Privacy Notice: Contact My MP
Updated: 8th June 2018
This privacy statement tells you what to expect when Heathrow Airport Ltd (Heathrow) collects data from you while using the Contact your MP tool. Heathrow is committed to protecting your personal information when you use Heathrow services. Whenever you provide such information we are legally obliged to use your information in line with all applicable laws concerning the protection of personal data, including the General Data Protection Regulation (GDPR).
This statement exists as an addition to the wider Privacy Statement for this website, available here.
What information will we collect about you?
When you use the Contact your MP tool we will collect the following information from you to facilitate your email to your MP:
- First Name
- Last Name
- Post Code
Heathrow collects information about how you use our website and the device(s) you use to access it. This includes collecting unique online identifiers such as IP addresses, which are numbers that uniquely identify a specific computer or other network device on the internet. For more information, see our section on ‘cookies’.
How will Heathrow use the information it collects about me?
The lawful purpose for collecting and using your personal data is that we have obtained your consent. Your consent is given when you check the ‘opt-in’ field and send an email via the tool. Heathrow will use your personal data for a number of purposes including the following:
- To identify the number of emails sent to a constituency MP;
- To identify areas where support is likely to be located.
To do this, Heathrow will retain the constituency that you send your email to, and the first three letters/digits of your postcode only.
Your information will be handled and may be used by the following recipients in order to provide this service. We will keep information within Heathrow and our trusted third parties except where disclosure is required by law, for example to government bodies and law enforcement agencies:
Postcode Checking Webservice: We use the following webservice provided by Postcode Anywhere (Europe) Limited to enable the postcode and address look-up facility. No personal details will be retained after use by this facility, only a record of the total number of times the service has been used.
MP Checking Webservice: We use the webservice provided by mySociety Limited to facilitate the MP checking services. No personal details will be retained after use by this facility, only a record of the total number of times the service has been used.
Content Moderating Webservice: We use the automated webservice provided by Microsoft Limited to facilitate content moderation of customer entered information. No personal details will be retained after use by this facility, only a record of the total number of times the service has been used.
Heathrow Corporate Communications Team: This team will track the utilisation of this facility as detailed above.
Email Webservice: We use the webservice provided by Mailgun Technologies, Inc to relay emails from this website, on to MPs on behalf of our website customers. Personal details will be stored on this secure facility for no more than 30 days. Please refer to “How long will Heathrow keep my information?” for more information about data retention and removal.
Your information will be processed in the UK, however email records will be stored on US based servers, this information is protected by the EU-U.S. Privacy Shield agreement.
How long will Heathrow keep my information?
Our service provider will retain the whole email (inclusive of all contact details) for a total of thirty days. Three days following dispatch of the email, your address and postcode will be deleted; twenty seven days after this the remaining information (first name, surname and email address) will be deleted. Your information will be retained in a secure environment and access to it will be restricted according to the ‘need to know’ principle.
To view our full Privacy Statement for this site, please click here.
What rights do I have over my personal data?
Under the General Data Protection Regulation, you have the right to:
- Access your personal data
- Rectification, erasure or restriction of information
- Object to the processing
- Data portability
To exercise your rights please contact the Heathrow Data Protection Officer using the following contact details:
Data Protection Officer
Heathrow Airport Ltd
The Compass Centre
Or email: firstname.lastname@example.org
What if I find your response unsatisfactory?
Should you find our response unsatisfactory, you have the right to lodge a complaint with the supervisory authority – the Independent Commissioner’s Office (ICO). You can find more information on the ICO website at https://ico.org.uk/concerns/ regarding the complaints process.
Changes to this privacy notice
We will keep this privacy notice under regular review. At the start of this privacy notice we will tell you when it was last updated.