The Ministry of Justice (MoJ) is the data controller for pages starting with www.victimandwitnessinformation.org.uk for example, https://www.victimandwitnessinformation.org.uk/your-rights.
If you follow a link to a service provided by another government department, agency or local authority, that organisation will:
- be the data controller
- be responsible for processing any data you share with them
- publish and manage their own privacy notice with details of how to contact them
A data controller determines how and why personal data is processed. For more information, read the Cabinet Office’s entry in the Data Protection Public Register.
What data we collect
The personal data we collect from you includes:
- questions, queries, or feedback you leave, if you contact victimandwitnessinformation.org.uk
- your Internet Protocol (IP) address, and details of which version of web browser you used
- information on how you use the site, using cookies and page tagging techniques
Where you provide your consent, we use Google Analytics cookies to collect information about how you use victimandwitnessinformation.org.uk. This includes IP addresses.
Google Analytics processes information about:
- the pages you visit on victimandwitnessinformation.org.uk
- how long you spend on each victimandwitnessinformation.org.uk page
- how you got to the site
- what you click on while you’re visiting the site
We will not combine analytics information with other data sets in a way that would directly identify who you are.
Why we need your data
We collect your personal data to:
- gather feedback to improve our services
- respond to any feedback you send us if you’ve asked us to
- monitor use of the site to identify security threats
We use the information we collect through Google Analytics to see how you use victimandwitnessinformation.org.uk and to see how well the site performs on your device
We do this to help:
- make sure victimandwitnessinformation.org.uk is meeting the needs of its users
- make performance improvements, for example improving page load time and data usage
Our legal basis for processing your data
The legal basis for processing personal data in relation to site security is our legitimate interests, and the legitimate interests of our users, in ensuring the security and integrity of victimandwitnessinformation.org.uk.
The legal basis for processing data collected with Google Analytics on victimandwitnessinformation.org.uk is your consent.
The legal basis for processing all other personal data is that it’s necessary:
- to perform a task in the public interest
- in the exercise of our functions
What we do with your data
The data may be shared with other government departments, agencies or public bodies. It may be shared with our technology suppliers, for example our hosting provider.
We will share your data if we are required to do so by law – for example, by court order, or to prevent fraud or other crime.
The data we collect with Google Analytics cookies is transferred and stored with Google where we analyse it with Google Analytics software (Universal Analytics). We do not allow Google to use or share this data for their own purposes.
We will not:
- sell or rent your data to third parties
- share your data with third parties for marketing purposes
How long we keep your data
We will only retain your personal data for as long as it is needed for the purposes set out on this page or for as long as the law requires us to.
- keep your feedback data for 2 years
Where your data is processed and stored
We design, build and run our systems to make sure that your data is as safe as possible at all stages, both while it’s processed and when it’s stored.
All personal data is stored in the European Economic Area (EEA). Data collected by Google Analytics may be transferred outside the EEA for processing.
Where data processing happens in the US, suppliers need to meet the certification standards set out in the UK-US data bridge agreement. This facilitates flows of personal data to certified US companies that have opted in to the EU-US Data Privacy Framework.
How we protect your data and keep it secure
We will ensure that the personal data that we hold is subject to appropriate security measures which is in line with the MoJ’s security policy. Our staff receive data protection training, and we have a set of detailed data protection policies which they must follow when handling personal data.
You have the right to request:
- information about how your personal data is processed
- a copy of that personal data
- that anything inaccurate in your personal data is corrected immediately
You can also:
- raise an objection about how your personal data is processed
- request that your personal data is erased if there is no longer a justification for it
- ask that the processing of your personal data is restricted in certain circumstances
If you have any of these requests, get in contact with us.
Links to other websites
victimandwitnessinformation.org.uk contains links to other websites.
This privacy notice only applies to victimandwitnessinformation.org.uk and does not cover other services that we link to. These services have their own terms and conditions and privacy policies.
Following a link to another website
Following a link to victimandwitnessinformation.org.uk from another website
Contact us or make a complaint
Contact us if you:
- have a question about anything in this privacy notice
- think that your personal data has been misused or mishandled
You can contact us through:
You can also make a complaint to the Information Commissioner, who is an independent regulator.
Information Commissioner’s Office
Cheshire SK9 5AF
Changes to this policy
If these changes affect how your personal data is processed, victimandwitnessinformation.org.uk will take reasonable steps to let you know.
Last updated 4 December 2023