Skip to content

Commit

Permalink
Merge pull request #1774 from uktrade/LTD-4659-privacy-notice
Browse files Browse the repository at this point in the history 
LTD-4659: Add Privacy notice to exporter site
  • Loading branch information
@saruniitr
saruniitr authored Feb 9, 2024
2 parents ba55336 + dc208e2 commit 44ada39
Show file tree
Hide file tree
Showing 5 changed files with 281 additions and 4 deletions.
1 change: 1 addition & 0 deletions exporter/core/urls.py
View file
Original file line number Diff line number Diff line change
Expand Up @@ -50,5 +50,6 @@
path("signature-help/", views.SignatureHelp.as_view(), name="signature_help"),
path("certificate/", views.CertificateDownload.as_view(), name="certificate"),
path("register-name/", views.RegisterName.as_view(), name="register_name"),
path("privacy-notice/", views.PrivacyNotice.as_view(), name="privacy_notice"),
]
)
4 changes: 4 additions & 0 deletions exporter/core/views.py
View file
Original file line number Diff line number Diff line change
Expand Up @@ -226,3 +226,7 @@ def get(self, request, *args, **kwargs):

def handler403(request, exception):
return error_page(request, title="Forbidden", description=exception, show_back_link=True)


class PrivacyNotice(LoginRequiredMixin, TemplateView):
template_name = "core/privacy_notice.html"
256 changes: 256 additions & 0 deletions exporter/templates/core/privacy_notice.html
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,256 @@
{% extends 'layouts/base.html' %}

{% block back_link %}
<a href="{% url 'core:home' %}" class="govuk-back-link">Back</a>
{% endblock %}

{% block title %}Privacy notice{% endblock %}

{% block body %}
<div class="govuk-width-container">
<main id="main-content" class="govuk-main-wrapper govuk-!-padding-top-0">
<div class="govuk-grid-row">
<div class="govuk-grid-column-two-thirds">
<h1 class="govuk-heading-l">
Privacy notice
</h1>

<p class="govuk-body">
This notice sets out your rights with respect to how we will use your personal data when you apply
for a standard individual export
licence (SIEL).
</p>
<p class="govuk-body">
This notice explains how the Department for Business and Trade (DBT) (also referred to as “We” or
“Us” or “Our” in this privacy
notice) will use your personal data. We recognise that we have a duty to people whose information we
hold to treat that information
responsibly, keep it safe and secure, and process it correctly and proportionately. We will process
your personal data lawfully and
fairly in line with the 2018 Data Protection Act.
</p>
<p class="govuk-body">
This privacy notice broadly explains the information we collect, the purpose for processing,
categories of personal information and
who we may share it with. It is important that you read this notice, so that you are aware of how
and why we are using your
information.
</p>

<h2 class="govuk-heading-m">Purpose of privacy notice</h2>
<p class="govuk-body">
This online service is for applying for export licenses and clearances, related to goods that
require government permission to be
exported from the UK or traded between countries.
</p>
<p class="govuk-body">
The information you provide will be processed by DBT and shared with third parties for the purpose
of processing licensing or
clearance applications for controlled strategic goods and services.
</p>
<p class="govuk-body">
The information you provide will be processed on a lawful basis to enable DBT to perform a task in
the public interest or to fulfil an
official function, including conducting research appropriate to DBT and export controls.
</p>

<h2 class="govuk-heading-m">What data we collect</h2>
<p class="govuk-body">
The personal data we will collect includes:
<ul class="govuk-list govuk-list--bullet">
<li>full name</li>
<li>email address</li>
<li>phone number</li>
<li>address</li>
<li>data related to criminal convictions, if applicable</li>
</ul>
</p>

<h2 class="govuk-heading-m">Processing of criminal data</h2>
<p class="govuk-body">
Processing of criminal data is pursuant to Article 11 (1) of the Firearms Regulation No. 258/2012.
The article stipulates that an
export authorisation (licence) must be refused if the applicant has a criminal record concerning
conduct constituting an offence,
punishable by a term of imprisonment of not less than four years.
</p>
<p class="govuk-body">
DBT has a duty to identify individuals that do not meet the criteria for licensing.
</p>

