Privacy policy

Last updated: 13 September 2026

SME4Labour is committed to protecting personal data. This notice explains what we collect, why we use it, who we share it with, how long we keep it, and your rights under UK GDPR and the Data Protection Act 2018.

Who is the data controller

The data controller is SME4Labour, an independent not-for-profit organisation. We are not formally part of the Labour Party.

For privacy enquiries, email [email protected]. A postal address will be provided on request through that email.

Personal data we collect

  • Identity and contact details you give us (name, email, phone, organisation)
  • Membership and donation records
  • Event registration and attendance details
  • Newsletter preferences and email consent
  • Technical information needed to operate the website (IP address, browser, cookies)
  • Payment references processed by our payment providers — we do not store full card numbers

Why we use your data and the lawful basis

  • Membership, donations and event bookings — contract and legitimate interests in administering our community
  • Enquiries — legitimate interests in responding to you
  • Newsletters and optional text updates — consent, which you can withdraw at any time
  • Legal, accounting and regulatory duties — legal obligation
  • Website security and essential cookies — legitimate interests in keeping the site working

Who we share data with

We do not sell personal data. We use processors who act on our instructions, including NationBuilder (website and CRM), payment processors, and email-delivery providers. We may disclose data if the law requires it.

We do not share your data with sister organisations as a default. Event partners only receive what is needed to run a specific event, and only where that is explained at registration.

International transfers

Some processors may store data outside the UK, including in the United States. Where that happens we rely on appropriate safeguards required by UK data protection law.

How long we keep data

  • Membership records — for the life of the membership and up to 24 months afterwards, unless a longer legal retention applies
  • Event registrations — normally up to 24 months after the event
  • Newsletter data — until you unsubscribe or ask us to delete it
  • Enquiries — normally up to 24 months
  • Financial records — as required by UK accounting law

Your rights

You can ask us to access, correct, delete or restrict your personal data, or object to certain processing. Where we rely on consent, you can withdraw it at any time by emailing [email protected] or using the unsubscribe link in our emails.

You have the right to complain to the Information Commissioner’s Office: ico.org.uk/make-a-complaint.

Cookies

We use essential cookies so the website can function. You can accept cookies or continue with essential cookies only via our cookie banner, and you can also control cookies in your browser. Analytics or marketing cookies are not treated as accepted merely because you continue browsing.

Contact

Email [email protected].