Modern slavery statement registry: privacy information notice

This page explains how your personal information, supplied to the modern slavery statement registry, will be held and processed by the Home Office. The Home Office is the controller of this information. We are based at 2 Marsham Street, London SW1P 4DF.

What personal information we hold about you

If you create an account on our service, we will hold the following information about you:

• your personal details: your name, email address and job title
• whether you've signed up to be contacted for feedback purposes or to receive information on resources and guidance relating to modern slavery

In addition, if you register a public sector organisation on your account, or manually register any organisation (instead of selecting an organisation from our database), we will ask for and retain your telephone number.

What personal information we hold about others in your organisation

When you submit your organisation’s modern slavery statement to the registry, we will hold the name and job title of the director (or equivalent) who signed that statement.

If your organisation’s statement cannot be accessed via a link on your website, we will also ask for and retain a contact email address for your organisation. This is so that members of the public can request a copy of your statement.

Purpose

Section 54 of the Modern Slavery Act 2015 requires commercial organisations, that operate in the UK and have a turnover of £36m or more, to publish an annual modern slavery statement.

The modern slavery statement registry is currently a voluntary service that allows organistions to submit information about their modern slavery statements to GOV.UK so that the public can search and view them in one place.We use your personal data so we can identify and authorise you to set up and operate a user account on behalf of your organisation. As part the operation of your user account, we will use your email to contact you with a reminder to upload the most recent statement for your organisation.

We publish data about the individuals responsible for signing modern slavery statements within the registry on GOV.UK.

Legal basis of data processing

We hold and process your information to perform a public task in the public interest and in the exercise of official authority vested in the Home Office.

The modern slavery statement registry allows organisations to submit information about their modern slavery statements and publish this information on GOV.UK.

Section 54 of the Modern Slavery Act 2015 requires certain businesses to publish an annual modern slavery statement to outline what they’re doing to prevent modern slavery in their organisation and supply chains.

How long we keep your personal data

We will retain your data as long as we have an ongoing legitimate business need to do so, according to the following rules:

If you create an account but do not carry out any activities on behalf of an organisation, we will delete your details securely from the SQL database and related backups after 18 months of inactivity. We will notify you in advance, giving you 30 days to sign back into the registry should you wish to keep your account.

If you have registered and carried out activity on behalf of an organisation, we will retain your personal data in our database for a period of 5 years beyond your last activity. This is done as a duty of care to the organisations registered should they need to know who carried out an action.

Sharing your information

The name and job title of the director (or equivalent) who signed the modern slavery statement for your organisation will be published in the registry on GOV.UK.

If you register as a user on behalf of your organisation, your name will be available to view by other users who are registered to submit modern slavery statements for the same organisation. Your name will not be shared with any other users.

Your information will be shared with our mail and email service providers where this is needed to process your registration and with our hosting suppliers and third-party IT support companies for the purposes of managing the site.

There may be exceptional cases when your information can be shared for other reasons, for example to prevent crime, respond to legal obligations or cooperate with public inquiries.

No personal data will be processed outside the United Kingdom.

Where personal data has not been obtained from you

Personal data may be obtained from another person in your organisation if:

• you are the director (or equivalent) who signed your organisation’s modern slavery statement
• you are the person whose contact email address has been provided so that a member of the public can request a full copy of your organisation's statement should a website link not be available

Your rights

You have the right to request access to the personal information the Home Office holds about you. Details of how to make the request can be found at Home Office - GOV.UK (www.gov.uk).

You also have the right to object to and ask to restrict our use of your personal information, and to ask us to rectify or delete your personal information.

You can see and rectify the personal information we hold about you on the ‘manage account’ page, when you log in to your account on the registry.

You may also close your account with the registry, but we will retain details about your account in line with our data retention policies, subject to any request for erasure

Contact details

If you have any questions, or you're unhappy with the way we have handled your personal information, you can contact the registry service desk at modernslaverystatements@homeoffice.gov.uk

You can also contact the Home Office at:

Email: public.enquiries@homeoffice.gov.uk

The Home Office has a data protection officer who can be contacted at:

Email: dpo@homeoffice.gov.uk

More information about the ways in which the Home Office may use your personal information, including the purposes for which we use it, the legal basis, and who your information may be shared with can be found in the Home Office personal information charter: Personal information charter - Home Office - GOV.UK (www.gov.uk)

Complaints

If you consider that your personal data has been misused or mishandled, you can make a complaint to the Information Commissioner, who is an independent regulator.

Website: Information Commissioner’s Office