Skip to main content

Beta Help improve the content and publishing guidance. Give your feedback (opens in new tab).

Privacy notice: how we use your data

The GOV.UK content and publishing guidance includes guidance, information and standards about writing and publishing content on GOV.UK.

The GOV.UK content and publishing guidance is provided by the Government Digital Service (GDS), which is part of the Department for Science, Innovation and Technology (DSIT). The data controller for GDS is DSIT - a data controller determines how and why personal data can be processed.

Read DSIT’s entry in the Data Protection Public Register for more information.

Why we need your data

For a number of the activities that we undertake to complete our function, we need to process personal data.

This includes:

  • support, including both the provision of support and responses to user enquiries
  • feedback, including gathering it to improve our services, and responding to it, if you have asked us to
  • telling you about updates to the GOV.UK content and publishing guidance

What data we collect from you

We collect certain information and data about you when you use, get updates or work with us on the GOV.UK content and publishing guidance

We collect your:

  • name
  • business contact details
  • user profile on collaboration tools and platforms
  • IP address, web browser, version number, time zone and language settings

If you sign up to our mailing list, we’ll collect your:

  • name
  • email address and business contact details
  • organisation

The legal basis for processing this data:

  • it’s necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
  • consent - for example when you sign up to our mailing list

Performance analysis

We also carry out performance analysis to see how you use the GOV.UK content and publishing guidance and how well the site performs on your device during your visit – we do this to make sure it is meeting the needs of its users and improve it.

Where you provide consent, we collect the following information:

  • the pages you visit on the the site
  • how long you spend on each page
  • how you got to the site
  • what you click on while you’re visiting the site
  • the web browser and device you’re using to visit the site

The legal basis for performing web analytics is your consent. You will be asked for your consent when first landing on the page. If you do not give it, you will still be able to use the page. If you do give it and change your mind, you can update your cookie settings.

How long we keep your data

We will only keep your personal data for as long as:

  • the law requires us to
  • we need for the purposes listed above

If you have signed up to our mailing list, your email address will only be retained while you choose to remain on the list. You can unsubscribe at any point using the link in the email alert.

Where your data is processed and stored

We design, build and run our systems to make sure that your data is as safe as possible at any stage, both while it’s processed and when it’s stored.

Your personal data may be transferred outside the United Kingdom while being processed by GDS. If this happens, we’ll make sure you’re given the same level of technical and legal protection as you are within the United Kingdom.

Providers we use

As part of GOV.UK content and publishing guidance we share your personal data with data processors who provide us with:

  • software collaboration platforms when you share research, feedback or make a suggestion
  • mailing list providers when you sign up to receive emails from us
  • support providers when you contact us – see the user support privacy notice
  • web analytics services

We will not:

  • sell or rent your data to third parties
  • share your data with third parties for marketing purposes

We will share your data if we’re required to do so by law – for example, by court order, or to prevent fraud or other crime.

How we protect your data and keep it secure

We are committed to doing all that we can to keep your data secure. We set up systems and processes to prevent unauthorised access to or disclosure of the data we collect about you – for example, we protect your data using varying levels of encryption. All third parties that process personal data for GDS are required to keep that data secure.

Your rights

You have the right to request:

  • information about how your personal data is processed
  • a copy of that personal data
  • that anything inaccurate in your personal data is corrected without undue delay

You can also:

  • raise an objection about how your personal data is processed
  • request that your personal data is erased if there is no longer a justification for it
  • ask that the processing of your personal data is restricted in certain circumstances

If your personal data is processed on the basis of consent, you have the right to:

  • withdraw consent to the processing of your personal data at any time
  • request a copy of your personal data - this copy will be provided in a structured, commonly used and machine-readable format

Find out more information about your rights.

Questions and complaints

Contact the GDS Data Protection Team if you:

  • have any questions about anything in this document
  • think that your personal data has been misused or mishandled

gds.data.protection@dsit.gov.uk

The DSIT Data Protection Officer provides independent advice and monitoring of DSIT’s use of personal information.

The contact details for the DSIT Data Protection Officer are:

Data Protection Officer
Department for Science, Innovation and Technology
22–26 Whitehall
London
SW1A 2EG
dataprotection@dsit.gov.uk

If you have a complaint, you can also contact the Information Commissioner’s Office.

Information Commissioner’s Office
icocasework@ico.org.uk
0303 123 1113
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Changes to this notice

We may change this privacy notice. When we make changes to this notice, the ‘last updated’ date at the bottom of this page will also change. Any changes to this privacy notice will apply to you and your data immediately. If these changes affect how your personal data is processed, GDS will take reasonable steps to make sure you know.

Last updated: 2 February 2026 — see all updates.