to donate to, or volunteer for, ORS or the LMC.

ORS and the LMC are not responsible for the data privacy practices of other websites which are linked to the ORS and LMC website.

Contacting us about Data Protection

If you have any questions about this policy or for more information about how we use your data or would like to exercise any of your rights (such as to withdraw consent to electronic direct marketing) you can contact;

What information do we collect?

The types of personal data that we may collect about you include:

  • Name
  • Date of birth
  • Contact Details (e.g. address, email address, telephone number, mobile number, social media)
  • Communication Preferences
  • Direct Marketing Preferences (e.g. interest in the progress of Mr Stewart’s activities and the LMC)
  • Electoral Register Data
  • Demographic data
  • Financial transaction data
  • Opinions on topical issues
  • Issues that you raise with us
  • Family connections
  • IP address, cookies and other technical information that you may share when you interact with our website
  • Commercially available data – such as consumer, lifestyle, household and behavioural data
  • Publicly available data

We may also collect special categories of information, only where it is lawful under data protection law, such as:

  • Political Opinions
  • Voting intentions
  • Reasons for individuals’ support of Mr Stewart
  • The type of volunteer work individuals are interested in
  • Details of an individual’s organisation and his or her role there

The purposes for which we process individuals’ personal data

  • providing individuals with services, products or information requested
  • providing further information about Mr Stewart’s work and activities, including in relation to the LMC (only where they have provided consent if this amounts to electronic direct marketing)
  • to answer individuals’ questions/ communicate with them in general
  • to process individuals’ donations
  • to allow individuals to volunteer for ORS and/or the LMC; and
  • to satisfy applicable legal/ regulatory obligations.

How we collect data

We collect data about you in the following ways:

Provided by you (Directly):

  • In person, when you speak to one of our representatives or volunteers
  • Through a telephone call, either where you call us or we call you
  • Digitally, such as if you fill in a form on a website or interact with the OFC or LMC online via our website (which includes the use of cookies, see cookie notice on our website) or social media platforms
  • When you offer or ask about volunteering, or take part in activities relating to ORS or the LMC
  • When you enter into a transaction with the ORS and/or the LMC, such as donating or joining.
  • When you consent to receiving marketing emails etc.

Third Party Sources (Indirectly):

  • Indirectly from publicly accessible sources or other public records
  • On social media platforms, where you have made the information public, or you have made the information available in a social media forum run by the ORS and/or the LMC.
  • From commercial organisations with whom we have a contract guaranteeing full data protection compliance.
  • The ORS and the LMC collects data with the intention of using it primarily for political activities.
  • The ORS and the LMC uses the data that we collect about you in order to build a picture of you. We use automated means to analyse this variety of data and collate it (sometimes referred to as “profiling”). For example we may combine electoral register data, commercially available modelled consumer data and publicly available data from the land registry in order to make a prediction about your lifestyle and habits.

We do this in order to:

  • understand the matters and issues that are likely to be of relevance and significance to you and better inform our future policies if our predictions are incorrect,
  • decide whether we send you our campaigning materials,
  • select what campaigning material we send to you and which messages we put on it,
  • evaluate whether we think you are likely to vote and for whom you will likely vote for during an election or a referendum,
  • We have determined that this kind of automation and profiling does not create legal or significant effects for you. Nor does it affect the legal rights that you have over your data.


How we use your data and why we are allowed to use it

How your data is used is protected by law and we only use your data where we have an acceptable reason for doing so. The reasons we process your data are:

  • When it is our legal duty (legal obligation) e.g. to determine if donations made by you to the ors or lmc are permissible under relevant legislation or to submit relevant individuals’ names to the Register of Members’ Financial Interests if they donate over £1,500; or
  • When you provide consent (consent) e.g. to send email updates about the progress of activities or email requests for donations; or
  • In order to fulfil a contract with you (contract) e.g. in relation to volunteering activities.
  • In case of vital interests (vital interest) e.g. in case of a medical emergency suffered by an individual on the campaign trail.

PARAGRAPHS 7 AND 8 below lists examples of how we use your data and our justification and legal basis for it.

