Privacy Policy

Peter Lamb MP

Privacy Policy

Last updated: 28/1/26

This privacy policy explains how the office of Peter Lamb, Member of Parliament for Crawley, collects, uses, and protects your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

The data controller is:

Peter Lamb MP
House of Commons, London SW1A 0AA
Constituency Office: 7-8 The Courtyard, East Park, Crawley, RH10 6AG
Email: peter.lamb.mp@parliament.uk

Phone: 01293 420564

Members of Parliament are data controllers when carrying out their parliamentary functions.

2. What personal data we collect

We may collect and process the following types of data:

  • Name, postal address, email address, phone number
  • Casework details and correspondence
  • Documents you provide (letters, forms, evidence, etc.)
  • Identifiers such as your National Insurance number or NHS number (only when relevant)
  • Special category data (e.g., health information, ethnicity, political opinions) only when necessary to progress your case or enquiry
  • Information provided in surveys, petitions, event sign‑ups, or consent forms

3. How we collect your data

We may collect your data through:

  • Emails, letters, web forms, phone calls, and social media messages
  • Meetings, constituency surgeries, or events
  • Third parties involved in your case (with your consent or where legally permitted)
  • Surveys or consultation responses you choose to complete
  • Information from the electoral register that is supplied to Members of Parliament for the purpose of supporting constituents. This data is used only for parliamentary and constituency duties.

4. Why we process your data

We process your personal data to:

  • Respond to your enquiries
  • Manage and progress constituency casework
  • Make representations on your behalf to government departments, public bodies, and local authorities
  • Maintain records of issues raised by constituents
  • Organise constituency events and meetings

If you provide separate, explicit consent, we may also:

  • Contact you about local issues
  • Provide updates on my work in Parliament
  • Share information on consultations, campaigns, or matters you may be interested in
  • Invite you to relevant meetings or constituency events

You can withdraw this consent at any time by contacting peter.lamb.mp@parliament.uk

5. Legal basis for processing your personal data (Article 6 UK GDPR)

We rely on the lawful bases set out in Article 6(1) UK GDPR:

Article 6(1)(e) — Public Task

Processing is necessary to perform my role as a Member of Parliament, including:

  • responding to constituents’ enquiries
  • dealing with casework
  • representing constituents in parliamentary matters
  • interacting with government departments and public authorities

Where you contact me about a specific policy or parliamentary issue, I may send a follow‑up update that relates directly to that same issue, as this forms part of my parliamentary duties. This does not add you to any wider mailing list or permit contact about unrelated matters without your explicit consent.

Article 6(1)(a) — Consent

We rely on your explicit consent when you:

  • opt in to receive updates on local issues or my work in Parliament
  • subscribe to newsletters or mailing lists
  • consent to specific processing not covered by public task

You may withdraw consent at any time by contacting peter.lamb.mp@parliament.uk

Article 6(1)(f) — Legitimate Interests

We may rely on legitimate interests when processing is necessary for:

  • inviting you to local meetings or events related to issues you have raised previously
  • providing proportionate follow‑up information that relates directly to your existing engagement

We do not use casework data for these purposes without your separate consent.

Article 6(1)(d) — Vital Interests

Used only in rare cases where processing may protect someone’s life, such as safeguarding matters.

Article 6(1)(c) — Legal Obligation

Processing required to comply with legal duties (e.g., regulatory requirements, safeguarding disclosures).

6. Special category data (Article 9 UK GDPR & DPA 2018)

When casework involves special category data (e.g., health, racial or ethnic origin, political opinions, religious beliefs), we rely on:

  • Article 9(2)(g) UK GDPR, and
  • Schedule 1, Part 2, Paragraph 23 of the Data Protection Act 2018 (“Elected Representatives Condition”)

This allows MPs to process sensitive data when individuals contact them for help.

This legal condition only applies to casework and cannot be used to send newsletters, updates, surveys, or general political communications.

7. Who we share your data with

We may share your personal data with:

  • Government departments and public agencies
  • Local councils and statutory bodies
  • The police
  • Healthcare providers such as NHS, Doctors’ surgeries and private medical companies
  • Private housing providers
  • Private companies and/or suppliers
  • Ombudsmen, regulators, or oversight bodies
  • Parliamentary staff or House of Commons services supporting casework
  • Organisations directly involved in resolving your issue

We do not share your data with political parties or use it for party‑political campaigning.

International Transfers (Including Embassies and Overseas Authorities)

We do not routinely transfer your personal data outside the United Kingdom or the European Economic Area (EEA). All personal data handled by my office is normally stored and processed within the UK.

In limited circumstances, it may be necessary to share your personal data with an organisation based outside the UK or EEA. This includes cases where personal data is shared with a foreign embassy or consulate located in the United Kingdom, as these organisations act on behalf of another country and are treated as international recipients for data protection purposes.

We will only transfer your personal data to a country outside the UK or EEA where:

  1. The country is covered by a UK adequacy decision, meaning the UK Government has determined that the destination country provides an appropriate level of data protection; or
  2. You have given your explicit consent to the transfer after being informed that the receiving organisation may not be subject to UK data protection standards.

If such a transfer is required, we will inform you of the reason for the transfer and seek your explicit consent where an adequacy decision does not apply. We will not transfer your personal data internationally on any other basis.

8. How long we keep your data

  • Casework data: typically, up to two years after a case is closed
  • Mailing list data (where you have opted in): until you unsubscribe
  • Event or meeting sign‑up data: retained only as long as needed for that purpose

You may request deletion at any time.

9. Your rights under UK GDPR

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Object to or restrict processing
  • Withdraw consent where applicable
  • Raise a complaint with the Information Commissioner’s Office (ICO)

To exercise these rights, please contact peter.lamb.mp@parliament.uk

10. How we protect your data

We use appropriate technical and organisational measures including:

  • Encrypted casework management systems
  • Secure House of Commons IT infrastructure
  • Access‑controlled digital storage
  • Secure disposal of physical documents

11. Complaints

If you have concerns about how your data has been handled, please contact us first.
You may also contact the Information Commissioner’s Office (ICO) at:
www.ico.org.uk

12. Changes to this policy

We may update this privacy policy periodically. The most recent version will always be available on request or on our website.