Privacy notice

GOV.UK (or www.gov.uk) is provided by the Government Digital Service (GDS), part of the Cabinet Office.

Cabinet Office is the data controller for pages starting with www.gov.uk - for example, www.gov.uk/pip.

If you follow a link to a service provided by another government department, agency or local authority, that organisation will:

Example

If you make a claim for Universal Credit www.universal-credit.service.gov.uk, the Department for Work and Pensions will be the responsible controller. The service’s own privacy notice will apply.

A data controller determines how and why personal data is processed. For more information, read the Cabinet Office’s entry in the Data Protection Public Register.

What data we collect

The personal data we collect from you includes:

We use Google Analytics software to collect information about how you use GOV.UK. This includes IP addresses. The data is anonymised before being used for analytics processing.

Google Analytics processes anonymised information about:

We do not store your personal information through Google Analytics (for example your name or address).

We will not identify you through analytics information, and we will not combine analytics information with other data sets in a way that would identify who you are.

We continuously test and monitor our data protection controls to make sure they’re effective and to detect any weaknesses.

Why we need your data

We collect information through Google Analytics to see how you use the site and government digital services. We do this to help:

We also collect data in order to:

The legal basis for processing personal data in relation to site security is our legitimate interests, and the legitimate interests of our users, in ensuring the security and integrity of GOV.UK.

The legal basis for processing anonymised data for Google Analytics is your consent.

The legal basis for processing all other personal data is that it’s necessary:

What we do with your data

The data we collect may be shared with other government departments, agencies and public bodies. It may also be shared with our technology suppliers, for example our hosting provider.

We will not:

We will share your data if we are required to do so by law - for example, by court order, or to prevent fraud or other crime.

How long we keep your data

We will only retain your personal data for as long as:

We will keep your email data until you unsubscribe. We will keep your feedback data for 2 years. We will delete access log data after 120 days.

Children’s privacy protection

Our services are not designed for, or intentionally targeted at, children 13 years of age or younger. We do not intentionally collect or maintain data about anyone under the age of 13.

Where your data is processed and stored

We design, build and run our systems to make sure that your data is as safe as possible at all stages, both while it’s processed and when it’s stored.

All personal data is stored in the European Economic Area (EEA). Data collected by Google Analytics may be transferred outside the EEA for processing.

How we protect your data and keep it secure

We are committed to doing all that we can to keep your data secure. We have set up systems and processes to prevent unauthorised access or disclosure of your data - for example, we protect your data using varying levels of encryption.

We also make sure that any third parties that we deal with keep all personal data they process on our behalf secure.

Your rights

You have the right to request:

You can also:

If you have any of these requests, get in contact with our Privacy Team.

GOV.UK contains links to other websites.

This privacy notice only applies to GOV.UK, and does not cover other government services and transactions that we link to. These services, such as Universal Credit, have their own terms and conditions and privacy policies.

If you go to another website from this one, read the privacy policy on that website to find out what it does with your information.

If you come to GOV.UK from another website, we may receive personal information from the other website. You should read the privacy policy of the website you came from to find out more about this.

Contact us or make a complaint

Contact the Privacy Team if you:

Privacy Team
gds-privacy-office@digital.cabinet-office.gov.uk

You can also contact our Data Protection Officer (DPO):

Data Protection Officer
DPO@cabinetoffice.gov.uk
Cabinet Office
70 Whitehall
London
SW1A 2AS

The DPO provides independent advice and monitoring of our use of personal information.

You can also make a complaint to the Information Commissioner, who is an independent regulator.

casework@ico.org.uk
Telephone: 0303 123 1113
Textphone: 01625 545860
Monday to Friday, 9am to 4:30pm
Find out about call charges

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF

Changes to this policy

We may change this privacy policy. In that case, the ‘last updated’ date at the bottom of this page will also change. Any changes to this privacy policy will apply to you and your data immediately.

If these changes affect how your personal data is processed, GDS will take reasonable steps to let you know.

Last updated 31 October 2019