Graham Simpson MSP
Last updated: 6 November 2026
1. Introduction
Graham Simpson MSP is committed to protecting your privacy and handling your personal information responsibly, securely and transparently.
This Privacy Policy explains how personal information may be collected, used, stored and shared when you visit this website, contact Graham or his office, or choose to receive communications about his work.
Personal information is handled in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This is Graham Simpson MSP’s website. It is separate from the official Scottish Parliament website, which operates under its own privacy and data protection policies.
2. Who is responsible for your information?
The Data Controller for personal information processed through this website is:
Graham Simpson MSP
The Scottish Parliament
Edinburgh
EH99 1SP
Email: Graham.Simpson.msp@parliament.scot
Graham Simpson MSP is responsible for ensuring that personal information is processed in accordance with applicable data protection legislation.
This website is independently operated and is separate from the Scottish Parliament’s official website, which has its own privacy and data protection arrangements.
3. Information we collect
We may collect and process the following information.
Information you provide
When you contact Graham or his office, we may collect:
- Your name and email address.
- Your postal address or telephone number, where provided.
- Information contained in your correspondence.
- Information relevant to an enquiry or request for assistance.
- Your communication preferences.
Depending on the nature of your enquiry, this may include sensitive personal information.
Website visitor information
When you visit the website, certain technical information may be collected automatically, including:
- IP address.
- Browser and device information.
- Pages visited and time spent on the website.
- Referral information.
- Technical information required for website security and performance.
Some information may be collected through cookies or similar technologies, as explained in our Cookie Policy.
Website hosting and technical information
This website is hosted by Hostinger, a third-party website hosting provider.
Hostinger and other technology service providers used in operating the website may process technical information relating to visitors, including IP addresses, device and browser information, website activity and security-related information.
Other service providers, which may include Google where relevant services are enabled, may also process information in connection with website functionality, analytics or embedded content.
The information collected and the purposes for which it is processed will depend on the services and technologies in use.
Where required, appropriate safeguards and consent arrangements will apply.
4. How we use your information
Personal information may be used to:
- Respond to enquiries and correspondence.
- Assist with parliamentary or constituency-related matters.
- Communicate with individuals and organisations about matters they have raised.
- Maintain appropriate records of correspondence.
- Improve the website and understand how visitors use it.
- Protect the website against misuse, security threats and unauthorised access.
- Meet applicable legal and regulatory obligations.
We will use personal information only where there is an appropriate lawful basis under data protection legislation.
Depending on the circumstances, this may include the performance of public tasks, compliance with legal obligations, legitimate interests where applicable, or consent.
Where sensitive personal information is processed, an additional legal condition will be identified where required.
5. Correspondence and requests for assistance
If you contact Graham or his office, the information you provide will be used to consider and respond to your enquiry.
Where necessary and lawful, relevant information may be shared with public authorities, government departments, local authorities or other organisations to assist with the matter raised.
We will take appropriate steps to ensure that information is shared only where necessary and with a suitable legal basis.
Personal information supplied for parliamentary or constituency matters will not automatically be used for unrelated purposes, including political campaigning or promotional communications.
6. Newsletters and other communications
Graham may offer newsletters, email updates and other communications about his parliamentary work, policy interests, public activities and related matters.
Where these services are available, individuals will be able to subscribe voluntarily.
Names, email addresses and communication preferences may be collected and used to manage subscriptions and distribute communications.
Where consent is required, it will be requested before communications are sent.
Contacting Graham or his office will not automatically result in your details being added to a newsletter or mailing list.
Subscribers will be able to unsubscribe or withdraw consent at any time.
Information collected for correspondence or casework will not automatically be used for newsletters, political campaigning or unrelated communications.
Any future subscription service will be accompanied by appropriate information explaining how personal data is used.
7. Cookies and website analytics
This website uses, or may use, cookies and similar technologies to support its operation, maintain security, improve performance and understand how visitors use the website.
Some cookies are essential to the website’s operation. Others may be associated with analytics, embedded content or services provided by third parties.
Where consent is required by law, non-essential cookies and similar technologies will only be activated after the visitor has provided the necessary consent.
Visitors will be able to manage their cookie preferences where applicable.
Further information is available in our Cookie Policy, which will be updated as necessary to reflect changes in the technologies used by the website.
8. Social media and external websites
This website contains links to external websites and social media platforms, including Facebook, X and LinkedIn.
It may also provide options for visitors to share website content through social media and messaging services.
These external services operate under their own privacy policies.
We are not responsible for the privacy practices or content of third-party websites.
Visitors should review the privacy information provided by those services.
9. Comments and visitor uploads
This website does not provide facilities for public comments, visitor accounts or user-generated content uploads.
Visitors cannot publish material directly to the website.
10. Sharing personal information
We do not sell personal information.
Information may be shared where necessary and lawful with:
- Authorised members of Graham’s office.
- Organisations assisting with parliamentary or constituency enquiries.
- Website hosting, technical support and other service providers.
- Authorities or organisations where disclosure is required by law.
Service providers processing personal information on our behalf are expected to maintain appropriate security and confidentiality arrangements.
Where personal information is transferred outside the United Kingdom, appropriate safeguards will be used where required by law.
11. Data security
Reasonable technical and organisational measures are used to protect personal information against unauthorised access, loss, alteration or disclosure.
Access to personal information is restricted to those who require it for legitimate purposes.
Although appropriate precautions are taken, no method of transmitting information over the internet can be guaranteed to be completely secure.
Visitors should avoid sending highly sensitive information through ordinary, unencrypted email unless necessary.
12. How long we keep information
Personal information will be retained only for as long as reasonably necessary for the purposes for which it was collected and processed.
Retention periods may vary depending on the nature of the information, the purpose for which it is held, and any applicable legal, administrative or regulatory requirements.
In determining appropriate retention periods, we will consider the continuing need for the information, relevant legal obligations and the nature of the correspondence or activity concerned.
Information that is no longer required will be securely deleted or anonymised, subject to any applicable legal or record-keeping obligations.
Individuals may contact Graham’s office for further information about how long particular categories of personal information are retained.
13. Your rights
Under UK data protection legislation, you may have the right to:
- Request access to personal information held about you.
- Ask for inaccurate information to be corrected.
- Request deletion of information in certain circumstances.
- Request restrictions on how information is processed.
- Object to certain uses of your information.
- Withdraw consent where processing relies on consent.
- Request transfer of information where the right to data portability applies.
These rights are subject to legal conditions and exemptions.
To exercise your rights, please contact Graham’s office using the details above.
You may also raise concerns with the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator.
14. Changes to this policy
This Privacy Policy may be updated to reflect changes in legislation, website functionality or the way personal information is processed.
The latest version will be published on this website, together with the date of the most recent update.
15. Contact
If you have questions about this Privacy Policy, wish to exercise your data protection rights or have concerns about how your personal information is handled, please contact:
Graham Simpson MSP
The Scottish Parliament
Edinburgh
EH99 1SP
Email: Graham.Simpson.msp@parliament.scot
You also have the right to raise concerns with the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator.