Back

Privacy notice

The Data Marketplace enables government organisations to share data.

For the purpose of applicable data protection legislation, the Cabinet Office is the data controller for the Data Marketplace. A data controller determines how and why personal data is processed. For more information, read the Cabinet Office’s entry in the Data Protection Public Register (opens in new tab).

The Cabinet Office is committed to protecting the privacy of your personal information. This privacy notice explains how we use your personal data. When we refer to ‘we’, ‘us’ or ‘our’ in this notice, we mean the Cabinet Office.

Any changes to this privacy notice will be communicated here and, unless stated otherwise, will take effect immediately once published. If these changes affect how your personal data is processed, the Cabinet Office will take reasonable steps to make you aware of this.

If you have any questions or concerns, you can contact us by emailing DPO@cabinetoffice.gov.uk.

Alternatively, you can write to:

Steve Jones – Data Protection Officer
Cabinet Office
70 Whitehall
London
SW1A 2AS

Why we need your data

To get the most out of the Data Marketplace, we need to process some personal data. This is in order to manage and coordinate the service and enable acquirers and suppliers of data assets to contact each other to set up data sharing arrangements.

What data we collect from you

When you sign in to the Data Marketplace for the first time, we ask you to provide your:

full name
work email address
organisation
primary skill

This enables an account to be created for you so you can get the most out of the service.

If you contact us using the Data Marketplace support form, we ask for your:

full name
work email address

When you use the Data Marketplace, we may collect information about how you use the site, using cookies and page tagging techniques. If you give your consent, we also use Google Analytics (opens in new tab) cookies, which includes IP addresses.

Google Analytics processes information about:

the pages you visit on the Data Marketplace
how long you spend on each page
how you got to the website
what you click on while you’re on the website

Our legal basis for processing your personal data

The legal basis for us to process your personal data is you giving us your consent.

This applies to the personal data you provide when you create a Data Marketplace account, and if you give your consent for data to be collected by cookies, including Google Analytics.

How long we keep your data

We will only keep your personal data for as long as:

the law requires us to
we need to for the purposes explained above

This means we will only hold your personal data for a minimum of 1 year and a maximum of 7 years.

In some circumstances we may anonymise your personal data (so that it can no longer be associated with you), or receive anonymised personal data for research or statistical purposes, in which case we may use this information indefinitely without giving further notice to you.

Where your data is processed and stored

We design, build and run our systems to make sure that your data is as safe as possible at any stage, both while it is processed and when it is stored.

If your personal data is transferred outside the United Kingdom, we’ll make sure you’re given the same level of technical and legal protection as you are within the United Kingdom.

How we protect your data and keep it secure

We are committed to doing all that we can to keep your data secure. We have set up systems and processes to prevent unauthorised access or disclosure of your data – for example, we protect your data using varying levels of encryption.

We also make sure that any third parties that we deal with keep all personal data that they process on our behalf secure.

Your rights

You have the right to request:

information about how your personal data is processed
a copy of that personal data
that anything inaccurate in your personal data is corrected without undue delay

You can also:

raise an objection about how your personal data is processed
request that your personal data is erased if there is no longer a justification for it
ask that the processing of your personal data is restricted in certain circumstances

If your personal data is processed on the basis of consent, you have the right to:

withdraw consent to the processing of your personal data at any time
request a copy of your personal data

If you would like to make any of these requests, please contact us using the details above.

Find out more about your privacy rights (opens in new tab)

Last updated 25 April 2024

Cookies on the Data Marketplace