Privacy Policy

Last updated: July 2026

1. Who we are

Voting Right | Uniting the Right UK is an independent political campaign website. We are the Data Controller for all personal data collected through this site.

Contact: info@unitetherightuk.com

Website: unitetherightuk.com

For any data protection queries or to exercise your rights, please email the above address with the subject line “Data Request”.

2. What personal data we collect

Mailing list sign-up — when you choose to join our mailing list we collect:

  • Email address (required) — to send you campaign communications
  • Postcode (required) — to tailor communications to your constituency
  • Party preference (optional) — to personalise content and understand our audience. Note: this may constitute political opinion data, which is special category data under UK GDPR Article 9. It is processed only with your explicit consent.
  • First name and last name (optional) — to personalise communications
  • Mobile number (optional) — to send SMS updates where you have consented
  • Consent records — timestamps and the specific consent choices you made

Email contact — when you email us directly at info@unitetherightuk.com, we collect your email address and the content of your message.

Technical data — our hosting and database infrastructure may log your IP address as part of standard server operations. We do not use this for profiling.

3. Why we collect it and our legal basis

Data Purpose Lawful basis
Email, postcode Send campaign updates and tactical voting recommendations Consent — Article 6(1)(a) UK GDPR
Party preference Audience insight and personalisation Explicit consent — Article 9(2)(a) UK GDPR (special category)
Name, mobile Personalise communications, send SMS updates Consent — Article 6(1)(a) UK GDPR
Sharing with partner organisations Allow partners to contact you directly Explicit consent — separate opt-in at sign-up
Email enquiries Respond to your message Legitimate interests — Article 6(1)(f) UK GDPR

You may withdraw consent at any time — see Section 7 (Your Rights).

4. Who we share your data with

We do not sell or rent your personal data. We may share it only in the following circumstances:

Service providers (Data Processors)

We use carefully selected third-party platforms to store and send data on our behalf. These act as data processors under contract and are only permitted to process your data on our instruction:

  • Database and hosting providers — secure infrastructure for storing subscriber records and running the site
  • Email marketing providers — for sending campaign emails
  • SMS providers — for sending SMS messages where you have provided a mobile number

All service providers are required to maintain appropriate technical and organisational security measures.

Partner political organisations (only with your explicit consent)

If you ticked the optional consent box at sign-up, we may share your contact details with carefully selected right-of-centre political campaign organisations and communications partners, so they can contact you directly with relevant information. These organisations act as independent Data Controllers and will be subject to their own privacy policies.

We will only share data with partners where you have given explicit, separate consent to do so. You can withdraw this consent at any time by emailing us.

Third-party CDNs (no personal data)

This site loads fonts and map scripts from third-party content delivery networks. When your browser requests these resources, those servers may log your IP address as part of standard server logging. We have no control over their data handling.

5. How long we keep your data

  • Mailing list subscribers — we retain your data until you unsubscribe or request deletion, or after 3 years of inactivity, whichever comes first.
  • Email enquiries — retained for up to 3 years from the date of receipt, then deleted.
  • Consent records — retained for up to 3 years from the date of consent, to demonstrate compliance.

You can ask us to delete your data at any time — see Section 7.

6. How we keep your data secure

We take reasonable technical and organisational measures to protect your data, including:

  • Subscriber data is stored in a private database — no public access is possible
  • Database credentials are held only as private server-side environment variables, never exposed in client-side code or the public codebase
  • All data is transmitted over HTTPS (TLS)
  • Access to the database is restricted to authorised server-side functions only
  • Our codebase is held in a private repository

7. Your rights

Under UK GDPR you have the following rights:

  • Access — request a copy of the personal data we hold about you
  • Rectification — ask us to correct inaccurate or incomplete data
  • Erasure — ask us to delete your data (“right to be forgotten”)
  • Restriction — ask us to limit how we process your data
  • Portability — receive your data in a structured, machine-readable format
  • Objection — object to processing based on legitimate interests
  • Withdraw consent — withdraw your consent at any time, without affecting the lawfulness of processing before withdrawal

To exercise any of these rights, or to unsubscribe from our mailing list, email info@unitetherightuk.com with the subject line “Data Request”. We will respond within one calendar month.

8. Cookies and local storage

This site uses no cookies. We do not use advertising, analytics, or tracking cookies of any kind.

We use your browser’s local storage solely to remember that you have dismissed our privacy notice, so it does not re-appear on each visit. This is not a cookie and does not leave your device.

Third-party content delivery networks used to load fonts and map scripts may log your IP address as part of standard server logging. We have no control over this.

Because we use no cookies, we are not required to obtain consent under PECR (Privacy and Electronic Communications Regulations). We display a notice to be transparent about our use of local storage.

9. International data transfers

Some of our service providers may process data outside the UK or EEA. Where this occurs, we rely on appropriate transfer mechanisms such as Standard Contractual Clauses or adequacy decisions to ensure your data is protected to UK GDPR standards.

10. Complaints

If you are unhappy with how we have handled your personal data, please contact us first at info@unitetherightuk.com and we will do our best to resolve the issue.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection.

11. Changes to this policy

We may update this policy from time to time. The “last updated” date at the top of this page will reflect any changes. Where changes are material, we will notify mailing list subscribers by email before they take effect.