Privacy Notice
Version 2.5, January 2021
We may need to handle personal information about you so that we can provide services for you. This privacy notice tells you how we look after that information. The United Kingdom Debt Management Office (UK DMO) is the data controller.
When we ask you for personal information, we will ensure it is:
- processed lawfully, fairly and safely in a transparent manner
- collected for specified, explicit and legitimate purposes
- adequate, relevant and limited to what is necessary
- accurate and, where necessary, kept up to date
- retained for only as long as necessary
- processed in an appropriate manner to maintain security
Personal data means any information about an individual from which that person can be identified. There are “special categories” of more sensitive personal data which require a higher level of protection; however, we do not collect special category data.
The kind of information we hold about you
We collect, store and use the following categories of personal data:
- name, title
- personal and business contact details such as telephone numbers, addresses and email addresses
- signature
- your image captured on CCTV (if you visit our offices)
Why we collect your data and what we do with it
Your personal data is being collected as an essential part of the service we provide, so that we can contact you regarding your response and for statistical purposes. We may also use it to contact you about related matters. We will not use your personal information for marketing purposes or make it available to any other organisation for that purpose.
If we do not have access to your data it may not be possible for us to provide the services to you which you would reasonably expect from us.
The data we collect may be shared with relevant staff in other government departments, agencies and public bodies.
We may be required by law to share your data with financial services regulators to assist with their investigations or initiatives and with police, law enforcement and security services for the prevention of crime and the protection of national security.
We do not disclose personal data to anyone else except as set out above.
Your personal data will be maintained in secured government IT systems here in the UK. From time to time it may be necessary for personal data to be sent overseas to ensure our systems are working appropriately. Your data will only be transferred overseas temporarily and only where equivalent safeguards are in place and when absolutely necessary.
Your personal data are not used for any automated decision making.
Your personal data are used for one or more of the following:
- Transactions related to the PWLB lending facility, Debt Management Account Deposit Facility (DMADF) and Commissioners’ for the Reduction of the National Debt (CRND).
- Gilt or cash management activities where you represent a Gilt-Edged Market Maker (GEMM) or other counterparty.
- Freedom of Information Act requests, Media, and other enquiries.
- To ensure a safe and crime-free working environment.
How long we keep your personal data
The duration for which we keep your data will differ depending on the type of information and the reason why we collected it from you. In some cases personal information may be retained on a long term basis.
- PWLB lending facility: data provided for authorisation purposes are held until superseded by a new instruction and data relating to a loan application are held for six years after the loan maturity date.
- DMADF: data provided for authorisation purposes are held until superseded by a new instruction and data relating to a deposit application are held for six years after the deposit maturity date.
- CRND: data provided for authorisation purposes are held until superseded by a new instruction and data relating to an investment are held for six years after the investment date.
- Voice recording records are kept for five years and then destroyed. Phone calls are recorded for dealing (cash, gilts and fund management), local authority lending such as the PWLB lending facility and settlements.
- Operational records of the dealing desk, other than voice recordings, are kept for no more than 6 years and then destroyed.
Lawful basis
Our lawful bases for processing personal data is that processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
It is important that we keep your information accurate and up-to-date and so in return, we ask you to:
- give us accurate information
- tell us as soon as possible if there are any changes, such as new contact details
Your rights
The data we are collecting is your personal data, and you have certain rights about what happens to it. You have the right:
- to see what data we have about you
- to ask us to stop using your data, but keep it on record
- to have all or some of your data corrected if it is inaccurate or incomplete
- to lodge a complaint with the independent Information Commissioner (ICO) if you think we are not handling your data fairly or in accordance with the law.
You can get more details from us on:
- how to find out what information we hold about you and how to ask us to correct any mistakes
- agreements we have with other organisations for sharing information
- circumstances where we can pass on your personal information without telling you (e.g. to prevent and detect crime or to produce anonymised statistics)
- our instructions to staff on how to collect, use and delete your personal information
- how we check the information we hold is accurate and up to date
- how to make a complaint
- For more information or to request access to your personal data please contact:
The Data Protection Officer dataprotection@dmo.gov.uk
or
Information Assurance RecordsManagementService@dmo.gov.uk
UK Debt Management Office
Eastcheap Court
11 Philpot Lane
London EC3M 8UD
Please visit our Terms of Use page for information on our Cookies Policy.
When we ask you for information, all applicable provisions of the law, including the EU General Data Protection Regulation (EU GDPR), the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018) will be applied at all times. For independent advice about data protection, privacy and data sharing issues or to lodge a complaint, please contact the Information Commissioner at:
ICO Telephone: 03030 123 1113 or 01625 54 57 45
Wycliffe House, Website: www.ico.org.uk
Water Lane
Wilmslow
Cheshire
SK9 5AF
Changes to this privacy notice
We keep our privacy notice under regular review. This privacy notice was last reviewed on 6 January 2021.