Privacy Notice

The Conservative and Unionist Party, commonly known as the Conservative Party (The Party) respects the privacy of all of candidates and everyone else associated with the recruitment and selection of approved candidates.  We will collect and use personal data responsibly and in ways that are consistent with our obligations and your rights under the law.

This Privacy Notice covers the processing of personal data for our recruitment and selection of approved candidates process.  It explains how the Party uses and protects your personal data, as well as your rights in respect of it, how to exercise your rights and how to contact us.  More information about how The Party processes personal data in general can be found at

Information about other people

If you provide information to us about any other people, you must give them a copy of this Privacy Notice so that they understand how their information will be used.  You should only provide information about them if you are authorised to do so.

Changes to this Privacy Notice

Privacy laws and practice are constantly developing and we aim to meet high standards.  Our policies and procedures are, therefore, under continual review. We may, from time to time, update our Privacy Notice.  If we want to make any significant changes to the way in which we will use your personal data we will contact you directly and, if required, seek your consent.

About us

Unless we say otherwise, the Party is the data controller in respect of all personal data we obtain about you whether that is as a result of you or someone you know applying to be a candidate for the Party or if you are otherwise involved in the candidate selection process.  This means that we are responsible for ensuring that we do so in full compliance with data protection and all other related privacy laws.

You can contact us as follows:

Address:                        Data Protection Officer, Compliance Department, Conservative Campaign Headquarters, 4 Matthew Parker Street, London, SW1H 9HQ

Phone:                           +44 (0) 20 7984 6300

Email address:    

If you have any questions or concerns about how we are handling your personal data you can direct them to our Data Protection Officer at or you can make a complaint to the Information  Commissioner’s Office (

Categories of personal data that we process

We process the following types of personal data for our purposes and the Party is the controller of this data.

for candidates

Personal details



Any ‘known as’ name

Contact details

Address (including any previous addess(es))

Date of birth


Social media accounts and any aliases used

Content (such as blogs, websites, articles, speeches, features, books and podcasts authored or contributed to)

Adverse Financial records

Copy of driving licence

Copy of passport

Disclosure and Barring Service (DBS) check certificate

Party membership details

Interests and specialisms




National Insurance number Employment details

Employment history

Directorship history

Reasons for career negatively impacting on ability to serve as an elected representative

References (professional, personal, political/voluntary)



Previous applications

Nature of previous applications


Details of previous election(s) stood for


Assessment and selection details

Preferred constituencies

Hogan assessment results

Assessment centre scores and notes

Performance notes on selections / elections

Voluntary and community work


 Diversity and inclusion

Marital status

Age / date of birth




Political opinions

Sexual orientation

Disability / health conditions (anonymised and used solely for reporting purposes unless we have your consent for other use)


Professional and academic qualifications

Affiliations to professional membership organisations

Training and development results

for assessors / sifting representatives

for others identified in candidate applications

for suppliers and other contacts

Personal details



Any ‘known as’ name

Contact details



All information provided by the candidate

Reference responses

All information obtained through the vetting process such as information in a Candidate’s social media account

Personal details



Contact detail

Expense Details

Expenses payable

Bank account details






Sources of personal data


Others identified in applications Your representative(s)

The Party (including Party officers and professional staff)

Constituency agent(s) / Organisers

Candidates Committee



Sifting representatives

Social media platforms such as LinkedIn

Media publications


Professional advisers


Government agencies (such as the Disclosure and Barring Service (DBS) / our provider of DBS checking services

We obtain some information through our research partner (currently Emerson Strategy Limited) which searches various public resources such as electoral registers, identity checking services, companies house, social media platforms like LinkedIn and also carries out browser based searches.

We may also use Hogan assessments which are science-based aptitude tests used to gain an accurate insight into personality and cognitive abilities of applicants for candidacy.

Automated decisions using personal data

We use an automated process to make an initial determination as to whether you meet our eligibility criteria.

If we invite you to complete a Hogan assessment, your responses will be assessed using Hogan’s automated software.  The results will form part of our decision taking but will not be used as the sole selection criteria.

We do not normally take any other solely automated decisions.

