GOV.UK
Privacy Notice for DfE Sign-in v0.1
This privacy notice explains how we collect and use your personal information for DfE Sign-in service. DfE Sign-in is run by the Department for Education (DfE).
For the purposes of relevant data protection legislation, the Department for Education (DfE) is the data controller for personal information processed for this research.
How we use your personal information
DfE collects your personal information when you use DfE Sign-in. We use the data to allow you access to DfE online services
We collect and use the following personal information only where we need to and law permits:
- Your first name and last name
- The email address you provide
- The organisation details the account is linked to
How long we hold personal information
We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. DfE Sign-in will only keep personal data for up to 6 years from the date on which an individual deactivates / deletes their account.
Who we share your personal information with
We may share your information where the law allows, or where we have a legal obligation to do so.
What is the legal basis for collecting and processing the data
In order for the use of personal data to be lawful, we need to meet one (or more) conditions in the data protection legislation, as set out in Article 6(1) of the General Data Protection Regulation (GDPR). For the purpose of DfE Sign-in, the relevant condition that we are meeting is ‘public task’ as specified under Article 6 (1)(e) of the GDPR. The legislation to support this is Section 8 of the Data Protection Act 2018 – exercising official authority as part of public body tasks and Department for Education functions.
Your data protection rights
Under data protection law, you have certain rights depending on our reason for processing your personal information.
- Your right of access: You have the right to ask us for copies of your personal information. Read more here .
- to have your personal data rectified, if it is inaccurate or incomplete
- to request the deletion or removal of personal data where there is no compelling reason for its continued processing
- to restrict our processing of your personal data (i.e. permitting its storage but no further processing)
If you need to contact us regarding any of the above, please do so via the DfE site at: https://www.gov.uk/contact-dfe .
More information about how the DfE handles personal information is published here:
Further information about your data protection rights appears on the Information Commissioner’s website at: https://ico.org.uk/for-organisations/guide-to-data-protection/principle-6-rights/ .
How to complain
Contact us using our secure online contact form or by writing to:
Ministerial and Public Communications Division
Department for Education
Piccadilly Gate
Store Street
Manchester
M1 2WD
If you wish to contact the DfE’s data protection officer, please use the secure online form or write
to the address above.
You also have the right to lodge a complaint about data protection with the
Information Commissioner’s Office (ICO).
For more information, visit the ICO website.