This policy explains:
- How we store your data
- What we do with it
- How to get a copy of your personal data
- What to do if you think we’ve done something wrong
This service is managed by HMPPS, an agency of the Ministry of Justice (MOJ). MOJ is the data controller for the personal information we hold.
HMPPS collects and processes personal data to provide safe and secure prison services, including those related to the management and rehabilitation of offenders.
About personal information
Personal data is information about you as an individual. It can be your name, address, telephone number or email address. It can also be information about the person you have contact with in prison.
We know how important it is to protect your privacy and to comply with data protection laws. We will keep your personal data safe and only disclose it when lawful to do so, or with your consent.
Types of personal data we process
We only process personal data relevant for the services we give you. This is information about how you use the site to allow us to see how the service is being used so we can improve it. It does not contain any personal data, unless you send a payment or feedback is submitted with an email address.
- your name, postal address, email address, bank details, your IP address and details about your contact in prison
- questions, queries or feedback you leave
- information on how you use the site, using cookies and page tagging techniques (Google Analytics) to help us improve it
This helps us to:
- complete the transaction
- improve the site by monitoring how you use it
- respond to feedback, if you’ve asked for some
Purpose of processing and the lawful basis for the process
We collect personal data so that you can safely send money digitally to someone in prison. If we don’t have all the personal data we ask for, the bank transfer or direct debit can not be processed.
Data given will be monitored to protect from financial fraud.
Who the information may be shared with
We sometimes need to share the personal information we process with the individual themselves and also with other organisations. Where this is necessary we will comply with all aspects of the data laws. The organisations we share your personal information with are:
- Zendesk to handle any feedback that you leave. See the terms & conditions attached to this service.
Details of transfers to third country and safeguards
Data collected is stored within the European Economic Area (EEA). However, due to the global nature of the internet, data may transit through other countries outside of the EEA while going to and from the database. Data is not stored in a non-EEA country.
Feedback may be stored outside of the EEA, where it could be viewed by our staff or suppliers. By submitting your personal data, you agree to this.
Retention period for information collected
Data is retained for seven years in accordance with HM Prison and Probation Service retention policy.
Access to personal information
If you want to know what personal data we have on you, you can make a ‘subject access request’.
For offender and ex-offenders, please contact:
Building 16, S & T Store
For all others, please contact:
Post point 10.38
102 Petty France
When we ask you for personal data
We promise to:
- tell you why we need your data
- only ask for the data we need
- make sure we don’t keep data longer than necessary
- keep your personal data away from commercial use, without your consent
- protect your data and make sure no unauthorised person has access to it
- only share your data where appropriate and necessary, for legitimate purposes
We also promise you can:
- request to correct, stop processing or erase your personal data
- make a complaint with the supervisory authority
You can get more details on:
- agreements we have for sharing data with other organisations
- when we pass on data without telling you, for example, in prevention or detection of a crime or to produce anonymous statistics
- how staff collect, use or delete your data
- how we keep data accurate and updated
- how to make a complaint
To find out about any of this issues, please email firstname.lastname@example.org or contact the:
MOJ Data Protection Officer
Post point 10.38
102 Petty France
When we ask you for information, we will keep to the law.
If you think your information has been handled incorrectly, email the Information Commissioner at www.ico.org.uk for independent advice about data protection.
You can also call on 0303 123 1113 or write to:
Information Commissioner’s Office
We don’t accept liability for loss or damage incurred by users of this service, whether direct, indirect or consequential, whether caused by tort, breach of contract or otherwise. This includes loss of income or revenue, business, profits or contracts, anticipated savings, data, goodwill, tangible property or wasted time in connection with this service or any websites linked to it and any materials posted on it. This condition shall not prevent claims for loss of or damage to your tangible property or any other claims for direct financial loss that are not excluded by any of the categories set out above.
This does not affect our liability for death or personal injury arising from our negligence, nor our liability for fraudulent misrepresentation or misrepresentation as to a fundamental matter, nor any other liability which cannot be excluded or limited under applicable law.