Privacy Policy — Andrew Wilson | Conservative Councillor for Crowborough South East

Who this policy is for

This policy covers visitors to andrewwilson.xyz and anyone who contacts Andrew Wilson, Conservative Councillor for Crowborough South East on Wealden District Council, through this site. Andrew acts in two distinct capacities that this site keeps structurally separate: as an elected councillor handling resident casework, and in connection with local political activity and his campaign, including the campaign volunteering sign-up. The legal basis for handling your data differs between the two — see "Casework versus political and campaign contact" below.

Who controls your data

Andrew Wilson is the data controller for personal data collected through this website, including campaign volunteering data — he is the person who receives it and decides how it is used, for casework and for political/campaign contact alike. You can contact him about this policy or your data at [email protected].

How forms on this site work

One or more forms on this site are connected to a real backend and will send your data to Andrew — either for council casework, or in connection with political activity and campaign volunteering (campaign sign-up), as described below. Each form still checks, at the point you would submit it, whether its specific route has been connected. If a route has not been connected, that form does not appear — you'll see a short message and an email address instead, and no data is collected for it.

What data may be collected, and why

The site is built around five response routes, each collecting only what it needs:

Raise an issue (/casework) — purpose: council casework. Name, email, phone (optional), postcode (optional), issue type (optional), and your description of the issue. Used to log and follow up on casework within Wealden District Council's remit — for example planning, waste and environmental health, licensing, housing-related council matters, and community safety. Where an issue actually sits with another public body (for example, county-managed roads and highways, which are East Sussex County Council's responsibility, not Wealden's), Andrew may be able to signpost it, but submitting this form is not confirmation that the matter is within Wealden District Council's powers.
Tell me what you think — purpose: resident feedback. Name and email, and your comment on a specific article. Read privately by Andrew; not published as a public comment.
Share evidence — purpose: evidence submission. Name (optional), email, and written detail or links. No file uploads are accepted at this stage. Leaving your name out does not make a submission fully anonymous — your email address is still collected so Andrew can follow up if needed.
Contact (/contact) — purpose: general contact. Name, email, phone (optional), and your message.
Campaign sign-up (/campaign) — purpose: campaign contact. Name, email, postcode (optional), how you'd like to help, your explicit consent to this processing, and — separately and optionally — whether you agree to your details being shared with Sussex Weald Conservatives. This is political activity and campaign volunteering contact, not council casework — see "Political activity and campaign volunteering" below.

Every form also has a hidden anti-spam field (a "honeypot") that real visitors never see or fill in, and — on forms connected to a real backend — a Cloudflare Turnstile check to reduce automated spam submissions. Neither is used to identify or track you personally. Each submission also records which of the five purposes above it was collected under, and the version of this policy and of the form's consent wording in force at the time — this is bookkeeping to keep future use limited to what you were told, not a way of identifying or tracking you beyond what you have already provided.

How this data may be used later

Each purpose above has a limited, specific future use. Campaign contact is never inferred from any of the other four purposes, and submitting any of the other four forms does not add you to campaign contact of any kind.

General contact: used to respond to your specific enquiry.
Council casework: used to manage and follow up the specific issue you raised.
Resident feedback: considered, and followed up if Andrew chooses to — never published.
Evidence submission: assessed and followed up on the substance of what you sent.
Campaign contact: to respond to your request to get involved, organise political and community campaigning, and contact you about relevant campaign or local political activity — never shared with council officers or council systems, and never shared with Sussex Weald Conservatives unless you have separately and optionally agreed to that.

Casework versus political and campaign contact

Casework and campaign information are kept separate. Information submitted through the Raise an issue, Tell me what you think, Share evidence and Contact forms is used for councillor casework and related correspondence, and is held in Andrew's council casework records. Information submitted through the Campaign sign-up form is held separately, in a completely different political and campaign volunteering record, and used for political activity and campaign volunteering. The two are never merged.

Casework information is not used for campaigning or transferred into campaign records. The legal basis for handling councillor casework will generally differ from that used for political and campaign activity: casework handling generally relies on Andrew's public task as an elected councillor, while political and campaign contact relies on your consent — see the next section for detail.

Political activity and campaign volunteering

Andrew Wilson controls information submitted through this website for political activity and campaign volunteering. He determines how that information is used.

Your decision to volunteer for political activity may reveal, or allow someone to infer, your political opinions. Under UK data protection law this means information submitted through the campaign sign-up form may be special category personal data, which has stricter rules than ordinary personal data. This is the one route on this site designed with that in mind — the other four (council casework, resident feedback, evidence submission, general contact) do not target special-category data, though any free-text field could incidentally include such detail if you choose to write it yourself, in which case it is handled with the same care as the rest of your submission, not treated any differently.

Andrew may use this information to:

respond to your request to get involved;
organise political and community campaigning;
contact you about relevant campaign or local political activity; and
maintain an appropriate volunteering and contact record.

This site does not currently operate a general political newsletter or mailing list, and signing up to volunteer is not consent to routine election communications, fundraising requests, or other direct marketing beyond the purposes listed above. If that changes, this policy will be updated and any broader contact will need its own separate consent.

The legal basis for this processing is your consent (Article 6(1)(a) UK GDPR). Because the information may be special category data, Andrew also relies on your explicit consent (Article 9(2)(a) UK GDPR) specifically for that element. The campaign sign-up form's required consent checkbox is written to satisfy both: it is unticked by default, requires you to actively tick it, is specific to this form and this purpose, and is recorded — along with a version identifier for the exact wording you agreed to — at the point you submit. You can withdraw this consent at any time; see "Your rights" below.

