Privacy Policy

Who we are

MPFolio ("we", "us") operates this website and is the data controller for personal data processed through it.

If you have questions or want to exercise your data rights, contact us at privacy@mpfolio.co.uk.

What the site publishes

MPFolio is a transparency dashboard that helps users explore information disclosed in the UK Parliament Register of Members' Financial Interests.

We display and structure information that is publicly available in that register (for example: MP names, roles/constituencies, and declared interests such as earnings, donations, gifts, visits, etc.), and we show changes over time between register releases.

We aim to present information as published by Parliament, with clear provenance. We do not add speculation or allegations.

Personal data we collect from visitors

Cookies

MPFolio does not set cookies for advertising.

Some cookies or similar technologies may be set by the underlying platform features required to deliver the site securely and reliably (for example, security or load balancing). If we introduce optional analytics cookies or marketing cookies in the future, we will update this policy.

How we use your data

We use personal data only for:

• Operating the site (serving pages, providing requested features)
• Security and abuse prevention (protecting against malicious traffic, fraud, or attacks)
• Support and communications (responding to enquiries you send us)
• Maintaining data provenance (storing register snapshots/versions and our structured representations so users can verify what is shown)

Our legal basis (UK GDPR)

We process personal data under the following bases:

• Legitimate interests: operating, securing, and improving the service, and maintaining the integrity of the platform
• Consent: only where you choose to provide information (e.g. emailing us). If we add non-essential cookies later, we will request consent where required.

Where data is stored and processed

We use the following service providers to run MPFolio:

• Vercel - website hosting and delivery
• Neon - managed Postgres database hosting
• Amazon S3 - file/object storage (for example, assets and stored source snapshots)

These providers may process data in the UK and/or other countries. Where personal data is transferred internationally, we rely on appropriate safeguards required under applicable data protection law, such as adequacy regulations or standard contractual clauses, as appropriate.

Sharing your data

We do not sell personal data.

We share personal data only:

• with our service providers (Vercel, Neon, Amazon S3) to operate the service, and
• when required to comply with a legal obligation.

Data retention

We keep personal data only as long as needed for the purposes described above:

• Site/security logs: retained for a limited period for security and troubleshooting, then deleted or aggregated.
• Contact messages: kept only as long as necessary to respond and handle any follow-up, then deleted or archived.
• Register source data and structured records: retained to provide provenance, historical views, and change tracking (this data is derived from publicly available Parliamentary publications).

Your rights

Under UK data protection law, you may have the right to:

• request access to personal data we hold about you
• request correction or deletion
• object to, or request restriction of, certain processing
• request portability of data you provided to us (where applicable)
• withdraw consent at any time where processing is based on consent (without affecting the lawfulness of processing before withdrawal)

To exercise these rights, contact privacy@mpfolio.co.uk.

You also have the right to complain to the UK Information Commissioner's Office (ICO).

Automated decision-making

We do not carry out solely automated decision-making or profiling that produces legal effects, or similarly significant effects, about visitors.

Corrections and disputes about published register content

If you believe MPFolio displays something incorrectly:

• If it is a parsing or presentation issue on our side (e.g. a value/date/category extracted incorrectly), contact us with the page URL and what you think is wrong. We will review and fix it.
• If the issue relates to the underlying Parliamentary register entry, MPFolio can only reflect what has been published. Any correction to the official record must be handled through the relevant Parliamentary process.

Security

We take reasonable steps to protect personal data, including encryption in transit and access controls. No system is 100% secure, but we work to reduce risk and respond to issues promptly.

Children

MPFolio is not intended for children, and we do not knowingly collect personal data from children.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version here and change the "Last updated" date.