This privacy policy relates to the information we store about you as a Find and Use an API user. It does not relate to the privacy of the end users of any application you develop; under our terms of use you are responsible for the information stored by your application.

We hold information about you as a software developer under the EU General Data Protection Regulation (GDPR) lawful basis of 'public task'. This is so that we can run Find and Use an API as a service to you.

We do not knowingly hold personal information on children under the age of 16. Find and Use an API is not for use by children under this age.

We will email you if we update our privacy policy.

Your information

When you use the Find and Use an API service, we collect:

  • your personal details including name, email address and sometimes the name of your organisation
  • your IP address, and details of which version of web browser you used
  • information on how you use our site, based on cookies and page tagging techniques
  • any questions, queries or feedback you leave, including your email address, if you contact our support team

How we use your data

We use your personal information:

  • to create your account on the Find and Use an API service
  • to make sure your account works properly
  • to send you service updates and notices
  • in a customer relationship management tool to help us manage our obligations to you

We do not share your information with anyone else.

How we protect your data

We comply with the GDPR to protect your personal information.

We will:

  • tell you why we need the information
  • only ask for what we need
  • make sure no one has access to it who should not
  • only keep the information for as long as we need it
  • not make it available for commercial use

Our staff are trained in handling information and understand how important it is to protect personal and other sensitive information.

When you close your account, we’ll:

  • delete your personal information
  • keep audit records of your user account activity for up to 6 years

If you want us to delete all the information we hold about you, use our contact us form.

Asking to see your information

If you want to see the personal information we hold about you:

  • use our contact us form to find out which Department for Education (DfE) office to contact
  • address your GDPR request to the data protection officer

There is no charge for this.

Sometimes we can withhold information, for example to protect national security.

Third party integration

We use third party software to help us improve your experience on the Find and Use an API service, including Azure App Insights

We may collect your:

  • device's IP address
  • device screen resolution
  • device type (unique device identifiers), operating system, and browser type
  • geographic location (city and country only)
  • preferred page display language
  • referring domain
  • pages visited
  • preferred language used to display the webpage
  • date and time when website pages were accessed
  • mouse events (movements, location and clicks)
  • key presses

We will store this information in a way that it cannot be used to identify you.