Personal information charter
Source: gov.uk (2025-11-18)

This information sets out the standards you can expect from the Department for Business and Trade (DBT) when we collect, hold or use your personal data.

The Department for Business and Trade (DBT) is the data controller for the personal data we describe in our privacy information. A data controller determines how and why personal data is processed. The majority of the personal data we process is in pursuance of our statutory functions as a government department, however we may also process your personal data:
- with your consent
- in order to fulfil a legal obligation
- for DBT’s defined legitimate interests
- in order to protect the vital interests of an individual(s)
- for the performance of a contract we have, or may, enter into with you
Your rights

When DBT collects, holds, uses or otherwise processes your personal data, you have a right to be told:
- what the data is being used for
- why we are legally able to process your data (also called the ‘lawful basis for processing’)
- how long we will keep your data
- who we will share it with
- whether it will be transferred or accessed outside the UK, and what legal protection it will have
- who our Data Protection Officer is
- about any rights you have, including the right to access your information or to object to its being used
- about your right to complain to the Information Commissioner if you feel that your personal information has been mishandled
You can also expect that your personal data will be:
- protected and kept secure
- kept accurate and up to date
- not used for purposes which are incompatible with those for which it was collected
- kept only for as long as it is needed for the purpose for which it was collected (unless it must be kept as part of the historic record)
DBT privacy notices

DBT publishes privacy information where we collect your personal data.

Privacy notices we publish include the following:
- clients of the Department for Business and Trade (DBT) (https://www.great.gov.uk/privacy-and-cookies/full-privacy-notice/)
- complaints (https://www.gov.uk/government/publications/complaints-privacy-notice-for-dbt)
- data subject rights (https://www.gov.uk/government/publications/data-subject-rights-privacy-notice)
- Employment Tribunal data research privacy notice (https://www.gov.uk/government/publications/employment-tribunal-data-research-privacy-notice)
- freedom of information (FOI), environmental information regulations (EIR) and correspondence requests (https://www.gov.uk/government/publications/foi-eir-and-correspondence-requests-privacy-notice)
- job applicants (https://www.gov.uk/government/publications/job-applicants-privacy-notice)
- national security vetting (https://www.gov.uk/government/publications/national-security-vetting-privacy-notice-for-dbt)
- public appointments (https://www.gov.uk/government/publications/public-appointments-privacy-notice)
- public consultations (https://www.gov.uk/government/publications/public-consultations-privacy-notice)
- selling online overseas (https://www.gov.uk/government/publications/fair-processing-notice-for-selling-online-overseas-service)
- UK National Contact Point (UK NCP) for the OECD’s guidelines for multinational enterprises (https://www.gov.uk/government/publications/fair-processing-notice-for-the-uk-national-contact-point-uk-ncp)
How to contact the Data Protection Officer (DPO)

The DPO:
- is responsible for providing independent advice
- monitors DBT’s use of personal data
- ensures that DBT’s use of personal data is in compliance with data protection law
Contact DBT:
- to exercise your rights as a data subject
- if you have any questions relating to how DBT handles your personal information
- if you have any concerns about how your personal data is used as part of a DBT service
Data Protection Officer

Department for Business and TradeOld Admiralty Building Admiralty PlaceLondonSW1A 2DY

Email xxx@xxx.xx (mailto:xxx@xxx.xx)

Independent advice on data protection and privacy

Contact the Information Commissioner for independent advice about data protection, privacy and data-sharing issues.

Information Commissioner’s Office

Wycliffe House Water Lane WilmslowCheshireSK9 5AF

Email xxx@xxx.xx (mailto:xxx@xxx.xx)

Telephone xx-xxxx-xxxx

Textphone xx-xxxx-xxxx

Monday to Friday 9am to 4:30pm