{% extends 'base.html' %}
{% load i18n %}
{% load mtp_common %}

{% block page_title %}{% trans 'Privacy policy' %} – {{ block.super }}{% endblock %}

{% block content %}
<div class="govuk-grid-row">
  <div class="govuk-grid-column-two-thirds">

<header>
  <h1 class="govuk-heading-xl">{% trans 'Privacy policy' %}</h1>
</header>

<p>
  {% trans 'By using the ‘Send money to someone in prison’ service you agree to this privacy policy and to our terms and conditions.' %}
  {% trans 'Please read them carefully.' %}
</p>

<h3 class="govuk-heading-s">{% trans 'Purpose' %}</h3>

<p>
  {% trans 'This privacy policy sets out the standards that you can expect from His Majesty’s Prison and Probation Service (HMPPS) when we request or hold personal information (‘personal data’) about you; how you can get access to a copy of your personal data; and what you can do if you think the standards are not being met.' %}
</p>

<p>
  {% trans 'HMPPS is an Executive Agency/Arm’s Length Body of the Ministry of Justice (MoJ).' %}
  {% trans 'MoJ is the data controller for the personal information we hold.' %}
  {% trans 'HMPPS collects and processes personal data for the exercise of its own and associated public functions.' %}
  {% trans 'These include: providing safe and secure prison services, including those related to the management and rehabilitation of offenders.' %}
</p>

<h3 class="govuk-heading-s">{% trans 'About personal information' %}</h3>

<p>
  {% trans 'Personal data is information about you as an individual. It can be your name, address or telephone number.' %}
  {% trans 'It can also include information about the payments you make and the prisoner you are paying.' %}
</p>

<p>
  {% trans 'We know how important it is to protect customers’ privacy and to comply with data protection laws.' %}
  {% trans 'We will safeguard your personal data and will only disclose it where it is lawful to do so, or with your consent.' %}
</p>

<h3 class="govuk-heading-s">{% trans 'Types of personal data we process' %}</h3>

<p>
  {% trans 'We only process personal data that is relevant for the services we are providing to you.' %}
  {% trans 'If you make a payment, this includes:' %}
</p>
<ul class="govuk-list govuk-list--bullet">
  <li>{% trans 'your name, postal address, email address, payment card details, your IP address and details about your contact in prison' %}</li>
</ul>

<p>
  {% trans 'If you provide feedback to us, this includes:' %}
</p>
<ul class="govuk-list govuk-list--bullet">
  <li>{% trans 'your email address or other contact details you give us' %}</li>
  <li>{% trans 'any personal information you include in questions, queries or feedback you leave' %}</li>
</ul>

<p>
  {% trans 'Information about how you use the site is collected using cookies and page tagging techniques (Google Analytics).' %}
  {% url 'cookies' as link %}
  {% blocktrans trimmed %}
    It does not contain any personal data and is only collected if you <a href="{{ link }}">consent</a> to this.
  {% endblocktrans %}
  {% trans 'It is shared with the Government Digital Service.' %}
</p>

<h3 class="govuk-heading-s">{% trans 'Purpose of processing and the lawful basis for the process' %}</h3>

<p>
  {% trans 'We collect personal data so that you can safely send money digitally to someone in prison.' %}
  {% trans 'If we don’t have all the personal data we ask for, the payment can not be processed.' %}
</p>

<p>
  {% trans 'It helps us to:' %}
</p>
<ul class="govuk-list govuk-list--bullet">
  <li>{% trans 'complete the payment transactions' %}</li>
  <li>{% trans 'prevent, detect and investigate suspicious payment' %}</li>
  <li>{% trans 'prevent, detect and investigate suspected crime or unlawful activity' %}</li>
  <li>{% trans 'respond to your feedback if you have asked us to' %}</li>
</ul>

<p>
  {% trans 'The data you give us will be monitored to prevent and detect financial fraud, money laundering and other criminal activity.' %}
</p>

<p>
  {% trans 'The data is processed in accordance with the General Data Protection Regulation and Data Protection Act 2018 and the lawful basis for processing is substantial public interest.' %}
</p>

<h3 class="govuk-heading-s">{% trans 'Who the information may be shared with' %}</h3>

<p>
  {% trans 'We sometimes need to share the personal information we process with the individual themselves and also with other organisations.' %}
  {% trans 'Where this is necessary we will comply with all aspects of the data laws.' %}
  {% trans 'The organisations we share your personal information with are:' %}
</p>

<ul class="govuk-list govuk-list--bullet">
  <li>
    {% blocktrans trimmed with gov_url='https://www.payments.service.gov.uk/' wp_url='https://www.worldpay.com' %}
      <a href="{{ gov_url }}">GOV.UK Pay</a> and <a href="{{ wp_url }}">WorldPay</a> if the payment is made by debit card.
    {% endblocktrans %}
    {% trans 'This facilitates making a payment.' %}
    {% blocktrans trimmed with url='https://www.payments.service.gov.uk/privacy' %}
      See the <a href="{{ url }}">privacy policy</a>.
    {% endblocktrans %}
  </li>
  <li>
    {% blocktrans trimmed with url='https://www.notifications.service.gov.uk/' %}
      <a href="{{ url }}">GOV.UK Notify</a> to send emails.
    {% endblocktrans %}
    {% blocktrans trimmed with url='https://www.notifications.service.gov.uk/privacy' %}
      See the <a href="{{ url }}">privacy policy</a>.
    {% endblocktrans %}
  </li>
  <li>
    {% blocktrans trimmed with url='https://www.zendesk.com/' %}
      <a href="{{ url }}">Zendesk</a> to handle any feedback that you leave.
    {% endblocktrans %}
    {% blocktrans trimmed with url='https://www.zendesk.com/company/terms/' %}
      See the <a href="{{ url }}">terms &amp; conditions</a> attached to this service.
    {% endblocktrans %}
  </li>
  <li>
    {% blocktrans trimmed with url='https://www.justice.gov.uk/about/hmps/contracted-out' %}
      Selected individuals employed in <a href="{{ url }}">contracted-out prisons</a>.
    {% endblocktrans %}
  </li>
</ul>

