This privacy policy applies to the collection and use of client and public.digital visitors’ personal data by Public Digital Holdings Ltd (Company Number: 10993674) and its subsidiaries.

As a company processing your personal data, we are regulated by the General Data Protection Regulation (GDPR). This page is intended to keep you informed about what we do with the personal data we process.

When you visit our website we collect some information about you to help us run the site.

Information is collected in three ways:

• Automatically in our server logs, to help us keep the site reliable and secure. This includes your IP address and browser type, and which pages are visited. We use Solarwinds’ Papertrail to manage those logs, and may keep them for up to a year.
• If you give your consent, using Google Analytics to help us improve the content and design of the website. This also includes IP address, browser type and pages visited, along with some extra information about the technology you use. We don’t use it to gather demographic information.
• If you leave a comment on the website we will store your email address and may send you emails about follow-up comments. We store those email addresses in a database service from DigitalOcean and use Wildbits’ Postmark for those notifications.
• We may collect your IP address, browser type, operating system, and the page you're visiting and send it to Sentry, which is an application security monitoring service.
  

We use cookies to record whether you consented to our use of analytics, and if you did consent then cookies are used to gather the data.

You can read the privacy policies for Google Analytics, Solarwinds, Wildbits and DigitalOcean.

The website is managed for us by Fieldwork, hosted by DigitalOcean, with some additional services from Amazon Web Services. Other than the email addresses mentioned above we don’t store any personal information with either of those providers.

When you sign up for our newsletter we collect identity data such as your name and email address, so that we can send you the newsletter.

We also collect analytics on who opens the newsletter and which links they follow. This is used to work out which content is of interest to our subscribers, and is never used to target particular individuals or groups.

That information is managed for us by Mailchimp. You can read their Privacy Policy.

When you make a nomination for the Future of Government Awards we collect identity data such as the name and email address of a person you are nominating. We do this so we can contact them about your nomination or the event. We also collect information on the nominee’s place of work. This will be used to work out what content will be of interest for case studies relating to the nominees and their teams.

We also collect/have access to the information you share as part of your nomination. This includes content you have created.
That information is managed for us by Kobo. You can read their Privacy Policy.

We will inform you within 10 UK working days if someone names you as the point of contact when they nominate you.

When you register to attend the online awards ceremony, we collect identity data such as your name, email address and place of work. This will be used to contact you about the event and tailor the event content.

That information is managed for us by Google. You can read their Privacy Policy.

If we’re in contact to discuss working with you, answer other questions you may have, send you a copy of Signals, you come to an event we’re running or we start working together, we collect personal data that you provide to us.

This could include:

• Identity Data may include your first name, last name, title, date of birth and gender.
• Contact Data may include your billing address, delivery address, email address and telephone numbers.
• Financial Data we keep only financial data that is a result of our contracts with you. Our financial records are held on Xero.
• Transaction Data may keep details about payments between us and details of purchases made by you as a record of transactions made which includes name and billing address.
• Technical Data may include IP addresses, browser type and version and some other technology on the devices you use to access this site.
• Usage Data may include information about how you use our website, products and services.
• Marketing and Communications Data we keep basic information so as to communicate with you, namely email address, first and last name.

We use tools provided by Google and Xero to manage data.

We collect and process your personal data in order to:

• fulfil a contract we have with you
• manage this website
• send you marketing materials
• operate our customer-service and respond to your requests
• improve our products and services

We do not sell or share your personal data outside of Public Digital.

We only keep your personal data for so long as necessary to achieve these purposes. This may be up to 10 years after the end of the contractual relationship with you (statute of limitation for legal claims in most EEA countries), unless a shorter or longer retention period applies under applicable data protection laws.

We share your personal data with:

• third party providers that help us operate this website and provide our products and services (these recipients act on our behalf and under our instructions only)
• in addition to those mentioned above, we also use Google G Suite.
• third parties in case of judicial processes, request by courts or authorities, other legal obligation, to defend our rights, or in case of merger, acquisition, or assets transfer.

Some of these recipients are located outside the EEA, but we ensure that your personal data remain at all times adequately protected (if the country of destination is not one that the EU Commission considers offers an adequate level of protection, we cover the data transfer by appropriate safeguards).

You may, at any moment, exercise your rights under data protection law, including (when applicable) your right of access, rectification, restriction, erasure, opposition (including objecting, at any time and for free, to the processing of your personal data for direct marketing), right to portability and your right to withdraw consent. You also have the right to lodge a complaint with the competent supervisory authority.

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know such data. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

However, we cannot absolutely guarantee the security of your personal data.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

For any query or request relating to our use of your personal data, or to exercise your rights, you may contact us via contact@public.digital

If for any reason you're not satisfied with our response you can make a complaint to the UK Information Commissioner by emailing icocasework@ico.org.uk

We may change this privacy policy. In that case, the ‘last updated’ date at the bottom of this page will also change. Any changes to this privacy policy will apply to you and your data immediately.

If these changes affect how your personal data is processed, we will take reasonable steps to let you know.

Last updated: 8th March 2023