Skip to main content

Personal information charter - Department for Business, Innovation, Science and Trade

This information sets out the standards you can expect from the Department for Business, Innovation, Science and Trade (BIST) when we collect, hold or use your personal data.

The Department for Business, Innovation, Science and Trade (BIST) is the data controller for the personal data we describe in our privacy information. A data controller determines how and why personal data is processed.

The majority of the personal data we process is in pursuance of our statutory functions as a government department. However, we may also process your personal data: 

  • with your consent 
  • in order to fulfil a legal obligation 
  • for BIST’s defined legitimate interests 
  • in order to protect the vital interests of an individual (or individuals)
  • for the performance of a contract we have, or may, enter into with you

Your rights

When BIST collects, holds, uses or otherwise processes your personal data, you have a right to be told: 

  • what the data is being used for 
  • why we are legally able to process your data (also called the ‘lawful basis for processing’) 
  • how long we will keep your data 
  • who we will share it with 
  • whether it will be transferred or accessed outside the UK, and what legal protection it will have 
  • who our Data Protection Officer is 
  • about any rights you have, including the right to access your information or to object to its being used 
  • about your right to complain to the Information Commissioner if you feel that your personal information has been mishandled 

You can also expect that your personal data will be: 

  • protected and kept secure 
  • kept accurate and up to date 
  • not used for purposes which are incompatible with those for which it was collected 
  • kept only for as long as it is needed for the purpose for which it was collected (unless it must be kept as part of the historic record)

BIST privacy notices

BIST publishes privacy information where we collect your personal data. 

Privacy notices we publish include the following:

Right to request copies of your personal information

You can make a subject access request (SAR) for yourself, or on behalf of someone else, online. To do this you will need a letter of consent from the individual the request relates to or confirmation of power of attorney.

A subject access request should include a description of where your personal data may be held. This will help us to find your records. For example, tell us which part of BIST you have had dealings with, including any relevant reference numbers and dates. Be as specific as possible. 

Artificial intelligence (AI) can help with subject access request and complaint wording, but it can also introduce errors or create overly complex requests. If you do use AI to help you draft, make sure the final wording has been checked and reflects your actual information needs.

To make a subject access request, use our online subject rights form.

How to contact the Data Protection Officer (DPO) and BIST

The  DPO: 

  • is responsible for providing independent advice 
  • monitors BIST’s use of personal data 
  • ensures that BIST’s use of personal data is in compliance with data protection law 

Contact  BIST: 

  • to exercise your rights as a data subject 
  • if you have any questions relating to how BIST handles your personal information 
  • if you have any concerns about how your personal data is used as part of a BIST service

Data Protection Officer

Department for Business, Innovation, Science and Trade
Old Admiralty Building
Admiralty Place
London
SW1A 2DY

How to make a data protection-related complaint  

If you have a complaint about how your data has been handled, you can complete BIST’s short online data protection complaint form.

This allows us to investigate and resolve issues as quickly as possible. For more information, see our data protection complaints information page.

Independent advice on data protection and privacy 

Contact the Information Commissioner’s Office (ICO) for independent advice about data protection, privacy and data-sharing issues. 

Information Commissioner’s Office

Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Email casework@ico.org.uk

Telephone 0303 123 1113

Textphone 01625 545860

Lines are open from Monday to Friday 9am to 4:30pm.

You can make a complaint about how an organisation has used your personal information on the ICO website.

Contents