Privacy notice
This privacy notice explains your rights and how we use your personal data.
This notice is made under Articles 13 and 14 of the UK General Data Protection Regulation (UK GDPR). For the purpose of this legislation, the Department for Science, Innovation and Technology (DSIT) is the data controller for the Data Marketplace. A data controller determines how and why personal data is processed.
When we refer to ‘we’, ‘us’ or ‘our’ in this notice, we mean DSIT. We’re committed to protecting the privacy of your personal information.
If you have any questions or concerns, contact us by emailing dataprotection@dsit.gov.uk.
What data we collect
When you create a Data Marketplace account, we ask you to provide your:
- full name
- work email address
- organisation
- primary skill
These details are added to your account profile. They help us deliver the service.
If you contact us using the Data Marketplace support form, we ask for your:
- full name
- work email address
While you’re visiting the Data Marketplace, we may use cookies and page tagging to collect information about how you use the website.
If you give your consent, we also use Google Analytics cookies, which includes IP addresses.
Google Analytics processes information about:
- the pages you visit on the Data Marketplace
- how long you spend on each page
- how you got to the website
- what you click on while you’re on the website
Read more about our use of cookies on the Data Marketplace.
Why we need your data
We need to process some personal data to help you get the most out of the service.
For example, we collect contact details so that organisations can submit data requests and set up data sharing arrangements.
Our legal basis for processing your personal data
The legal basis for us to process your personal data is you giving us your consent.
This applies to the personal data you provide when you create a Data Marketplace account, and if you give your consent for data to be collected by cookies, including Google Analytics.
How long we keep your data
We will only keep your personal data for as long as:
- the law requires us to
- we need to for the purposes explained above
This means we will only hold your personal data for a minimum of 1 year and a maximum of 7 years.
In some circumstances we may anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes. In these cases, we may use this information indefinitely without giving you further notice.
Where your data is processed and stored
We design, build and run our systems to make sure your data is as safe as possible at any stage – both while it is processed and when it is stored.
If your personal data is transferred outside the United Kingdom, we will make sure you are given the same level of technical and legal protection as you are within the United Kingdom.
How we protect your data and keep it secure
We’re committed to doing all that we can to keep your data secure. We’ve set up systems and processes to prevent unauthorised access or disclosure of your data.
For example, we protect your data using varying levels of encryption. We also make sure that when we deal with third parties, all the personal data that they process on our behalf is kept secure.
Your rights
You have the right to request:
- information about how your personal data is processed
- a copy of that personal data
- that anything inaccurate in your personal data is corrected without undue delay
You can also:
- raise an objection to how your personal data is processed
- request that your personal data is erased if there is no longer a justification for it
- ask that the processing of your personal data is restricted in certain circumstances
If your personal data is processed on the basis of consent, you have the right to:
- withdraw consent to the processing of your personal data at any time
- request a copy of your personal data
If you would like to make any of these requests, contact us by emailing dataprotection@dsit.gov.uk.
Find out more about your privacy rights.
Updates to this page
If we make changes to our privacy policy, including changes that affect how we process your personal data, we’ll update this page.
We encourage you to review this page regularly so that you’re aware of what information we collect, how we use it, and under what circumstances we will share it with other parties.
Last updated: 5 December 2024