<h2 class="govuk-heading-m">Our legal basis for processing your data</h2>
<p class="govuk-body">
DBT is the data controller for personal data you provide to us. We process the data on the lawful
basis of legal obligation and the
processing is necessary to comply with the law.
</p>

<h2 class="govuk-heading-m">How we may share your information</h2>
<p class="govuk-body">
In line with the purpose your personal information may be shared with the following parties;
</p>

<p class="govuk-body">
These are:
<ul class="govuk-list govuk-list--bullet">
<li>Ministry of Defence</li>
<li>Foreign Commonwealth and Development Office</li>
<li>HM Revenue and Customs</li>
<li>Department for Energy Security and Net Zero</li>
<li>National Cyber Security Centre</li>
<li>UK Border Force – Home Office</li>
<li>Australia Group</li>
<li>Nuclear Suppliers Group</li>
<li>Wassenaar Arrangement</li>
<li>Missile Technology Control Regime</li>
<li>Europe Union</li>
</ul>
</p>
<p class="govuk-body">
Aggregated analysis of data collected may be shared with the Information Commissioner’s Office (ICO)
the Government Internal
Audit Agency (GIAA), and the National Audit Office (NAO).
</p>
<p class="govuk-body">
We may also anonymise some personal data you provide to us to ensure that you cannot be identified
and use this data to allow
DBT to effectively target and plan the provision of services related to the purposes described
above.
</p>
<p class="govuk-body">
We will not:
<ul class="govuk-list govuk-list--bullet">
<li>sell or rent your data to third parties</li>
<li>share your data with third parties for marketing purposes</li>
<li>use your personal data in analytics</li>
</ul>
</p>
<p class="govuk-body">
We will also share your data if we are required to do so by law or regulation, for example, by court
order, or to prevent fraud or
other crime.
</p>


<h2 class="govuk-heading-m">How long we will keep your information</h2>
<p class="govuk-body">
We will only retain your personal information for as long as necessary to fulfil the purposes we
collected it for, including for the
purposes of satisfying any legal, accounting, or reporting requirements.
</p>
<p class="govuk-body">
We will retain your personal information for as long as:
<ul class="govuk-list govuk-list--bullet">
<li>it is needed to fulfil the purposes set out in this document</li>
<li>the law requires us to do so</li>
</ul>
</p>
<p class="govuk-body">
Subject to the paragraph above, we will only retain your personal data and criminal offence data for
as long as:
<ul class="govuk-list govuk-list--bullet">
<li>it is needed for the purposes set out in this document; or</li>
<li>the law requires us to</li>
</ul>
</p>
<p class="govuk-body">
However, we conduct regular reviews to ensure we only keep information required for the purpose of
which it was collected. If
there is any indication of a business need to extend this retention period, we will robustly review
it and communicate any changes
in a revised notice.
</p>

<h2 class="govuk-heading-m">Your rights and access to your information</h2>
<p class="govuk-body">
You have the right to request a copy of the information that we hold about you. The Data Protection
Act (DPA) also gives you
additional rights that refer to how DBT holds and uses your information.
</p>
<p class="govuk-body">
Under certain circumstances, by law you have the right to:
<ul class="govuk-list govuk-list--bullet">
<li>request information about how your personal data is processed</li>
<li>raise an objection about how your personal data is processed</li>
</ul>
</p>

<h2 class="govuk-heading-m">Contact us</h2>
<p class="govuk-body">
The Department for Business and Trade is registered as a Data Controller under the General Data
Protection Regulation and Data
Protection Act 2018. Our contact details are:
</p>
<p class="govuk-body">
Data Protection Officer<br>
Old Admiralty Building<br>
Whitehall<br>
London<br>
SW1A 2DY<br>
Email: <a class="govuk-link govuk-link--no-visited-state"
href=mailto:[email protected]>[email protected]</a><br>
</p>

<p class="govuk-body">
You have a right to complain to us if you think we have not complied with our obligation for
handling your personal information. You
can contact our Data Protection Officer using the same contact.
</p>

<h2 class="govuk-heading-m">Contact the Information Commissioner’s Office</h2>
<p class="govuk-body">
If you are not satisfied with the DBT response you have a right to complain to the Information
Commissioner’s Office (ICO). You
can report a concern by contacting the ICO on the below details.
</p>

