Last updated: this is a pre-launch draft and must be reviewed by a qualified adviser before public launch (DESIGN.md §8).
pub.money republishes statutory, already-public records of donations to UK political parties, sourced from the Electoral Commission (loans and other datasets are planned for later phases). For personal data contained in those records, pub.money acts as a data controller under the UK GDPR and the Data Protection Act 2018.
For donations from individuals, the public register includes the donor's name and postcode. We ingest the name and postcode only; we do not collect or store full home addresses. In free public search we coarsen individual postcodes to the outward code (e.g. "M1"). Donations from companies and other organisations do not constitute personal data and are shown in full.
We rely on legitimate interests (Article 6(1)(f)): enabling public scrutiny and transparency of political finance, a matter of substantial public interest. A legitimate interests assessment supports this. We do not use personal data for marketing, profiling, or any solicitation, and we prohibit such use by others (see our Terms).
You have rights of access, rectification, erasure, restriction, and objection. Because our records mirror a statutory public register, some requests may be limited where continued processing is necessary for the public-interest purpose; we will explain any such decision. To exercise a right or object, contact hello@ai.church.
We retain published records for as long as they remain part of the public interest in political-finance transparency, and we propagate corrections and removals from the source on each re-ingest.