Privacy Notice
Privacy Notice for Policy Festival
This notice sets out how we will use your personal data, and your rights. It is made under Articles 13 and/or 14 of the UK General Data Protection Regulation (UK GDPR).
The Data Controller
The Cabinet Office (CO) is the “data controller.” This means that we are responsible for determining what personal information we collect about you, why, and how it is used.
What Personal Data We Are Collecting and Why
Your personal data is being collected to facilitate your registration for events on the Policy Festival and to understand the characteristics of Civil Servants attending sessions.
To register for the learning events, delegates will need to register for free directly on the platform, which is hosted by Amplitude/Orcula.
We’ll need your name and email address, as well as information about your department, profession, grade, and government.
Some sessions may be recorded, but delegates' cameras and audio will not be used. Any questions submitted in the Q&A function box can be submitted anonymously.
We may also use your data to contact you about post-event surveys and evaluation, as well as future training opportunities hosted on the platform.
Lawful Basis for Processing the Data
The lawful basis for processing your personal information under UK data protection legislation is that it is necessary for the performance of a task in the public interest (Article 6(1)(e) of the UK GDPR).
Sharing Your Data
We will not share your personal data with third parties, including third-party advertisers. Your data will be collected via the registration platform, Amplitude/Orcula, and their privacy notice is available on the platform homepage.
Retention Period
We will retain your personal data as long as you are registered to use the platform services, which include access to Policy Festival events, recordings, and additional training events year-round.
You may close your account at any time through the ‘My Registration’ section of the website.
Your Rights
You have the right to:
International Transfers
As your personal data is stored on our Corporate IT infrastructure and shared with our data processors, it may be transferred and stored securely outside the UK. Where that is the case, it will be subject to equivalent legal protection through an adequacy decision, reliance on Standard Contractual Clauses, or reliance on a UK International Data Transfer Agreement.
As your data will be shared with our platform provider, it may be stored securely outside the UK. Where that is the case, it will be subject to equivalent legal protection through standard contractual clauses.
Automated Decision Making
We will not use your data for any automated decision-making.
Storage, Security, and Data Management
Your personal data will be stored on the registration platform provided by Amplitude/Orcula and shared with the data controller. You can view more details on the data policy of Orcula at: Orcula Data Policy. The data controller will host the information on a secure government IT system.
Complaints and More Information
If you consider that your personal data has been misused or mishandled, you may make a complaint to the Information Commissioner, who is an independent regulator. The Information Commissioner can be contacted at:
Any complaint to the Information Commissioner is without prejudice to your right to seek redress through the courts.
Contact Details
The data controller for your personal data is the Cabinet Office. The contact details for the data controller are:
The contact details for the data controller’s Data Protection Officer are:
The Data Protection Officer provides independent advice and monitoring of Cabinet Office’s use of personal information.