UK Business Data Survey 2026: Privacy Notice
Published 6 May 2025
This notice sets out how we will process your personal data, and your rights. It is made under Articles 13 and/or 14 of the UK General Data Protection Regulation (UK GDPR).ÌýÌýÌý
»Ê¹ÚÌåÓýapp UK Business Data Survey (UKBDS) is an ongoing quantitative and qualitative research study that gathers evidence on the importance and awareness of digital data use for UK businesses. »Ê¹ÚÌåÓýapp UKBDS is conducted by an external supplier. »Ê¹ÚÌåÓýapp Department for Science, Innovation and Technology (DSIT) holds and manages the contract. »Ê¹ÚÌåÓýapp current contract for the UKBDS has now concluded. However, DSIT plans to continue this research due to its value in informing policy context and decision making, and its widespread use by stakeholders.ÌýÌý
»Ê¹ÚÌåÓýapp aim of this engagement survey is to collect user and stakeholder feedback on different aspects of UKBDS for 2026 onwards, and to understand their views on the proposed changes to the UKBDS.Ìý
For this survey, DSIT is the controller of your personal data.Ìý
Your dataÌý
We will process the following personal data:ÌýÌýÌý
-
Individual respondentsâ€� namesÌý
-
Email addressesÌý
-
Your organisationÌý
Personal data will be collected direct from you and we will not ask for any other personal information beyond those listed above. Free-text boxes are included within this survey where you are encouraged not to volunteer any additional personal data. Additional personal data included within answers are not required and will be deleted appropriately.ÌýÌýÌýÌý
If you opt to provide information through the survey platform, your data will be processed by our contracted survey platform provider Qualtrics. For the purposes of this activity, Qualtrics are a data processor, providing services under the instruction of DSIT (the data controller).ÌýÌýÌý
¸é±ð²¹»å:Ìý
-
ÌýÌýÌýÌýÌý
-
Ìý
PurposeÌý
»Ê¹ÚÌåÓýapp purpose(s) for which we are processing your personal data is to enable us to carry out our functions as a government department. Your personal data is being collected as an essential part of the user engagement process, so that we can contact you regarding your response and for statistical purposes such as to ensure individuals cannot complete the survey more than once.ÌýÌý
Analysis of responses may be published after the survey closes. If we do so, we will ensure that neither you nor the organisation you represent are identifiable, and any responses used to illustrate findings will be anonymised.Ìý
Legal basis of processingÌý
»Ê¹ÚÌåÓýapp legal basis for processing your personal data under Article 6 of the UK GDPR is:Ìý
1(e)Public task: Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller. This survey provides ministers and government officials with information to inform the future development of the UK Business Data Survey (such as the scope and areas covered by the project).Ìý
RecipientsÌý
Responses are collected on the survey platform of Qualtrics, which is DSIT’s contract provider. Your personal data will not be shared with any other party.ÌýÌý
As part of our IT infrastructure, your personal data will be stored on systems provided by our data processor Microsoft. This does not mean we actively share your personal data with these entities; rather, they are technical service providers who host infrastructure supporting our IT systems.ÌýÌý
RetentionÌý
We will only retain your personal data for 3 years in line with DSIT retention policy.ÌýÌýÌýÌýÌý
Automated decision makingÌý
Your personal data will not be subject to automated decision making.ÌýÌýÌý
International TransfersÌý
Your personal data will be processed in the UK.Ìý
Your rightsÌýÌý
You have the right:Ìý
-
to request information about how your personal data are processed, and to request a copy of that personal data.Ìý
-
to request that any inaccuracies in your personal data are rectified without delay.Ìý
-
to request that any incomplete personal data are completed, including by means of a supplementary statement.Ìý
-
to request that your personal data are erased if there is no longer a justification for them to be processed.Ìý
-
in certain circumstances (for example, where accuracy is contested) to request that the processing of your personal data is restricted.Ìý
-
to object to the processing of your personal data.Ìý
Contact detailsÌýÌý
»Ê¹ÚÌåÓýapp data controller for your personal data is the Department for Science, Innovation and Technology (DSIT).ÌýÌý
You can contact the DSIT Data Protection Officer at:ÌýÌý
DSIT Data Protection Officer
Department for Science, Innovation and Technology
22-26 Whitehall
London
SW1A 2EG
Email [email protected]
ComplaintsÌýÌý
If you consider that your personal data has been misused or mishandled, you may make a complaint to the Information Commissioner, who is an UK independent regulator. »Ê¹ÚÌåÓýapp Information Commissioner can be contacted at:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Email [email protected]
Telephone 0303 123 1113
Any complaint to the Information Commissioner is without prejudice to your right to seek redress through the courts.
Updates to this notice
If this privacy notice changes in any way, we will place an updated version on this page. Regularly reviewing this page ensures you are always aware of what information we collect, how we use it, and under what circumstances we will share it with other parties. »Ê¹ÚÌåÓýapp ‘last updatedâ€� date at the bottom of this page will also change.ÌýÌý
If these changes affect how your personal data is processed, we will take reasonable steps to let you know.ÌýÌý
Last updated: 6 May 2025