Privacy Notice - Regulated Professions Register
The Department for Business and Trade (DBT) is committed to protecting the privacy and security of your data. This notice describes how we collect and use your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
It is important that you read this privacy notice so that you are aware of how and why we are using your data.
What personal data we process
We will process the following personal data: name, email address, password.
Why we need process personal data
The purpose for which we process your personal data is to facilitate your log-in access to the register of regulated professions in order that you can manage content on behalf of the regulatory body you represent.
Lawful basis of processing
The lawful basis for processing your personal data is that the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller.
How we share your personal data
Your personal data will be shared with our processor, CGI, whom we have contracted to maintain and enhance the service.
In addition, an aggregated analysis of data collected may be shared with the Information Commissioner's Office (ICO) the Government Internal Audit Agency (GIAA), and the National Audit Office (NAO) for audit purposes.
We will also share your data if we are required to do so by law or regulation, for example by court order, or to prevent fraud or other crime.
We will not sell or rent your data to third parties.
How long we keep your personal data
We will only retain your data for as long as it is required to fulfil the purpose for which we collected it. We will review your data periodically to confirm it is up to date and still required.
Your data subject rights
You have the following data subject rights in respect of the processing outlined in this privacy notice:
- You have the right to request information about how your personal data are processed, and to request a copy of that personal data.
- You have the right to request that any inaccuracies in your personal data are rectified without delay.
- You have the right to request that any incomplete personal data are completed, including by means of a supplementary statement.
- You have the right to request that your personal data are erased if there is no longer a justification for them to be processed.
- You have the right in certain circumstances (for example, where accuracy is contested) to request that the processing of your personal data is restricted.
- You have the right to object to the processing of your personal data.
To exercise any of these rights, you can contact us using the details below.
Contacting us
If you have any questions about this privacy notice or how we handle your data, or to exercise your data subject rights, you can also write to us at: data.protection@trade.gov.uk
Contacting the Information Commissioner's Office
If you consider that your personal data has been misused or mishandled, you may make a complaint to the Information Commissioner, who is an UK independent regulator. The Information Commissioner can be contacted at:
Information Commissioner's Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF 0303 123 1113 casework@ico.org.uk
Changes to this privacy notice
We reserve the right to update this privacy notice at any time and we will provide you with a new privacy notice if we make any substantial updates.
The Department for Business and Trade is registered as a Data Controller under the UK GDPR and Data Protection Act 2018.
Last updated: 01 June 2023