Our legitimate interests

GDPR allows ORS and the LMC to collect and process individuals’ personal data if necessary to achieve ORS’s, the LMC'S or a third party’s legitimate interests.

Where ORS or the LMC processes personal data in reliance on legitimate interests, we consider and balance any potential impact on individuals and their rights under data privacy law, and will not process personal data in reliance on this lawful basis where relevant legitimate interests are overridden by the impact on relevant individuals.

In order to achieve our legitimate interests we rely upon the support of our members, donors, volunteers and supporters.

As a donor: If you donate money to the ORS or the LMC then we have a legitimate interest in processing and retaining your data and to send you marketing about our fundraising activities; either by post or by electronic means. We justify this because our activities are funded by donations. For donations over certain thresholds we also have a legal obligation to report it the Registrar.

You will always have the opportunity to opt out of receiving any messages from the ORS or the LMC or to exercise any of your legal rights.

We are committed to respecting your rights over your data and in some circumstances we will have a legitimate interest to continue to process your data even where you have exercised one of your rights. For example, if you request that we stop processing your data for purposes of direct marketing then we justify keeping a record of this request in order to ensure that your wishes are respected.


Data Processed with your Consent

Where we use consent as our legal basis for processing your data, or process special categories of your data on the basis of your explicit consent, you have the right to withdraw your consent at any time. This does not affect our right to process your data before you decide to withdraw your consent.

Who we share your data with

We will never sell your data but sometimes it is necessary to share your data with our service providers and data processors. Data is only ever shared where we have a justification and when the law allows us to do so.

Who we share data with:

  • The Register of Members’ Financial Interest
  • Business associates and professional advisers
  • Suppliers
  • Service providers e.g. website and social media providers such as NationBuilder and Atalanta.
  • Financial organisations – such as credit card payment providers
  • Political organisations
  • Elected representatives
  • Regulatory bodies
  • Market researchers
  • Healthcare and welfare organisations
  • Law enforcement agencies
  • Where we use a service provider to process your data on our behalf we will ensure that this processing is governed by a legally enforceable contract which sets out their responsibilities for protecting your data and your rights.


How long we retain your data for

We constantly review the data that we hold and regularly review its relevance and our need to hold onto it. We use several factors to determine whether we need to hold onto the data. Factors we take into consideration are:

  • Retention periods as required by law
  • The purpose for which the data was provided or obtained,
  • Our legitimate interests in holding onto your data,
  • Whether holding onto your data will infringe your rights over your data,
  • Legal and regulatory obligations that may require reference to your data
  • However, in general, ORS and the LMC retain personal data for 6 years from collection unless it is still required in relation to the purpose for which it was collected; or, if before that date the underlying purpose or lawful basis is no longer valid, or if an individual validly exercises his or her right of erasure, the personal data will be securely deleted at that point.


Log Files and Statistics

We use IP addresses, URL's of requested resources, timestamps and HTTP user-agents to analyse trends, administer the system and gather broad demographic data for aggregate use. In addition to this we use Google Analytics, a web analytics service provided by Google, Inc ("Google"). Google Analytics uses cookies, to help analyse how visitors use our site. The data generated by the cookie about the use of our website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this data for the purpose of evaluating your use of our website, compiling reports on website activity and providing other services relating to website activity and Internet usage. Google may also transfer this data to third parties where required to do so by law, or where such third parties process the data on Google's behalf. Google will not associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your Web browser, however please note that if you do this you may not be able to make full use of our website. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.


How we protect your data

The security of your data is paramount to the ORS and the LMC and as such we ensure that appropriate technical and organisational measures are in place to protect it. We constantly review our measures to ensure that your data is protected from any threats that may emerge.


Your rights over your data

Right of access to your data

You have the right to request a copy of your personal data that we hold. This is commonly known as a Subject Access Request.

We follow the ICO’s “Subject Access Code of Practice” when dealing with requests for access to personal data. You can read this code by visiting


Right of rectification of your data

You have the right to request that inaccurate or incomplete data that we hold about you is corrected.


