Privacy Policy

Who we are

To My MP (“we”, “us”) operates tomymp.co.uk. We are the data controller for the personal data described here. Company no. 17361132, registered at 3 Rothsay Street, London, SE1 4UH, United Kingdom. For any privacy question or request, contact support@tomymp.co.uk.

What we collect, and why

• Writing to your MP. By default we do not store your postcode, address, or the concern you write. The text you enter is sent to our AI provider (Anthropic) to generate your letter, which is returned to your browser for you to send yourself. If you tick the optional “Help track impact” box, we keep only the first 4 characters of your postcode and a short AI summary of your concern, never your full postcode, address, or full text, so you can report back on whether your MP responds.
• Accounts. If you create an account we store your name, email and a securely hashed password (via our authentication provider, Supabase).
• Payments. Paid features are handled by Stripe. Card details are entered on Stripe’s own secure checkout and never reach our servers; we only record whether a payment or subscription is active.
• Enquiries & reports. If you request a consultation or report incorrect information, we keep what you send us (including your email, if provided) to respond and to fix issues.

Special category data

A message to your MP can reveal your political opinions, which is “special category” data under UK GDPR. We only process it with your explicit consent, which you give by ticking the consent box before generating a letter. You can withdraw consent at any time by not using the tool, or by contacting us to delete stored data.

Who we share it with

We use a small number of processors to run the service: Anthropic (to generate text; may process data outside the UK/EU), Supabase (accounts and database), Stripe (payments), and Vercel (hosting). We do not sell your data or use it for advertising. We may change AI provider, and will update this list when we do.

How long we keep it

We keep the minimised tracking data and account data only as long as needed for the purposes above, and delete it on request. Payment records are retained as required for accounting and legal obligations.

If you are a journalist

We hold a small amount of professional contact information about journalists at UK national news outlets, so that our clients can send stories to the right desk rather than to everyone. This section explains it, because we collected it from public sources rather than from you.

What we hold.Your name, your outlet, your role or beat, the formats you work in, and a work email address. That address is either one you have published yourself, or one worked out from your employer’s usual email format. Where it is worked out rather than published, it is clearly labelled as unverified, and we record where every piece of information came from and when.

What we do not hold. No personal contact details, no home address, no private phone number, and nothing about your views or opinions.

Why. Our lawful basis is legitimate interests: helping a relevant story reach a journalist who covers that subject. We have carried out and recorded a balancing test weighing that against your own interests, and we will share it on request.

How we limit it. We only cover a defined list of national outlets, we only suggest journalists who have recently written on the subject in question, and we cap suggestions at a handful per campaign. If you have publicly stated a preference, for example that you do not take PR pitches, we treat that as a stop and do not provide your details at all.

Your rights. You can ask us what we hold about you, correct it, or object to it entirely. If you object we will remove you and keep a record of that removal, so a later refresh cannot quietly add you back. Email support@tomymp.co.uk. You can also complain to the Information Commissioner’s Office (ico.org.uk).

We re-check or delete this information every six months, so nothing sits here indefinitely on the strength of an old byline.

Your rights

You have the right to access, correct or delete your personal data, to withdraw consent, and to complain to the Information Commissioner’s Office (ico.org.uk). To exercise any of these, email support@tomymp.co.uk.

Cookies

We use only essential cookies needed to keep you signed in. We do not use advertising or third-party tracking cookies.