Privacy Notice
Version: 1.0
Last updated: 11/01/2026
This notice explains how Grassroots Left collects and uses your personal data when you sign up for updates, contact us, attend Grassroots Left events or interact with our campaign.
1 . Who we are
Data controller: Saint-Simon & Co (a company limited by guarantee), operating the campaign known as Grassroots Left
Company number: 16947533
Contact: contact@grassrootsleft.org
Registered office: 124-128 City Road, London, England, EC1V 2NX
Please note: Grassroots Left is a slate in the 2026 elections for the Central Executive Committee of Your Party. Saint-Simon & Co is not Your Party and does not have access to Your Party’s membership database or internal voting records.
2. The data we collect
Depending on how you interact with us, we may collect:
2.1 Contact details: name, email address, phone number.
2.2 About you (optional): postcode, age bracket, employment status (if you choose to provide it). This is used to understand support and organise campaigning in aggregate.
2.3 Trade union membership (optional): if you choose to tell us whether you are a member of a trade union (and, if so, which union), we will use it only for Grassroots Left campaign organising and analysis in aggregate. This information is treated as especially sensitive, so we will process it only with your explicit consent, and you can withdraw that consent at any time, after which we will stop using it and delete it.
2.4 Support and interaction data: your sign-up preferences (email/text/WhatsApp/phone), messages you send us, canvass notes you choose to share, event attendance, responses to Grassroots Left surveys/forms.
2.5 Technical data (website): basic logs (such as IP address, device/browser details) and cookie data where used.
Please note: we do not collect or process how you voted in any secret ballot.
3. How we use your data
We use your data to:
3.1 send you Grassroots Left campaign communications you asked for;
3.2 invite you to events (online or in person);
3.3 organise volunteering/phonebanking where you opt in;
3.4 manage enquiries and admin (such as handling requests or keeping suppression lists for opt-outs);
3.5 improve our communications and understand aggregate engagement and performance (open/click rates, event sign-ups).
4. Our lawful bases (UK GDPR)
We rely on different bases depending on what we’re doing:
4.1 Electronic campaign messages (email/SMS/WhatsApp/DM):
Consent (UK GDPR Article 6(1)(a)) and, where the information reveals political opinions, explicit consent (Article 9(2)(a)).
You choose channels separately (for example “Email me”, “Text me”, “WhatsApp me”, “Phone me”).
4.2 Phone calls:
Consent: we will only call you if you have asked us to or clearly opted in to calls for this campaign. We keep a “do not contact” list and will stop if you tell us to.
4.3 Admin and security:
Legitimate interests (Article 6(1)(f)) for basic administration, record-keeping of opt-outs, preventing misuse of our systems and campaign operations that don’t require consent.
5. Marketing preferences and opt-outs
5.1 Email: every email will include an unsubscribe link (or equivalent).
5.2 Text/WhatsApp: we will tell you how to stop messages, and if you ask us to stop, we will stop.
5.3 Calls: if you tell us not to call, we record that and stop.
Please note: opting out of one channel does not affect others unless you ask us to stop all contact.
6. Who we share data with
We share data only where necessary, for example with website hosting, form tools, email/SMS providers, video meeting platforms (e.g., Zoom), and analytics tools used by Grassroots Left, or with authorised Grassroots Left campaign staff and volunteers who need access for campaign tasks and are required to keep data confidential.
Please note: we do not and will never sell your data.
7. International transfers
Some service providers may store or process data outside the UK. Where this happens, we use appropriate safeguards required by UK GDPR (such as contractual protections).
8. How long we keep your data
We keep data only as long as we need it:
8.1 Campaign sign-ups and communications: until the end of the election period, and then data are normally deleted or anonymised within [12 months], unless you opt in to continue updates.
8.2 Opt-out and suppression records: these are kept as long as needed to respect your preferences.
8.3 Enquiries: typically [12 months] after the issue is resolved.
9. Your rights
You have rights under UK GDPR, including to:
access your data
correct inaccurate data
request deletion
restrict processing
object to processing based on legitimate interests
withdraw consent at any time (this won’t affect what we did before withdrawal).
To exercise your rights, contact: contact@grassrootsleft.org
10. Complaints
If you are unhappy with how we use your data, contact us first. You can also complain to the Information Commissioner’s Office https://ico.org.uk/make-a-complaint/
11. Data security
We use reasonable technical and organisational measures to protect your data including access controls, restricted permissions and secure tools. While no system is risk-free, we aim to minimise risk and respond quickly to incidents.
12. Changes to this notice
We may update this notice. The latest version will be posted on our website.