You can find out more about Hogan assessments at

Purposes for which we process personal data and the legal basis for doing so

We process personal data for a number of purposes, which are:


Legal basis



Administering candidate applications

It is necessary to fulfil the contract that you are going to enter into or have entered into with us

It is necessary for our legitimate interests which are to ensure candidates meet the Nolan Principles which are standards required by the Party of an elected representative and to safeguard the objectives and reputation of the Party

Verification, vetting and selection

It is necessary for our legitimate interests which are to ensure candidates meet the Nolan Principles which are standards required by the Party of an elected representative and to safeguard the objectives and reputation of the Party

In the case of any DBS check or any special category data, we have your explicit consent and/or the processing relates to personal data that is manifestly made public by you and/or it is necessary to process the personal data to establish, exercise or defend legal claims

Payment processing

It is necessary to fulfil the contract that you are going to enter into or have entered into with us

Service delivery / receipt

Promotional activity


Direct marketing

Diversity and inclusion

Explicit consent

It is necessary to comply with our legal obligations



It is necessary for our legitimate interests which are to provide a high standard of service

It is necessary to comply with our legal obligations

Analysis and service quality evaluation

It is necessary for our legitimate interests which are to understand and develop our candidate selection processes


Service development and dealing with complaints and legal issues

It is necessary for our legitimate interests which are to understand and address concerns and to improve our services

It is necessary for the establishment, exercise or defence of legal claims.

Where you have given your consent to any processing of personal data, you have the right to withdraw that consent at any time.  If you do, it will not affect the lawfulness of any processing for which we had consent prior to your withdrawing it.

Who we may disclose your personal data to


Our research partner (currently Emerson Strategy) Hogan for our aptitude testing (in anonymised or pseudonymised form only)


Sifting representatives (ie the local constituency)



Party Officers


Professional staff

Constituency Agent / Organiser

Candidates Committee


Professional advisers


Courts or tribunals

Government agencies (where we have a legal obligation to do so)

We may, occasionally, appoint other organisations (such as telecoms providers or technology hosts) to carry out some of the processing activities on our behalf. In these circumstances, we will ensure that personal data is properly protected and that it is only used in accordance with our Privacy Notice.

Location of your personal data

If we invite you to complete a Hogan assessment, you should be aware that Hogan’s systems are in the US. The Party will anonymise or pseudonymise your identity so that your personal data is protected.

In all other cases, we normally keep your personal data within the United Kingdom. 

Wherever we transfer your personal data outside of the United Kingdom, we will take proper care to ensure that it is protected in accordance with this Privacy Notice and applicable privacy laws.

In the case of Hogan assessments, if we transfer any of your personal data to the US, we intend to use the European Commission approved ‘Standard Contractual Clauses’ as the legally accepted mechanism to allow the transfer and protect your data protection rights.

To find out more about Hogan’s privacy arrangements, you can read their Privacy Policy at

How long we keep your personal data for

The duration for which we keep personal data depends on your relationship with us

for candidates and those referred to in applications

for Assessors, Sifting Representatives

for suppliers and contacts

For applicants that do not meet the eligibility criteria

Normally 6 months

For unsuccessful applicants

Lifetime of the parliament or 4 years (whichever is longer)

For successful applicants

Duration for which they are an active candidate plus 3 years after they leave the Party list of approved candidates

Normally for 6 years after you cease to be an Assessor/ Sifting Representative

Normally for 3 years after you cease to be a supplier or 3 years after our last contact with you

After this time period we may anonymise your information and keep it for analysis.

In the unlikely event that there is a complaint which involves or affects you, we may keep your personal data for 3 years after the matter is resolved.


We take the security of personal data seriously.  We use security technology, including firewalls, password protection and encryption to safeguard information and have procedures in place to ensure that our paper and computer systems and databases are protected against unauthorised disclosure, use, loss and damage.  We have processes in place to deal with a data breach in the unlikely event one should occur.

We only use third party service providers where we are satisfied that they provide adequate security for your personal data.

Your legal rights in respect of your personal data

You have a number of legal rights over your personal data which are:




You have the right to receive a copy of the personal data that we hold about you.  We will need proof of identity and proof of authority if the request comes from someone other than you.  This will ensure we only provide information to the correct person. 

withdraw consent to direct marketing

You can exercise this right at any time.  Just send an email to and we will take care of this for you.

withdraw consent to other processing. 

Where the only legal basis for our processing your personal data is that we have your consent, you can withdraw that consent at any time, and we will have to stop processing your personal data.  Please note, this does not mean that processing carried out before you withdrew your consent is unlawful.


If you think any of the personal data we hold about you is inaccurate – please contact us at and we will check and, if necessary, amend our records.


In limited circumstances you may be able to require us to restrict our processing of your personal data.  For example, if you think what we hold is inaccurate and we disagree, we may restrict what we do with your personal data until the accuracy has been verified.


In some circumstances, for example, where we have no legal basis for keeping your personal data, you may be entitled to require us to delete it.


Where our processing is based on it being in our legitimate interests, you may be entitled to object to us processing it.


Where you have provided personal data to us electronically, you may be entitled to require us to provide that data to you electronically or to transmit it to someone else.


If you have any concerns or complaints about how we are handling your personal data we would prefer you to get in touch with us directly so that we can try to resolve the You can also contact the Information Commissioner’s Office at


Some of these legal rights are subject to exceptions which means that we may be entitled, or required, to refuse to comply with a request

More on Cookies

click here for detailed information about the cookies we use.