Data & Privacy

1. Introduction

The Service Police Complaints Commissioner (SPCC) is committed to protecting and respecting your privacy. This policy explains how we collect, use, store, and protect your personal data in accordance with UK GDPR and the Data Protection Act 2018.

2. Data we collect

Identity Data, Contact Data, Technical Data, Usage Data.

3. How we collect your data

Direct interactions, automated technologies, third-party sources (including referrals from the Ministry of Defence or wider service police bodies).

4. Legal basis for processing

Consent, Contract, Legal obligation, Legitimate interests.

5. How we use your data

We use your data to provide services, communicate accurately, improve the user experience and comply with legal requirements for this service.

6. Data sharing

We do not sell your data. Data is shared only with service providers, legal authorities, or during business transfers as required to support legitimate activities required by the SPCC. All data is processed with the UK. 

7. International transfers

Appropriate safeguards such as Standard Contractual Clauses or adequacy decisions are in place. All data is hosted within the UK and not shared outside of this region.

8. Data retention

Data retained only as long as necessary or required by GDPR and the UK Data Protection Act 2018. 

9. Your rights

You are entitled to access, rectification, erasure, restriction, data portability, object, or withdraw your consent at any time. 

10. Cookies

We use cookies to enhance your experience. See our separate cookie policy which reflects the actual cookies in use across the site.

11. Security

Technical and organisational measures are implemented to protect data. We use secure data hosting within the UK and are compliant with a number of security standards including ISO 27001 and Cyber Essentials Plus. This website (https://www.thespcc.org.uk/) has also been independently penetration tested by a third-party supplier, with all remedial items completed ahead of the site being launched to the public

12. Complaints

Contact the ICO at https://ico.org.uk if unhappy with data handling, or the SPCC directly via https://www.thespcc.org.uk/contact-us.

13. Contact us

Email: people-dpt-spcc-enquiries@mod.gov.uk

Address: Office of the Service Police Complaints Commissioner, 6.B.50, Ministry of Defence Main Building, Horse Guards Avenue, London, SW1A 2HB