Privacy notice for GOV.WALES website

How we use your information when you interact with GOV.WALES website and services.

When you use this website, we may collect and process data (information) about you. This privacy notice explains the types of data we collect, how we handle and store your data, and your legal rights towards your data.

 

Personal data we collect

The personal data we collect depends on the parts of the site you interact with.

We may collect your:

  • full name
  • email address
  • phone number
  • job title
  • organisation’s name
  • organisation’s address

 

How we collect your data

We collect your data when you interact with this website in the following ways:

Subscribing to our e-newsletters

We use GovDelivery (supplied by Granicus) to deliver our e-newsletters. We gather statistics around email opening and interaction with content like links.

Read the privacy policy on granicus.com.

Participating in consultations and online surveys

We collect information using SmartSurvey and SurveyMonkey. Data collected via these services is hosted in the United States. Both platforms have issued assurances that they meet UK General Data Protection Regulations (GDPR).

Read SmartSurvey’s privacy statement on smartsurvey.com.

Read SurveyMonkey’s GDPR compliance statement on surveymonkey.com.

Engaging with our blogs

We use WordPress.com to publish our blogs, collecting anonymous information about your activity to improve the user experience. Wordpress requires visitors that want to post a comment on a blog article to enter their name and email address. Wordpress is owned by Automattic Inc.

Read Automattic’s privacy notice on automatic.com.

Interacting with us on social media

We use social listening software to understand online discussions for purposes such as:

  • improving policies and initiatives
  • identifying and raising awareness of harmful disinformation and misinformation
  • addressing reputational or safety issues

Accessing Welsh Government services and other websites

When you interact with Welsh Government services, those services may collect your data. Individual services have their own privacy notices, detailing what data they collect, how it is handled and how to contact them.

If you follow a link to a website or service provided by another government department, agency or local authority, that organisation will:

  • be responsible for processing any data you share with them
  • publish their own privacy notice with details of how to contact them

 

Purposes for processing your personal data

We process your personal data to:

  • provide and ensure you receive the product, service, or information you have requested
  • administer your subscriptions, memberships, bookings and other services
  • communicate with you in the way that you prefer
  • personalise and enhance the services that we offer
  • improve our website and services through better understanding of our customers

 

Legal basis for processing data

Under the UK General Data Protection Regulation (GDPR), we process your personal data as necessary to perform a task carried out in the public interest, or in the exercise of official authority vested in us.

 

Data sharing and transfers

We use the following third-party services to process your data:

  • GovDelivery (Granicus) manages our e-newsletter service.
  • SmartSurvey and SurveyMonkey facilitate our consultations and online surveys (data collected is hosted in the United States)
  • WordPress.com (Automattic Inc.) hosts our blogs and collects anonymous information about user activity

These providers are responsible for processing any data you share with them and publish their own privacy notices detailing how to contact them.

 

Data retention

We retain your personal data only as long as necessary to fulfil the purposes we collected it for, including satisfying any legal, accounting, or reporting requirements.

 

Your rights regarding your data

Under UK GDPR, you have rights as an individual regarding the information we hold about you, including the right to access, correct, or delete your personal data.

 

Cookies

We use cookies to enhance your experience on our website. Cookies are small text files placed on your device to collect standard internet log information and visitor behaviour data.

You can read about the cookies we use, and manage your preferences, through our cookies policy.

 

Updates to this privacy notice

We review this page periodically to ensure you are always aware of what information we collect, how we use it, and under what circumstances (if any) we will share it with third parties.

This privacy notice was last updated on 23 April 2025.

 

Further information

You can contact the Welsh Government’s Data Protection Officer for any queries about your data not already answered in this notice.

Data Protection Officer 
Cathays Park 
Cardiff 
CF10 3NQ

Email: dataprotectionofficer@gov.wales