The purpose of this document
This privacy notice explains how personal data is collected and used when you interact with the Information Exchange Standard (IES) website.
The IES website is managed by the National Digital Twin Programme (NDTP) on behalf of the IES Steering Committee — a cross-government governance group overseeing the ongoing development of the IES. While the IES is not a separate legal entity, it is supported by a multi-domain stakeholder community and operated in the public interest.
For the purposes of data protection, the NDTP acts as the data controller for this website.
We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Why we need your information and how we use it
We collect and process limited personal data to:
- Operate and maintain the website securely
- Respond to user enquiries or feedback
- Understand how users interact with the site (via analytics)
- Support community engagement across IES-related initiatives
We do not collect personal data for commercial use, nor do we share it for marketing or advertising purposes.
What information we collect about you
Depending on how you interact with the IES website, we may collect:
- Your name and email (if you contact us)
- Organisation details (if shared)
- Website usage data (via Google Analytics)
- IP address and browser/device type (for security)
We do not collect sensitive data such as health or criminal records.
Where do we obtain your information from?
- Information you provide (e.g., via forms or email)
- Information collected automatically (e.g., analytics, IP address)
- We do not collect data from third parties
Legal basis for processing your information
We process your data under the following legal bases:
- Public task – supporting cross-government collaboration on the IES
- Legitimate interest – analysing site use to improve usability and design
- Consent – where you choose to receive updates or provide feedback
If we rely on consent, you may withdraw it at any time.
How we share your information
We do not sell or rent your personal data.
We may share data with:
- Government departments or agencies participating in the IES
- Service providers who support our website (e.g., hosting or analytics)
- Regulators or law enforcement bodies, if legally required
All providers must follow strict security protocols and process data only for agreed purposes.
How long we keep your information
- Analytics data is anonymised or deleted after 2 years
- Enquiry data is retained for 12 months unless further contact is ongoing
- Other data is retained only for as long as needed for technical or engagement purposes
How we protect your data and keep it secure
We use encryption, access controls, and secure infrastructure to protect your personal data. In the event of a breach, we will follow all legal reporting obligations.
Your rights under UK GDPR
You have the right to:
- Access your data
- Correct or update your data
- Request deletion
- Restrict processing
- Withdraw consent
To exercise your rights, please contact:
If you are dissatisfied, you may also contact the UK Information Commissioner’s Office (ICO):
📍 Wycliffe House, Water Lane, Wilmslow, Cheshire
🌐 www.ico.org.uk
📞 0303 123 1113
Contacting us
If you have questions about this notice or your personal data, please contact:
IES Website Administrator
ies@businessandtrade.gov.uk
Changes to this privacy notice
We may update this notice to reflect changes in data handling or regulatory requirements. Please check this page for updates.
Last updated: March 2025