<p class="govuk-body">
Information Commissioner’s Office<br>
Wycliffe House<br>
Water Lane<br>
Wilmslow<br>
Cheshire<br>
SK9 5AF<br>
<br>
Email: <a class="govuk-link govuk-link--no-visited-state"
href=mailto:[email protected]>[email protected]</a>
<br><br>
Tel 0303 123 1113
<br><br>
Textphone 01625 545860<br>
Monday to Friday 9am to 4:30pm
<br><br>
For more information about your rights under the Data Protection Act or to request a copy of any
data held about you please
contact <a class="govuk-link govuk-link--no-visited-state"
href=mailto:[email protected]>[email protected]</a>.
</p>

<h2 class="govuk-heading-m">Confidentiality</h2>
<p class="govuk-body">
If you wish the information you provide to be treated as confidential, please be aware that, in
accordance with the Freedom of
Information Act (FOIA), public authorities are required to comply with the FOIA.
</p>

<p class="govuk-body">In view of this, it would be helpful if you have reasons for confidentially, if
you could explain to us why you wish that information to
be treated confidentially. If we receive a request for disclosure of information that has been
provided, we will take full account of
your explanation, but we cannot give an assurance that confidentiality can be maintained in all
circumstances.
</p>

<h2 class="govuk-heading-m">Changes to this privacy notice</h2>
<p class="govuk-body">
We reserve the right to update this privacy notice at any time and we will provide you with a new
privacy notice when we make any
substantial updates.
</p>

</div>
</div>
</main>
</div>

{% endblock %}
13 changes: 9 additions & 4 deletions exporter/templates/layouts/base.html
View file
Original file line number Diff line number Diff line change
Expand Up @@ -121,11 +121,16 @@ <h2 class="govuk-visually-hidden">Support links</h2>
</li>
{% endif %}
<li class="govuk-footer__inline-list-item">
<a class="govuk-footer__link" href="/accessibility-statement">
Accessibility statement
</a>
<a class="govuk-footer__link" href="{% url 'core:privacy_notice' %}">
Privacy notice
</a>
</li>
</ul>
<li class="govuk-footer__inline-list-item">
<a class="govuk-footer__link" href="{% url 'exporter-accessibility-statement' %}">
Accessibility statement
</a>
</li>
</ul>

<svg aria-hidden="true" focusable="false" class="govuk-footer__licence-logo" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 483.2 195.7" height="17" width="41">
<path fill="currentColor" d="M421.5 142.8V.1l-50.7 32.3v161.1h112.4v-50.7zm-122.3-9.6A47.12 47.12 0 0 1 221 97.8c0-26 21.1-47.1 47.1-47.1 16.7 0 31.4 8.7 39.7 21.8l42.7-27.2A97.63 97.63 0 0 0 268.1 0c-36.5 0-68.3 20.1-85.1 49.7A98 98 0 0 0 97.8 0C43.9 0 0 43.9 0 97.8s43.9 97.8 97.8 97.8c36.5 0 68.3-20.1 85.1-49.7a97.76 97.76 0 0 0 149.6 25.4l19.4 22.2h3v-87.8h-80l24.3 27.5zM97.8 145c-26 0-47.1-21.1-47.1-47.1s21.1-47.1 47.1-47.1 47.2 21 47.2 47S123.8 145 97.8 145" />
Expand Down
11 changes: 11 additions & 0 deletions unit_tests/exporter/core/test_views.py
View file
Original file line number Diff line number Diff line change
Expand Up @@ -101,6 +101,17 @@ def test_survey_alert_not_displayed(authorized_client, settings, home_url, mock_
assert not banner


def test_privacy_notice_view(authorized_client):
response = authorized_client.get(reverse("core:privacy_notice"))

assert response.status_code == 200
assertTemplateUsed(response, "core/privacy_notice.html")

soup = BeautifulSoup(response.content, "html.parser")
assert soup.find("h1").string.strip() == "Privacy notice"
assert soup.title.string.strip() == "Privacy notice - LITE - GOV.UK"


def test_exporter_accessibility_statement_view(authorized_client):
response = authorized_client.get(reverse("exporter-accessibility-statement"))

Expand Down

0 comments on commit 44ada39

Please sign in to comment.