Privacy Policy
This policy explains how the National Capability Framework website collects, uses and protects your personal data. We are committed to transparency and to respecting your privacy rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Data Controller
The data controller for this website is GINC (Global Institute for National Capability). If you have any questions about this policy or your personal data, you can contact us at [email protected].
What Personal Data We Collect
The only personal data we collect is your email address, and only when you voluntarily provide it to subscribe to our newsletter. We do not collect any other personal information through this website.
Lawful Basis for Processing
We process your email address on the basis of consent under Article 6(1)(a) of the UK GDPR. You provide this consent when you actively subscribe to our newsletter. You may withdraw your consent at any time by unsubscribing or contacting us.
Cookies and Local Storage
This website uses a localStorage item to remember your light/dark theme preference. This is purely functional and does not collect or transmit any personal data.
We use Google Analytics to understand how visitors interact with the site so we can improve the framework microsite. Google Analytics uses cookies to collect anonymous, aggregated data such as pages visited, time on site and general geographic region. This data is processed by Google under their own privacy policy. No personally identifiable information is collected through Google Analytics.
The lawful basis for this processing is legitimate interest under Article 6(1)(f) of the UK GDPR — we have a legitimate interest in understanding site usage to improve the service, and this processing is proportionate and does not override your rights. We do not use any advertising cookies or other third-party tracking technologies.
Third-Party Data Sharing
We do not sell, rent or share your personal data with any third parties. Your email address is used solely for the purpose of sending our newsletter. Anonymous analytics data is processed by Google under the terms of the Google Analytics data processing agreement.
Data Storage and Retention
Your email address is stored securely and retained for as long as you remain subscribed to our newsletter. When you unsubscribe, your email address will be deleted from our mailing list promptly.
Your Rights Under UK GDPR
You have the following rights in relation to your personal data:
- Right of access — request a copy of the personal data we hold about you
- Right to rectification — request correction of inaccurate or incomplete data
- Right to erasure — request deletion of your personal data
- Right to restriction — request that we limit how we use your data
- Right to data portability — request your data in a portable format
- Right to object — object to our processing of your data
- Right to withdraw consent — withdraw your consent at any time without affecting the lawfulness of prior processing
To exercise any of these rights, please contact us at [email protected].
Complaints
If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection:
- Website: ico.org.uk
- Telephone: 0303 123 1113
Changes to This Policy
We may update this privacy policy from time to time. Any changes will be published on this page with an updated date.