Privacy policy - Visit someone in prison

This privacy policy explains why the HM Prison and Probation Service (HMPPS) collects personal data when you use the Prison Visit Booking service.

This policy also explains:

how we store this data
what we do with it
how you can get a copy of the data we have about you
how you can complain if you think we’ve done something wrong

This service is managed by HMPPS, an executive agency of the Ministry of Justice (MOJ). MOJ is the data controller for the personal information we hold.

HMPPS collects and processes personal data so that it can safely and securely provide prison services, including those related to the management and rehabilitation of offenders.

About personal information

Personal data is information about you as an individual. It can be your name, address or telephone number. It can also include information about the person you are requesting to visit in prison.

We know how important it is to protect your privacy and to comply with data protection laws. We will keep your personal data safe and will only disclose it where it is lawful to do so, or with your consent.

Types of personal data we process

We only process personal data that is relevant for the services we are providing to you. This includes:

your name, date of birth, email address and phone number
the name, date of birth, prisoner number and location of the person you want to visit
the names and dates of birth of any additional visitors

We also collect site-usage information which allows us to see how the service is being used in order to allow us to improve it. This information does not contain any personal data. It includes:

questions, queries or feedback you leave if you send a message via feedback
your IP address, and details of which version of web browser you used
information on how you use the site, using cookies and page tagging techniques to help us improve the website

This helps us to:

improve the site by monitoring how you use it
respond to any feedback you send us, if you’ve asked us to
provide you with information about local services if you want it

We can’t personally identify you using your site usage data.

Purpose of processing and the lawful basis for the process

We collect personal data so that you can request to visit someone in prison. Prisons and Young Offender Institutions need this information to ensure visits are safe and secure for visitors, offenders and staff.

Who the information may be shared with

We sometimes need to share the personal information we process with the individual themselves and also with other organisations. Where this is necessary we will comply with all aspects of the data laws. The organisations we share your personal information with are:

SendGrid to send you emails about the status of your visit request and to relay information to prisons. See the terms & conditions attached to this service.
ZenDesk to handle any feedback that you leave. See the terms & conditions attached to this service.

Details of transfers to third country and safeguards

All data collected by this service is stored within the European Economic Area (EEA). However, due to the global nature of the internet, the data sent to and from the database may transit through countries outside of the EEA. Data is not stored in a non-EEA country. Any transfers made will be in full compliance with all aspects of the data protection law.

How long we keep data

Data is retained for seven years in accordance with HMPPS retention policy.

Access to personal information

You can find out if we hold any personal data about you by making a ‘subject access request’. To make a subject access request please contact:

Offender and ex-offenders;
Branston Registry
Building 16, S & T Store
Burton Road
Branston
Burton-on-Trent
Staffordshire
DE14 3EG

All others;
Disclosure Team
Post point 10.38
102 Petty France
London
SW1H 9AJ

When we ask you for personal data

Whenever we ask for personal data, we promise to:

only ask for the information we need
keep it safe and make sure nobody can access it unless authorised
make sure we do not keep the data longer than needed
only share the data with other organisations for legitimate purposes
consider any request you make to correct, stop storing or delete your personal data

We also promise to make it easy for you to:

tell us at any time if you want us to stop storing your personal data
make a complaint with the supervisory authority

How we manage online sessions

This service can be used to make a prison visit request. Your session is active for 20 minutes even if you close your browser, or navigate away from this service. During this time, personal information about you may be visible to anyone with access to your computer.

Your data is held in memory during the duration of the session; this is cleared after 20 minutes of inactivity.

More information

You can get more details on:

agreements we have with other organisations for sharing information
when we can pass on personal information without telling you, for example, to help with the prevention or detection of crime or to produce anonymised statistics
instructions we give to staff on how to collect, use or delete your personal information
how we check that the information we hold is accurate and up-to-date
how to make a complaint

For more information about the above issues, please contact:

MoJ Data Protection Officer
Post point 10.38
102 Petty France
London
SW1H 9AJ

or email: data.compliance@justice.gov.uk

For more information on how and why your information is processed please see the information provided when you accessed our services or were contacted by us.

Complaints

When we ask you for information, we will keep to the law. If you think that your information has been handled incorrectly, you can contact the Information Commissioner for independent advice about data protection at:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Tel: 0303 123 1113
www.ico.org.uk