What data we process and why

We collect personal information provided directly from you in the following ways, when you:

• Visit our website
• Apply for a job
• Deal with us as a representative of an organisation that has a business relationship with us
• Visit our premises
• Have entered into a contract with us to supply goods and services
• Have contacted us with a general enquiry or complaint

Our legal basis for processing personal data

HMGCC processes personal data in full compliance with the Data Protection Act 2018 (as updated by the Data (Use & Access) Act 2025)

Visitors to our website

When you visit www.hmgcc.gov.uk we collect standard internet log information and details of visitor behaviour patterns. We do this to track web traffic to our site and collect this information in a way which does not identify anyone.

We collect certain information by automated means through the use of Cookies. Cookies are small text files placed on your computer by websites that you visit and are useful as they can enhance your online experience. For further information please see our cookie statement.

If we do collect personal data through our website, we will be transparent about this and alert you via an information notice at the point of collection. For example, we may run online challenges and quizzes that will require you to register online to participate. Unless otherwise stated we will hold your personal information for 12 months.

Data retention

We retain personal information for only as long as it is necessary for us to do so for the purpose for which it is being processed.

Sharing your personal data

As the Data Controller we use third parties to provide services for us: they are known as Data Processors. We ensure we only use Data Processors who comply with the data protection legislation and they can process personal data for us only when we have instructed them to do so. They will hold it securely and retain it for the period we instruct. We will not share your information with any third parties for the purposes of direct marketing.

Your data protection rights

Under the Data Protection Act, you have certain rights over your personal data, to the extent that any such personal data is held by HMGCC. These are

Access - You can ask us to see copies of your personal information

Rectification - You can ask us to rectify information which you think is inaccurate

Erasure - You can ask us to erase your personal information in certain circumstances

Objection to processing - You can ask us to restrict the processing of your information in certain circumstances

Objection to automated decision making - You have the right to object to any decisions which have affected you significantly, if you consider these decisions have been made without meaningful human input

Contact details

HMGCC is the controller for personal information we process, unless otherwise stated.

If you wish to contact us about any aspect of data protection, please use our dedicated email adress: DataProtection@hmgcc.gov.uk or write to us at:

Data Protection
HMGCC
Hanslope Park
Park Road
Milton Keynes
MK19 7 BH

You also have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK regulator of compliance with the data protection legislation. Their address is:

The Office of the Information Commissioner
Wycliffe House
Water Lane
Cheshire
SK9 5AF