Building Digital UK Evaluations Privacy Notice
Published 5 July 2024
Building Digital UK (BDUK), part of the Department for Science, Innovation and Technology (DSIT), commissions surveys with households as part of its evaluations of government broadband programmes. We publish findings from these evaluations on GOV.UK.
All information submitted through these surveys will be treated in accordance with data protection principles.
The following Privacy Notice is to explain your rights and give you the information you are entitled to under the Data Protection Act 2018 and the General Data Protection Regulation (the Data Protection Legislation). This notice only refers to your personal data (e.g. your name, email address, and anything that could be used to identify you personally) not the content of your response to the survey.
For the purposes of this processing, BDUK and Ipsos UK are joint data controllers.
The privacy notice for Ipsos UK can be found here.
Your data
What is personal data?
Personal data is any information relating to an identified or identifiable natural living person, otherwise known as a ‘data subject’. A data subject is someone who can be recognised, directly or indirectly, by information such as a name, an identification number, location data, an online identifier, or data relating to their physical, physiological, genetic, mental, economic, cultural, or social identity. These types of identifying information are known as ‘personal data’. Data protection law applies to the processing of personal data, including its collection, use and storage.
Why are we collecting your personal data?
We commission Ipsos UK to conduct surveys with households. Ipsos UK are conducting surveys on behalf of BDUK to better understand the impact of broadband programmes on members of the public. Some personal data (e.g. email addresses) is collected for the purpose of sending incentive payments.
What data do we collect / process?
Ipsos UK collect the following personal data:
- Email address
- Demographic information e.g. age and gender.
We share the following data with Ipsos:
- Postcode (not linked to your name or any other personal details).
Ipsos share the following data with us:
-
Pseudo-anonymised individual level survey data (including demographic data). The results we receive from Ipsos UK will not be identifiable in any way.
-
Fully anonymised and aggregated findings in a written report.
What is the legal basis for processing your data?
As a government department, the department may process personal data as necessary for the effective performance of a task carried out in the public interest.
What do we do with your data?
BDUK will publish reports using anonymised and aggregated findings as part of the programme evaluations on GOV.UK. These reports will contain no personally identifiable information.
BDUK may also conduct additional analysis on the pseudo-anonymised individual level data to further improve our understanding of the impact of broadband programmes.
How will we store your data?
Your data will be stored on secure DSIT IT systems with controlled and limited access. Where data is transferred between Ipsos UK and BDUK, this uses secure sharing systems which can only be accessed by Ipsos UK and BDUK staff.
How long will we keep your data?
We will only retain your personal data for as long as required for the purposes of the evaluation. This will be two years after the evaluation has completed, i.e. in 2028.
Your rights
The data we are collecting is your personal data, and you have considerable say over what happens to it. You have the right to request:
- information about how your personal data are processed
- a copy of the personal data you submitted in an accessible format
- that anything inaccurate in your personal data is corrected immediately
- that any incomplete personal data are completed, including by means of a supplementary statement
- that your personal data are erased if there is no longer a justification for them to be processed
- in certain circumstances (for example, where accuracy is contested) that the processing of your personal data is restricted
If you would like to exercise any of these rights, please contact BDUK’s Data Protection Lead via dataprotection@bduk.gov.uk
You can also:
- lodge a complaint with the independent Information Commissioner (ICO) if you think we are not handling your data fairly or in accordance with the law
You can contact the ICO online, by telephone on 0303 123 1113 or by writing to them at ICO, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
Changes to this notice
We may modify or amend this privacy notice at our discretion at any time. When we make changes to this notice, the last modified date at the top of this page will be updated. Any modification or amendment to this privacy notice will be applied to you and your data as of that revision date. If these changes affect how your personal data is processed, DSIT will take reasonable steps to make sure you know.
How to contact us
Contact our Data Protection Officer (DPO) with any concerns about how we or our services handle your personal information:
DSIT Data Protection Officer
Department for Science, Innovation and Technology
22-26 Whitehall
London
SW1A 2EG