Introduction
This notice sets out how we process your personal data when you visit our website, in compliance with Articles 13 and/or 14 of the UK General Data Protection Regulation (UK GDPR).
Your Data
We will process the following personal data:
- •Anonymous data such as pages visited, time spent on each page, and the method by which you accessed our site.
- •Information you provide directly, such as your email address and any message content, if you contact us.
Purpose
The purposes for processing your personal data are:
- •To gather feedback to improve our services.
- •To respond to your feedback or inquiries.
- •To understand website usage and improve functionality.
Legal Basis
The legal basis for processing your personal data under Article 6 of the UK GDPR is:
1(e) Public task: Processing is necessary for the performance of a task carried out in the public interest, namely improving government services.
Recipients
- •Your personal data will not be shared with third parties for marketing purposes.
- •Data collected may be processed by Google Analytics under strict privacy safeguards.
Retention
We retain personal data collected through our website only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable laws and regulations. Specifically:
Google Analytics data
We have configured Google Analytics to retain user and event data for the minimum period of 2 months. After this period, the data is automatically deleted from Google's systems.
Contact information
If you provide personal data, such as your email address when contacting us, this information will be retained only for as long as necessary to respond to your enquiry or for up to 12 months, whichever is shorter, unless a longer period is required for legal or audit purposes.
At the end of the retention period, personal data will be securely deleted or anonymised. Anonymised data may be retained for statistical purposes, where it cannot be used to identify individuals. We review our data retention practices regularly to ensure they comply with the UK GDPR and the Ministry of Justice's data protection policies.
International Transfers
Data collected through Google Analytics may be transferred outside the UK and the European Economic Area (EEA), including to the United States, where Google's servers are located. To ensure compliance with UK GDPR, Google relies on safeguards such as:
- •The UK-US Data Privacy Framework, which provides assurance that transferred data will be protected to standards equivalent to UK law.
- •Where necessary, the use of Standard Contractual Clauses (SCCs), supplemented by Google's technical measures such as encryption and pseudonymisation to ensure data protection.
These mechanisms are designed to protect your personal data during any international transfer and ensure compliance with UK data protection standards.
Your Rights
You have the following rights regarding your personal data:
- •To request information about how your data is processed.
- •To request correction or deletion of your data.
- •To object to data processing where applicable.
The data controller for your personal data is the Ministry of Justice. You can contact the MoJ Data Protection Officer at:
Data Protection Officer
Ministry of Justice
102 Petty France
London
SW1H 9AJ
DataProtection@justice.gov.ukIf you are unhappy with the way we have handled your personal data, please write to the department's Data Protection Officer in the first instance using the contact details above.
Complaints
If you consider that your personal data has been misused or mishandled, you may make a complaint to the Information Commissioner, who is an independent UK regulator. The Information Commissioner can be contacted at:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow, Cheshire
SK9 5AF
Any complaint to the Information Commissioner is without prejudice to your right to seek redress through the courts.
Updates to this Notice
If this privacy notice changes in any way, we will place an updated version on this page. Regularly reviewing this page ensures you are always aware of what information we collect, how we use it, and under what circumstances we will share it with other parties. The 'last updated' date at the top of this page will also change. If these changes affect how your personal data is processed, we will take reasonable steps to let you know.