The ICO exists to empower you through information.

On this page

Purpose and lawful basis for processing

Our purpose for processing your personal data is so we can register you on the pledge.

The lawful basis we rely on to process your personal data is article 6(1)(e) of the UK GDPR, which allows us to process personal data when this is necessary to perform our public tasks as a regulator.

What we need

We’ll need your name and email address and the name of your organisation. 

What we do with it

We’ll use your email address to send you the pledge banner, which can be used on your website and social media sites. We’ll use your name and the name of your organisation on our website to promote your commitment to good data protection practices 

How long we keep it

For information about how long we hold personal data, see our retention schedule.

What are your rights?

We process personal data in pledges in our capacity as a regulator, so you have a right to object to our processing of your personal data. There are some legitimate reasons why we may refuse your objection, which depend on why we are processing it.

For more information on your rights, please see ‘Your rights as an individual’ in the list on the left under the ‘General information’ header.

Do we use any data processors?