<p>
  {% trans 'We may also share your data with the police and other law enforcement agencies where criminal or unlawful activity is suspected.' %}
</p>

<h3 class="govuk-heading-s">{% trans 'Details of transfers to third country and safeguards' %}</h3>

<p>
  {% trans 'Data collected is stored within the UK and Ireland.' %}
  {% trans 'However, due to the global nature of the internet, data may transit through other countries outside of the European Economic Area (EEA) while going to and from the database.' %}
  {% trans 'Data is not stored in a non-EEA country.' %}
</p>

<p>
  {% trans 'Feedback about the service may be stored outside of the EEA, where it could be viewed by our staff or suppliers.' %}
  {% trans 'By submitting your personal data, you agree to this.' %}
</p>

<h3 class="govuk-heading-s">{% trans 'Retention period for information collected' %}</h3>

<p>
  {% blocktrans trimmed with url='https://www.justice.gov.uk/downloads/offenders/psipso/psi-2018/psi-04-2018-records-information-management-retention-policy.pdf' %}
    Data is retained for seven years in accordance with HM Prison and Probation Service <a href="{{ url }}">retention policy</a>.
  {% endblocktrans %}
</p>

<h3 class="govuk-heading-s">{% trans 'Access to personal information' %}</h3>

<p>
  {% trans 'You can find out if we hold any personal data about you by making a ‘subject access request’.' %}
  {% blocktrans trimmed with url='https://www.gov.uk/government/organisations/ministry-of-justice/about/personal-information-charter' %}
    This process is set out in the <a href="{{ url }}">Ministry of Justice personal information charter</a>.
  {% endblocktrans %}
</p>

<h3 class="govuk-heading-s">{% trans 'When we ask you for personal data' %}</h3>

<p>
  {% trans 'We promise to inform you why we need your personal data and ask only for the personal data we need and not collect information that is irrelevant or excessive;' %}
</p>
<ul class="govuk-list govuk-list--bullet">
  <li>{% trans 'You can withdraw consent at any time, where relevant;' %}</li>
  <li>{% trans 'You can lodge a complaint with the supervisory authority;' %}</li>
  <li>{% trans 'We will protect it and make sure no unauthorised person has access to it;' %}</li>
  <li>{% trans 'Only where appropriate and necessary share it with other organisations for legitimate purposes;' %}</li>
  <li>{% trans 'Make sure we don’t keep it longer than is necessary;' %}</li>
  <li>{% trans 'Not make your personal data available for commercial use without your consent; and' %}</li>
  <li>{% trans 'Consider your request to correct, stop processing or erase your personal data.' %}</li>
</ul>

<p>
  {% trans 'You can get more details on:' %}
</p>
<ul class="govuk-list govuk-list--bullet">
  <li>{% trans 'Agreements we have with other organisations for sharing information;' %}</li>
  <li>{% trans 'Circumstances where we can pass on personal information without telling you, for example, to help with the prevention or detection of crime or to produce anonymised statistics;' %}</li>
  <li>{% trans 'Our instructions to staff on how to collect, use or delete your personal information;' %}</li>
  <li>{% trans 'How we check that the information we hold is accurate and up-to-date; and' %}</li>
  <li>{% trans 'How to make a complaint;' %}</li>
</ul>

<p>
  {% trans 'For more information about the above issues, please contact:' %}
</p>
<address>
  The Data Protection Officer<br />
  Ministry of Justice<br />
  3rd Floor, Post Point 3.20<br />
  10 South Colonnades<br />
  Canary Wharf<br />
  London<br />
  E14 4PU
</address>
<p>
  {% trans 'Email' %}: <a href="mailto:privacy@justice.gov.uk">privacy@justice.gov.uk</a>
</p>

<p>
  {% trans 'For more information on how and why your information is processed please see the information provided when you accessed our services or were contacted by us.' %}
</p>

<h3 class="govuk-heading-s">{% trans 'Complaints' %}</h3>

<p>
  {% trans 'When we ask you for information, we will keep to the law.' %}
  {% trans 'If you consider that your information has been handled incorrectly, you can contact the Information Commissioner for independent advice about data protection.' %}
  {% trans 'You can contact the Information Commissioner at:' %}
</p>
<address>
  Information Commissioner’s Office<br />
  Wycliffe House<br />
  Water Lane<br />
  Wilmslow<br />
  Cheshire<br />
  SK9 5AF
</address>
<p>
  {% trans 'Telephone' %}: 0303 123 1113<br />
  <a href="https://ico.org.uk/">www.ico.org.uk</a>
</p>

  </div>
</div>
{% endblock %}