Privacy & Cookie Policy

MSDUK's Benchmarking Tool is provided by MSDUK, a Non-profit. MSDUK is the data controller for this site. A data controller determines how and why personal data is processed.

What data we collect

The personal data we collect from you includes:

  • questions, queries or feedback you leave, including your email address if you contact us
  • your email address and subscription preferences when you sign up to our email alerts
  • information submitted to MSDUK including company name, contact points, URL links, company information will be stored on the host server unless we receive information to delete the listing, which will be completed within 7 days from the date of request
  • your Internet Protocol (IP) address, and details of which version of web browser you used
  • information on how you use the site, using cookies and page tagging techniques

We use Google Analytics software to collect information about how you use this site. This includes IP addresses. The data is anonymised before being used for analytics processing.

Google Analytics processes anonymised information about:

  • behaviour patterns and the pages you visit on this microsite
  • how long you spend on each site page
  • how you got to the site (website search engines, organic, referrals)
  • what you click on while you’re visiting the site
  • operating systems and choice of web browser
  • devices used to view the site
  • sessions by country / region
  • users by time of day

We do not store your personal information through Google Analytics (for example your name,  address). Google Analytics uses cookies to help gather statistics on how people use websites. For example, which country the user is from, and which pages are visited while on the website. A cookie is a small text file passed to your computer, mobile phone or other device, through your web browser, so the website remembers who you are when you return.

We use this information to look at how this website is being used so we can assess how well it is working and to help us make decisions about how to improve it.

We will not identify you through analytics information, and we will not combine analytics information with other data sets in a way that would identify who you are.

Cookies may also be used by some parts of the site where we utilise third-party services, such as YouTube for video content. These cookies are managed by these external sites, and no personal data is shared between MSDUK and its partners.

If you do not wish to have cookies stored on your computer you can easily change your web browser to refuse them, or to let you know when you get a new cookie. You need to refer to your internet browser’s instructions by clicking on the Help menu. Refusing cookies, however, can restrict your use of websites. To enjoy the website to the full we recommend you leave cookies switched on.

We continuously test and monitor our data protection controls to make sure they’re effective and to detect any weaknesses.

Why we need your data

We collect information through Google Analytics to see how you use this site. We do this to help:

  • make sure the site is meeting the needs of its users
  • make improvements

We also collect data in order to:

  • gather feedback to improve our services
  • respond to any feedback you send us, if you’ve asked us to
  • send email alerts to users who request them
  • provide you with information
  • monitor use of the site to identify security threats

Our legal basis for processing your data

The legal basis for processing personal data in relation to site security is our legitimate interests and the legitimate interests of our users in ensuring the security and integrity of this microsite. The legal basis for processing anonymised data for Google Analytics is your consent.

The legal basis for processing all other personal data is that it’s necessary:

  • to perform a task in the public interest
  • in the exercise of our functions as a non-departmental public body

What we do with your data

The data we collect may be shared with other government departments, agencies and public bodies. It may also be shared with our technology suppliers, for example our hosting provider. Where we need to share your personal data with others, we ensure that this data sharing complies with data protection legislation.

We will not:

  • sell or rent your data to third parties
  • share your data with third parties for marketing purposes
  • use your data in analytics

We will share your data if we are required to do so by law – for example, by court order, or to prevent fraud or other crime.

How long we keep your data

We will only retain your personal data for as long as:

  • it is needed for the purposes set out in this document
  • Data will be reviewed and where possible deleted on a six-monthly review basis
  • after which point, your personal data will be securely destroyed.

Please note that, under Data Protection legislation, and in compliance with the relevant data processing conditions, personal data can be kept for longer periods of time when processed purely for archiving purposes in the public interest, scientific or historical research, and statistical purposes.

Children’s privacy protection

Our services are not designed for, or intentionally targeted at, children 13 years of age or younger. We do not intentionally collect or maintain data about anyone under the age of 13.

Where your data is processed and stored

We design,  build and run our systems to make sure that your data is as safe as possible at all stages, both while it’s processed and when it’s stored. All personal data is stored in the UK. Data collected by Google Analytics data may be transferred outside the UK for processing.

How we protect your data and keep it secure

We are committed to doing all that we can to keep your data secure. We have set up systems and processes to prevent unauthorised access or disclosure of your data – for example, all site data in transit will be encrypted and protected by SSL. We also make sure that any third parties that we deal with keep all personal data they process on our behalf secure.

Your rights

You have the right to request:

  • information about how your personal data is processed
  • a copy of that personal data
  • that anything inaccurate in your personal data is corrected immediately

You can also:

  • raise an objection about how your personal data is processed
  • request that your personal data is erased if there is no longer a justification for it ask that the processing of your personal data is restricted in certain circumstances
  • if you have any of these requests, get in contact with our Privacy Team.

Links to other websites

MSDUK's Benchmarking Tool contains links to other websites. This privacy notice only applies to https://benchmarkingtool.msduk.org.uk and does not cover other sites that we link to.

Following a link to another website

If you go to another website from this one, read the privacy policy on that website to find out what it does with your information.

Following a link to this microsite from another website

If you come to https://benchmarkingtool.msduk.org.uk from another website, we may receive personal information from the other website. You should read the privacy policy of the website you came from to find out more about this.

How to contact us

Please address any comments, questions or requests about your Data to diversity@msduk.org.uk  or we can be contacted at MSDUK, Studio 5, Phoenix square, 3 Burton Street, Leicester, LE1 1TB, United Kingdom.

Right to lodge a complaint

Where we are processing your personal data with your consent, you have the right to withdraw that consent. If you change your mind, or you are unhappy with our use of your personal data, please let us know by contacting  diversity@msduk.org.uk  or at: MSDUK, Studio 5, , Phoenix square, 3 Burton Street, Leicester, LE1 1TB, United Kingdom.

Alternatively, you have the right to raise any concerns with the Information Commissioner’s Office (ICO) via their website at https://ico.org.uk/concerns/.

Last updated

We may need to update this privacy notice periodically, so we recommend that you revisit this information from time to time. This version was last updated on 4th June 2021.

Contact info:

If you have any questions about how your personal information will be used, please contact us at contacting  diversity@msduk.org.uk  or at: MSDUK, Studio 5, Phoenix square, 3 Burton Street, Leicester, LE1 1TB, United Kingdom. For the Data Protection Officer (DPO) please contact us via gov.uk and mark it for the attention of the ‘DPO’.