On this page
- Purpose and lawful basis for processing
- What we need
- What we do with it
- How long we keep it
- What are your rights?
- Do we use any data processors?
Our purpose for processing your personal data is so we can register you on the pledge.
The lawful basis we rely on to process your personal data is article 6(1)(e) of the UK GDPR, which allows us to process personal data when this is necessary to perform our public tasks as a regulator.
We’ll need your name and email address and the name of your organisation.
We’ll use your email address to send you the pledge banner, which can be used on your website and social media sites. We’ll use your name and the name of your organisation on our website to promote your commitment to good data protection practices
For information about how long we hold personal data, see our retention schedule.
We process personal data in pledges in our capacity as a regulator, so you have a right to object to our processing of your personal data. There are some legitimate reasons why we may refuse your objection, which depend on why we are processing it.
For more information on your rights, please see ‘Your rights as an individual’ in the list on the left under the ‘General information’ header.