Sharing campaign information with Sussex Weald Conservatives

Campaign sign-up information is controlled by Andrew Wilson in the first instance. The Campaign sign-up form gives you a separate, optional choice to consent to your information being shared with Sussex Weald Conservatives for local Conservative campaigning and political activity.

Your information will not be shared with Sussex Weald Conservatives for these purposes unless you have given that separate consent. You can volunteer for Andrew's campaign without agreeing to this sharing; leaving it unticked has no effect on your sign-up.

Where information is shared with Sussex Weald Conservatives pursuant to your consent, Sussex Weald Conservatives will be responsible for its own subsequent handling of that information as a separate data controller, not as a processor acting on Andrew's instructions.

Because campaign information may reveal your political opinions, Andrew relies on your consent under Article 6(1)(a) UK GDPR, and your explicit consent under Article 9(2)(a) UK GDPR where special category personal data is involved, for this sharing as for the underlying campaign processing described above.

Email contact

Until a form is connected, or if you choose to email directly, messages go to Andrew's published contact address. Ordinary email handling terms apply — the same care described in this policy is intended to extend to messages sent this way, though email itself sits outside this site's own systems.

Who processes this data on Andrew's behalf

Google (Sheets, Apps Script, Gmail). Form submissions are written to Google Sheets — casework and campaign data in two completely separate spreadsheets — using Google Apps Script to receive and validate each submission. A notification email for each new submission is sent via Gmail.
Cloudflare (Turnstile). Used on forms connected to a real backend to reduce spam submissions — see "Cookies and Cloudflare Turnstile" below.
Google Analytics 4 — only if you actively accept analytics cookies. See "Analytics" below.

Whether each of the above is formally a data processor (requiring a processor agreement) or an independent third party, and whether any international data transfer (Google's and Cloudflare's infrastructure is not exclusively UK-based) has an adequate safeguard in place, has not yet been confirmed in writing.

Who your data may be shared with

This site's own systems do not automatically send your data to Wealden District Council, East Sussex County Council, the Conservative Party, or any other organisation. If progressing an issue you have raised requires Andrew to contact the relevant council or authority himself, only the details necessary for that specific purpose are shared. Campaign sign-up information may be shared with Sussex Weald Conservatives, but only in relation to campaign information where you have specifically consented to that sharing — see "Sharing campaign information with Sussex Weald Conservatives" above. Councillor casework information is not shared with Sussex Weald Conservatives for campaigning purposes. Public comments from the previous WordPress site are not collected, published, or otherwise used by this site. No personal data is knowingly sold, and none is used for advertising.

Keeping your data secure

Submissions are stored in Google Sheets that Andrew can access through his own Google account. Exactly who else, if anyone, has access to those Sheets has not yet been confirmed in writing. No additional encryption beyond what Google and Cloudflare provide as standard is layered on top by this site.

Analytics

This site can use Google Analytics 4 to understand overall visitor numbers and which pages are read — but only if you actively agree via the banner shown on first visit. It does not run by default, no analytics cookie is set until you accept, and declining is exactly as easy as accepting. No Google Tag Manager, advertising, remarketing, or cross-site tracking is used. Full detail, including how to change your choice, is in the Cookie Policy.

Cookies and Cloudflare Turnstile

See the Cookie Policy for full detail. In short: this site's own code does not set cookies to operate normally. On forms connected to a real backend, Cloudflare Turnstile is used to reduce spam and may set a short-lived verification cookie or token as part of that check — this is a security measure, not a tracking or advertising cookie.

Search

The search on this site (Pagefind) runs entirely in your browser against a static index built when the site is published. Your search terms are not sent to Andrew, to a third party, or logged anywhere.

External links

This site links to external sources — Wealden District Council, East Sussex County Council, press coverage, and evidence documents — to support the factual claims made in council diary posts and casework updates. Those sites have their own privacy practices, which this policy does not cover.

Data retention

Personal information is retained only for as long as reasonably necessary for the purpose for which it was collected, including any legal, regulatory, accounting or safeguarding requirements.

Your rights

Under UK data protection law, you have the right to ask for access to the personal data Andrew holds about you, to have inaccurate data corrected, to have it erased, to restrict or object to certain processing, and — where processing is based on your consent, such as campaign sign-up — to withdraw that consent at any time. You also have an absolute right to object to your data being used for direct marketing (such as campaign contact) at any time, for any reason, with no need to justify it. To exercise any of these rights, contact Andrew at [email protected]. If you are not satisfied with how your data has been handled, you also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.

For campaign sign-up specifically, you can withdraw your consent to Andrew's processing, or separately withdraw your consent to sharing with Sussex Weald Conservatives, at any time — the two can be withdrawn independently of each other. Withdrawing consent does not affect the lawfulness of anything already done with your information before you withdrew it; it stops any further consent-based processing from that point on. Once withdrawn, Andrew will stop using your information for that purpose and, where appropriate, delete or restrict it, unless a legal, regulatory, accounting or safeguarding requirement justifies keeping it.

Contact

For any question about this policy or how your data is handled, contact Andrew at [email protected].

Changes to this policy

This policy may be updated as the site's forms, analytics, or other data handling change. Last updated: 29 August 2026.