Data protection policy

This document outlines how the Office of Lord Wei of Shoreditch processes and manages personal data. It: identifies our data controller and designated data protection officer;

  • provides our lawful basis for processing personal data;
  • outlines the scope of personal data we hold and process;
  • outlines the scope of the special category personal data we hold and process;
  • describes and justifies our data retention policy;
  • shows how we intend to respond to Subject Access Requests,  and;
  • contains a copy of our privacy notice

1. Data Controller and Data Protection Officer

The Data Controller is Lord Wei, and the Data Protection Officer is Rebecca Watson, Assistant to Lord Wei.

2. Lawful basis for processing

This Office processes data under the lawful basis of public task and legitimate interest, with exceptional cases processed under the lawful basis of consent.

We undertake to always act within the reasonable expectations of the individuals about whom we hold personal data.

3. Data we hold

We operate a paperless office, therefore all of our personal data is stored electronically and securely on our computer system.

The Office uses a CMS (Content Management System) application, Contactually, and FullContact to help with the management of data records. This information predominantly includes but is not limited to:

Names, addresses and email addresses.
Telephone numbers.
Occupation and associated organization.
Special category data, outlined in point 4.

The Office also maintains a mailing list of subscribers. These subscribers receive Nat’s updates. Personal data we hold in this regard includes:

Names, addresses and email addresses.
Telephone numbers.
Occupation and associated organization.
Special category data, outlined in point 4.

4. Special category data we hold

The office may also hold special category data for a smaller number of data subjects. This data will be processed under the lawful basis indicated in point two, as is permitted in clauses 23 and 24 of schedule 1 of the Data Protection Act. The data may include:

Political opinions
Religious beliefs
Affiliations

5. Data retention policy
Our office will hold personal data for as long as is necessary for the purposes of discharging the duties and functions of a member of the House of Lords.

6. Subject Access Requests
We will comply to Subject Access Requests in line with the guidance given by the Information Commissioner’s Office (ICO).

We will respond as quickly as possible, within 30 calendar days.
We will request verification of the identity of any individual making a request, and ask for further clarification and details if needed.
Data subjects have the right to the following:
To be told whether any personal data is being processed
To be given a description of the personal data, the reasons it is being processed and whether it will be given to other organisations or people.
To be given a copy of the information comprising the data, and given details of the source of the data where this is available.

7. Privacy notice
Our office will undertake to ensure all constituents sharing their personal data can have the opportunity to read our privacy notice. We will:

Add a link to our privacy notice to team member email signatures, and to Nat’s email signature.
Add a link to our privacy notice on Nat’s auto-response on Gmail.

If you wish to contact the data controller, please email lordwei.datacontroller@gmail.com.