Last Updated: 19 November 2024
This notice sets out how we process your personal data when you visit our website, in compliance with Articles 13 and/or 14 of the UK General Data Protection Regulation (UK GDPR).
We will process the following personal data:
1. Anonymous data such as pages visited, time spent on each page, and the method by which you accessed our site.
2. Information you provide directly, such as your email address and feedback, if you contact us.
The purposes for processing your personal data are:
1. To gather feedback to improve our services.
2. To respond to your feedback or inquiries.
3. To understand website usage and improve functionality.
The legal basis for processing your personal data under Article 6 of the UK GDPR is:
1(e) Public task: Processing is necessary for the performance of a task carried out in the public interest, namely improving government services.
Your personal data will not be shared with third parties for marketing purposes. Data collected may be processed by Google Analytics under strict privacy safeguards.
We retain personal data collected through our website only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable laws and regulations. Specifically:
Google Analytics Data: We have configured Google Analytics to retain user and event data for the minimum period of 2 months. After this period, the data is automatically deleted from Google's systems.
Contact Information: If you provide personal data, such as your email address when contacting us, this information will be retained only for as long as necessary to respond to your enquiry or for up to 12 months, whichever is shorter, unless a longer period is required for legal or audit purposes.
At the end of the retention period, personal data will be securely deleted or anonymised. Anonymised data may be retained for statistical purposes, where it cannot be used to identify individuals. We review our data retention practices regularly to ensure they comply with the UK General Data Protection Regulation (UK GDPR) and the Department for Science, Innovation and Technology’s (DSIT) data protection policies.
Data collected through Google Analytics may be transferred outside the UK and the European Economic Area (EEA), including to the United States, where Google’s servers are located. To ensure compliance with UK GDPR, Google relies on safeguards such as:
1. The UK-US Data Privacy Framework, which provides assurance that transferred data will be protected to standards equivalent to UK law.
2. Where necessary, the use of Standard Contractual Clauses (SCCs), supplemented by Google’s technical measures, such as encryption and pseudonymisation, to ensure data protection.
These mechanisms are designed to protect your personal data during any international transfer and ensure compliance with UK data protection standards.
You have the following rights regarding your personal data:
1. To request information about how your data is processed.
2. To request correction or deletion of your data.
3. To object to data processing where applicable.
The data controller for your personal data is the Department for Science, Innovation and Technology (DSIT). You can contact the DSIT Data Protection Officer at:
DSIT Data Protection Officer
Department for Science, Innovation & Technology
22-26 Whitehall
London
SW1A 2EG
Email: dataprotection@dsit.gov.uk
If you are unhappy with the way we have handled your personal data, please write to the department’s Data Protection Officer in the first instance using the contact details above.
If you consider that your personal data has been misused or mishandled, you may make a complaint to the Information Commissioner, who is an UK independent regulator. The Information Commissioner can be contacted at:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow, Cheshire
SK9 5AF
Telephone: 0303 123 1113
https://ico.org.uk/make-a-complaint/
Any complaint to the Information Commissioner is without prejudice to your right to seek redress through the courts.
If this privacy notice changes in any way, we will place an updated version on this page. Regularly reviewing this page ensures you are always aware of what information we collect, how we use it, and under what circumstances we will share it with other parties. The ‘last updated’ date at the bottom of this page will also change. If these changes affect how your personal data is processed, we will take reasonable steps to let you know.