Right to be forgotten

In certain circumstances you can ask for the data we hold about you to be erased from our records.


Right to restriction of processing

You have the right to request that we restrict the processing of your data where you are contesting the accuracy of the data or when the data has been unlawfully processed.


Right to data portability

You have the right to have the data we hold about you transferred to a third party organisation and you can ask that we provide it in a machine readable format.


Right to object

You have a right to opt out of your data being used for direct marketing.

If we process your data on the basis of “legitimate interests” or “a task carried out in the public interest” then you have the right to object to us using your data in that way. This right is not absolute and we may continue to process your data if we can demonstrate compelling legitimate grounds for the processing.


Automated individual decision-making, including profiling

We may use computer software to make decisions about you or to create a profile about you. You have the right not to be subject to such a decision or to that profiling where it creates legal effects concerning you or where it significantly affects you.


Making a complaint

If you are unhappy with the way that we have processed or handled your data then you have a right to complain to the Information Commissioner’s Office (ICO). The ICO is the supervisory body authorised by the Data Protection Act 2018 to regulate the handling of personal data within the United Kingdom.

The contact details for the Information Commissioner’s Office are:

Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF

Telephone: 0303 123 1113



Changes to this Policy

ORS and/or the LMC may update the Policy from time to time, and will contact individuals directly where reasonable to do so about such updates and by placing an updated notice on its website.

This privacy policy was published on 22/08/2019.


Cookies are small data files that websites download to a user’s computer, phone or tablet hard disk. Most web browsers automatically accept cookies. They help websites providers, for example, to recognise a user that has visited a website previously. Further details on the cookies used on this Site and their purposes are set out below.

This Site uses cookies of the following types:

  • single session cookie: enables this Site to keep track of your movement from page to page in order to ensure that you will not be asked for the same information you have previously given during your visit to this Site. We may use the cookie to enable you to return to a previous page, or analyse user behaviour, such as which pages have been visited during your visit, in order to improve your overall experience and the performance of this Site
  • remember me cookie: enables this Site to remember your personal preferences such as login details in order to improve the user experience for example by avoiding you having to re-enter these details on each visit to this Site
  • global session cookie: enables us to collect information such as number of visitors to this Site, links clicked on, from what links you used to come to this Site and pages visited in order to analyse user behaviour. This information is collected in an anonymous form and will be collated with similar information received from other users to enable us to compile reports in order to develop and improve user experience by displaying more tailored and relevant content for example. We might use these cookies to highlight articles, services available within this Site or adverts that we believe may be of interest to you.
  • e-marketing cookies: enables us to collect information about the links to web pages that you may click and your activity on “view as a page” so that we can personalise the page in the same way as the email.

The single session and global session cookies are provided on our behalf by a trusted third party service provider, Google Inc, to aid with reporting of user behaviour, market research, providing targeted advertisements and improving Site functionality for example. This user behaviour is analysed in order to improve this Site. The information collected is not linked to personal data. To see how this applies to Google Analytics, visit

You can stop tracking by Google Analytics by visiting

Cookie duration: The single session cookie is a temporary cookie that remains in the cookie file of your browser until you close the browser. The other cookies will remain in the cookie file of your browser after the closing of the browser and will become active again when you reopen this Site. The different cookies have different expiration dates. Following the expiry of a cookie, a new version of that cookie will be downloaded when you next visit this Site, unless you have withdrawn your consent in the meantime.

Refusing cookies: You do not have to accept cookies, but without accepting them you may experience reduced Site functionality. You can manage cookies through your web browser. Most browsers will tell you how to stop accepting new cookies, how to be notified when you receive a new cookie, and how to disable existing cookies. You can find out how to do this for your particular browser by clicking “help” on your browser’s menu or by visiting Please note, however, that without cookies you may not be able to take full advantage of all our website features.

The following external links will explain how to manage cookies for the most common browsers:

In addition to the browser-based controls, you can manage third party cookies by visiting and

Contact: If you have any queries regarding this cookie policy please contact us at


Share this page to spread the word.
Share Tweet