UK Maritime Innovation Hub privacy notice
Updated 3 June 2026
1. Introduction
This privacy notice explains how the Maritime and Coastguard Agency (MCA) collects, uses, stores, and shares your personal information when you engage with the UK Maritime Innovation Hub (“the Innovation Hub”). It should be read alongside the MCA Personal Information Charter, which explains your rights and how we handle personal data more broadly within the agency.
The Innovation Hub provides a central point of contact for innovators, researchers, industry, and other stakeholders seeking early engagement on emerging maritime technologies or regulatory considerations.
2. Data Controller
The Maritime and Coastguard Agency, an executive agency of the Department for Transport (DfT), is the data controller for personal information processed through the Innovation Hub.
Data Protection Manager
Bay 3/10
Maritime and Coastguard Agency
Spring Place
105 Commercial Road
Southampton
SO15 1EG
Email: dataprotectionmanager@mcga.gov.uk
3. What personal data we collect
Depending on the nature of your engagement, the Innovation Hub may collect:
- name, job title, organisation
- contact details (email, phone, address)
- information provided in enquiries, proposals or supporting documents
- notes of discussions, meeting records and follow‑up actions
- correspondence between you and the MCA
- optional information you choose to share (for example, newsletters sign‑up, project updates)
4. Special category data
The Innovation Hub does not routinely request special category data. If, in exceptional circumstances, such data is provided (for example, accessibility‑related information for meetings), it will be handled securely and only where strictly necessary.
5. Why we collect your data (purpose of processing)
We process your information to:
- manage and respond to enquiries received by the Innovation Hub
- understand emerging maritime technologies and proposals
- facilitate early, light‑touch regulatory discussions
- arrange meetings, record discussions and coordinate follow‑up actions
- provide updates, signposting or relevant communications
- support MCA functions, including research, policy development, and regulatory awareness
These activities help the MCA fulfil its responsibilities as a UK maritime regulator, consistent with other MCA service‑specific notices.
6. Legal basis for processing
We rely on the following lawful bases under the UK GDPR:
- public task – processing is necessary for performing the MCA’s statutory functions
- legal obligation – where required under UK legislation
- consent – only for optional activities (for example, mailing lists or updates you choose to receive)
Where special category data is processed, this will be under the relevant UK GDPR conditions (for example, substantial public interest).
7. How Your Data Is Stored
Your information is stored securely within MCA systems, including Microsoft 365 environments, in line with departmental security standards. Access is restricted to staff who require it to carry out their duties.
8. Who we share your information with
Your information may be shared with:
- relevant MCA teams, technical experts or policy leads
- other government departments or public bodies where necessary to support regulatory or statutory functions, consistent with MCA practice in other
- external organisations only where required to meet regulatory obligations or if you have explicitly agreed
We do not share your data for commercial purposes or endorsement of products or services.
9. International transfers
We do not routinely transfer personal data outside the UK. If international transfers occur through MCA‑approved digital services (for example, Microsoft platforms), they will be subject to appropriate UK data‑protection safeguards.
10. Your rights
Under the UK GDPR, you have the right to:
- be informed about how your data is used
- access your personal information
- request correction of inaccurate data
- request deletion (where applicable)
- restrict or object to certain types of processing
- complain to the Information Commissioner’s Office (ICO)
Full details of your rights are outlined in the MCA Personal Information Charter.
11. Data retention
We retain your personal data only for as long as needed to support the purpose of your engagement with the Innovation Hub. Retention follows MCA and Department for Transport record‑keeping policies.
12. Automated decision‑making
No automated decision‑making or profiling is used as part of the Innovation Hub’s activities.
13. How to contact us
For questions about this notice or how your data is handled:
Data Protection Manager
Bay 3/10
Maritime and Coastguard Agency
Spring Place
105 Commercial Road
Southampton
SO15 1EG
Email: dataprotectionmanager@mcga.gov.uk
14. Updates to this notice
This notice may be updated periodically to reflect changes to Innovation Hub activities or MCA data‑processing practices. The latest version will be published on GOV.UK alongside other MCA privacy notices.