Privacy notice
We collect certain information about you when you use the API Marketplace. This page explains what kind of personal information we collect, how it’s protected and how you can find out about it.
If we change this privacy policy, we’ll notify all Marketplace users by email.
UK GDPR lawful basis
We hold information about you as a software developer on the lawful basis of “public task” so that we can run the API Marketplace as a service to you.
What personal information do we hold about you?
- Full name
- Email address
How we use your data
We use this information to create and administer user accounts on the API Marketplace. We don’t share this information with anyone else.
We store your information so that your user account on the API Marketplace can function correctly, and so we can administer that access via our approval process for issuing production credentials. This includes sending you service updates and notices.
We delete your personal information when your user account is deleted and keep audit records of your user account activity for up to 6 years.
How we protect your personal information
We comply with the UK General Data Protection Regulation (GDPR).
We will:
- tell you why the information is needed
- only ask for what’s needed
- make sure no one has access to it who shouldn’t
- only keep the information for as long as it’s needed
- not make it available for commercial use
Handling your information
Our staff are trained in handling information and understand how important it is to protect personal and other sensitive information.
Your rights
You have the right to request:
- information about how your personal data is processed
- a copy of that personal data
- that anything inaccurate in your personal data is corrected immediately
You can also:
- raise an objection about how your personal data is processed
- request that your personal data is erased if there is no longer a justification for it
- ask that the processing of your personal data is restricted in certain circumstances
If you have any of these requests, get in contact with our team.
Your UK GDPR right to be forgotten
You can ask us to delete all the information we hold about you, if you no longer wish to be a user of the Marketplace. To do this contact our support team.
Children
The API Marketplace is not for use by children under the age of 16. We do not knowingly hold personal information on children under the age of 16.
How to object or make a complaint
If you’re unhappy with the way we handle your personal information, you can write to the Data Protection Officer at the HMCTS office advised by our support team.
You’ll get a confirmation that we have received your complaint within 5 days and a full answer within 20 days. We will tell you if there is going to be a delay.
If you’re unhappy with the answer or need any advice, contact the Information Commissioner’s Office (ICO).
Information Commissioner
icocasework@ico.org.uk
The ICO can investigate your complaint and take action against anyone who has misused personal data.