Privacy notice
The purpose of this notice
This privacy notice explains how the Department for Business and Trade (DBT), as a 'data controller', processes personal data for the 'Find business regulations and guidance' service on GOV.UK.
This notice is supplemented by our main privacy notice which provides further information on how DBT processes personal data, and sets out your rights in respect of that personal data.
Personal data that we collect
We collect:
- your Internet Protocol (IP) address, and details of which web browser you use
- information on how you use the site, using cookies and page tagging techniques
- your name, email address and comments if you leave us feedback
Our cookies policy explains what cookies we collect, why we collect these and how long these remain on your device.
Why we collect this data
We use this information to:
- understand how people are using this service
- make improvements to the performance and design of this service
- respond to your feedback, if this is necessary
- monitor the use of this service to identify security threats
Our legal basis for processing your data
You are providing consent for DBT to use your data. The legal basis for collecting this data is that it is necessary:
- to perform a task in the public interest
- in the exercise of our functions as a government department
How we process and share your information
We use the following third-party processors to operate the service:
- Amazon Web Services - DBT's contracted cloud-hosting service provider
- Government Digital Service - provides the GOV.UK Notify service, used for confirmation and reminder emails
We will not:
- sell or rent your data to third parties
- share your data with third parties for their marketing purposes
We will also share your data if we are required to do so by law or regulation - for example, by court order, or to prevent fraud or other crime.
How long we keep your personal data
We will only retain your personal data for as long as it is needed for the purposes set out in this document or for as long as the law requires us to.
We will:
- keep your feedback data for 2 years
- delete access log data which contain your IP address after 120 days
Your rights
You have the right to request:
- information about how your personal data is processed
- a copy of any personal data we hold about you
- that any inaccuracies in your personal data are corrected immediately
You can also:
- raise an objection about how your personal data is processed
- request that your personal data is erased if there is no longer a justification for it
- ask that the processing of your personal data is restricted in certain circumstances
Contacting us
You can contact DBT's Data Protection Officer for further information about how your data has been processed by the department or to make a complaint about how your data has been used. Please contact: data.protection@businessandtrade.gov.uk
DBT's Data Protection Officer
DBT's Data Protection Officer (DPO) is responsible for independent advice and monitoring of DBT's use of personal information.
Contact the DPO with any concerns about how DBT handles your personal information.
Data Protection Officer
Department for Business and Trade
Old Admiralty Building
Whitehall
LONDON
SW1A 2DY
Email: data.protection@businessandtrade.gov.uk
Information Commissioner's Office
Contact the Information Commissioner for independent advice about data protection, privacy and data-sharing issues.
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Website: Information Commissioner's Office (ICO)
Telephone: 0303 123 1113
You can find out more about your rights as a data subject, and details of how to contact our Data Protection Officer and the ICO in our main privacy notice