The UK’s independent authority set up to uphold information rights in the public interest, promoting openness by public bodies and data privacy for individuals.

View our 'what we do with your personal data when you...' infographic for a basic overview of the below information.

Contents 

Purpose and lawful basis for processing

Our purpose for collecting your contact details is so we can provide you with a service and let you know about the ICO’s work, guidance and events.

We collect analytics information so we can provide a personalised service, monitor the impact of our work and improve the newsletter.

The lawful basis we rely on for processing your contact details is your consent under article 6(1)(a) of the UK GDPR.

The lawful basis we rely on for the processing of analytics information is article 6(1)(e) – public task.

What we need

Your email address. You can also provide your name but this is optional.

We also collect records of the links you click in the newsletter (analytics).

Why we need it

We use your email address to send you our e-newsletter and your name, if provided, to personalise the newsletter you receive.

We collect records of the links you click using encoded URL strings. Encoded URL strings do not use technology (e.g. localstorage, cookies etc) to store or access data on your device. We collect this information to evaluate the impact of our work and to help us improve the content of our newsletter.

We may also use these records to send you content tailored to your sector or areas of interest. For example, if you click on a link about Artificial Intelligence – we may send you more frequent newsletters about our technology work.

What we do with it

We only use your details to provide the service, monitor the impact of our work and improve the newsletter.

You will receive a confirmation email once you have submitted your details. We send one monthly newsletter and then ad hoc newsletters when there is significant announcements or publications.

How long we keep it

For information about how long we hold personal data, see our retention schedule.

What are your rights?

We rely on your consent to process your contact details. This means you have the right to withdraw your consent, or to object to the processing of your personal data for this purpose at any time. If at any point you want to withdraw your consent please email or call us 0303 123 1113. If you do that, we’ll update our records immediately to reflect your wishes.

We rely on public task to process analytics data . This means you have the right to object to the processing of your personal data for this purpose at any time.

If you unsubscribe from receiving the newsletter we will still process your contact information and the analytics data. If want object to our processing of this information please submit your request to accessicoinformation@ico.org.uk.

For more information on your rights, please see ‘Your rights as an individual’.

Do we use any data processors?

Yes – we use the Upland product Adestra to deliver the e-newsletter. For more information, please see Upland’s privacy notice.

Do we transfer data overseas?

Yes - subscriber data is hosted in Ireland and is only available to ICO staff and Adestra support staff who provide technical support based in UK or Poland .