Privacy notice
This privacy notice explains how the Department for Business and Trade (DBT), as a ‘data controller’, processes personal data for the ‘Plan your Shared Parental Leave and Pay’ service on GOV.UK.
This notice is supplemented by our main privacy notice which provides further information on how DBT processes personal data and sets out your rights in respect of that personal data.
Personal data DBT collects
In this service, DBT collects information about individuals planning Shared Parental Leave and their family members. This service does not collect any personal data that allows the direct identification of an individual (for example names).
The following categories of personal data are collected:
- Dates of birth
- Salary and employment information
- Details of a child’s birth, adoption or surrogacy
Why DBT asks for this information and what happens if it is not provided
Personal data is collected through the ‘Plan your Shared Parental Leave and Pay’ service to enable individuals to check their eligibility for Shared Parental Leave and Shared Parental Pay. This is an optional service that individuals are not required to use.
DBT collects this information to support individuals and their employers with planning their Shared Parental Leave and Pay, linked to the department’s obligations under the Children and Families Act 2014.
The legal basis for processing your personal data
The legal bases for processing your personal data under (Article 6(1) UK General Data Protection Regulation (GDPR)) are that:
- processing is necessary for compliance with a legal obligation to which the controller is subject
- processing is necessary for a task carried out in the public interest or in the exercise of official authority vested in the controller
How DBT processes personal data it receives
Data entered into the ‘Plan your Shared Parental Leave and Pay’ service is not stored in any database. It is only held temporarily to enable you to complete your use of the service.
The data you enter is also converted into a web link, which is made available to you so that you can return to your shared parental leave plan, or share it with others. This web link can be openly accessed by anyone it is shared with, so care should be taken when sharing this link.
Third-party processors
We use the following third-party processors to operate the service:
- Amazon Web Services – DBT’s contracted cloud-hosting service provider
- Government Digital Service – provides the GOV.UK Notify service, used for confirmation and reminder emails
- Google Analytics – used to monitor usage and the performance of DBT digital services
Information sharing
The service does not store your personal data, so there is no onward sharing of information with others.
You can find out more detailed information about how we share data and further processing in the main privacy notice.
How long will DBT hold your data for
Data you enter into the service is only held until you close your internet browser window.
Your rights
You have rights under UK data protection legislation, including:
- the right to request copies of the personal data we hold about you
- the right to request that we rectify information about you which you think is inaccurate or incomplete
- the right to request that we restrict your data from further processing (in certain circumstances)
- the right to object to the processing of your data (in certain circumstances)
- the right to data portability (in certain circumstances)
- the right to request that we erase your data (in certain circumstances)
- the right not to be subject to a decision based on solely automated data processing
You can contact DBT’s Data Protection Officer for further information about how your data has been processed by the department or to make a complaint about how your data has been used. Please contact: data.protection@businessandtrade.gov.uk
You can also submit a complaint to the Information Commissioner’s Office (ICO) at:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Website: https://ico.org.uk
Telephone: 0303 123 1113
You can find out more about your rights as a data subject, and details of how to contact our Data Protection Officer and the ICO in our main privacy notice.