Privacy notice relating to consultation responses received by DESNZ
Updated 28 August 2025
© Crown copyright 2025
This publication is licensed under the terms of the Open Government Licence v3.0 except where otherwise stated. To view this licence, visit nationalarchives.gov.uk/doc/open-government-licence/version/3 or write to the Information Policy Team, The National Archives, Kew, London TW9 4DU, or email: psi@nationalarchives.gov.uk.
Where we have identified any third party copyright information you will need to obtain permission from the copyright holders concerned.
This publication is available at https://www.gov.uk/government/publications/desnz-consultations-privacy-notice/privacy-notice-relating-to-consultation-responses-received-by-desnz
The Department for Energy Security and Net Zero (DESNZ) consults the public as part of its open policy making process. We publish our consultations on GOV.UK.
You can respond:
- by post
- by email
- online via the Consultation Hub
The way in which your data is handled varies depending on how you submit your response, but all information submitted to us will be treated in accordance with data protection principles.
This privacy notice sets out:
- how we process your personal data when you respond to our consultations
- the rights you have under the UK General Data Protection Regulation (UK GDPR).
For information you submit online via the Consultation Hub:
- the Department for Energy Security and Net Zero is the data controller
- Delib is the data processor
Delib provides and operates the platform for online responses. The Delib privacy policy explains how they collect, safeguard and process your data on behalf of DESNZ.
For information you submit by email or post:
- the Department for Energy Security and Net Zero is the data controller
Your data
We collect and process the following personal data:
- your name
- your email or postal address
- depending on the topic of the consultation, other personal data such as your postcode, employment status and demographic data
- any personal data you volunteer by way of evidence or example in your response to the consultation
If you respond online we will also collect:
- your Internet Protocol (IP) address, and details of which version of web browser you used
- information on how you used the site, provided by cookies and page tagging techniques
Purpose
We collect your personal data as part of the consultation process:
- so that we can contact you regarding your response or related matters
- for statistical data, for example the types of individuals and groups participating
- we collect your IP address to help us prevent duplicate or spam responses
If you respond online we use Google Analytics software to collect information about how you use the site. We do this to help make sure the site is meeting the needs of its users and to help us make improvements.
Google Analytics stores information about:
- the pages you visit
- how long you spend on each page
- how you got to the site
- what you click on while you’re visiting the site
Google Analytics does not collect or store your personal information (for example your name or address) so this information cannot be used to identify who you are. See our consultation hub cookie policy.
Legal basis for processing your personal data
The legal basis for processing your personal data under Article 6 of the UK GDPR is to perform a task carried out in the public interest, that of consulting the public.
Recipients
Your personal data may be shared with:
- our processor for the purposes of analysing the consultation responses on our behalf
- a contracted provider where they are appointed to undertake the evaluation of the consultation responses
- other organisations which have a direct interest in the policy on which we are consulting: for example Crown bodies, government departments or DESNZ partner organisations. If we plan to share responses with other bodies, we will make that clear on the consultation
We may use Artificial Intelligence (AI) in the analysis of consultation responses.
We will not:
- sell or rent your data to third parties
- share your data with third parties for marketing purposes
We will share your data if we are required to do so by law, for example by court order, or to prevent fraud or other crime.
As part of our IT infrastructure, your personal data will be stored in the UK on systems provided by our data processors - Microsoft and Amazon Web Services. This does not mean we actively share your personal data with these entities; rather, they are technical service providers who host infrastructure supporting our IT systems.
How long we keep your data
We will only retain your personal data for as long as:
- it is needed for the purposes of the consultation
- the law requires us to
In general, this means that we will only hold your personal data for a minimum of 1 year and a maximum of 7 years.
Children’s privacy protection
DESNZ consultations are not designed for, or targeted at, children aged 13 or less. It is not our policy to intentionally collect or maintain data about anyone aged 13 or less.
International transfers
Your personal data will be processed in the UK and the European Economic Area (EEA).
Where your personal data is processed in the EEA, safeguards will be provided through the UK Adequacy Arrangements.
Your rights
The data we are collecting is your personal data, and you have considerable say over what happens to it. You have the right to request:
- information about how your personal data are processed
- a copy of the personal data you submitted in an accessible format
- that anything inaccurate in your personal data is corrected immediately
- that any incomplete personal data are completed, including by means of a supplementary statement
- that your personal data are erased if there is no longer a justification for them to be processed
- in certain circumstances (for example, where accuracy is contested) that the processing of your personal data is restricted
You can also:
- object to the processing of your personal data where it is processed for direct marketing purposes
- lodge a complaint with the independent Information Commissioner (ICO) if you think we are not handling your data fairly or in accordance with the law
How to contact us
Department for Energy Security and Net Zero (DESNZ)
The data controller for your personal data is the Department for Energy Security and Net Zero (DESNZ).
Contact our Data Protection Officer (DPO) in the first instance with any concerns you have about how we or our services have handled your personal information.
Contact the DESNZ DPO:
DESNZ Data Protection Officer
Department for Energy Security and Net Zero
3-8 Whitehall Place
London
SW1A 2EG
Complaints and independent advice
If you consider that your personal data has been misused or mishandled, you may make a complaint to the Information Commissioner, who is an UK independent regulator.
You can also contact the Information Commissioner for independent advice about data protection, privacy and data-sharing issues.
Contact the Information Commissioner's Office (ICO):
If you make a complaint to the Information Commissioner it doesn’t prejudice your right to seek redress through the courts.
Changes to this notice
We may change this privacy notice at our discretion at any time. When we make changes to this notice, the last modified date at the top of this page will be updated. Any changes to this privacy notice will be applied to you and your data as of that revision date.
If these changes affect how your personal data is processed, we will take reasonable steps to let you know.