Quick Exit

General Information

This privacy notice tells you what you can expect the Inquiry to do with your personal information when you make contact with us.

We’ll tell you:

  • Why we are processing your information

  • What information we require

  • Why we need to process your information

  • What we do with your information

  • How long we will keep your information

  • Your rights relating to the personal information we hold

The first part of this notice is general information for everybody.

Controller’s Contact Details

The Independent Inquiry into Child Sexual Abuse is the data controller for the personal information we process, unless otherwise stated.

The scope and terms of reference of the Inquiry are set out on our website

There are several ways you can contact us, including by phone, web form, email and post. More details can be seen here.

Our postal address is:

Freepost IICSA Independent Inquiry

Information line number: 0800 917 1000

For general enquiries please email contact@iicsa.org.uk.

DPO Contact Details

If you have any questions about anything in this document, would like to exercise your data protection rights or think your personal data has been misused or mishandled, you can contact the Data Protection Officer (DPO).

The Data Protection Officer can be contacted by email, phone or post.

dpo@iicsaorg.uk

Data Protection Officer Freepost IICSA Independent Inquiry

020 3789 2136

Where we keep your personal information

We keep your information secure and only share it with those who have a need to see it. All personal information we receive is handled fairly and lawfully in line with data protection legislation. For our investigations, personal information is included as part of the evidence received.

We design, build and run our systems to make sure that your data is as safe as possible at any stage, both while it’s processed and when it’s stored.

Your personal data may, throughout the course of its processing, be transferred outside of the Eurpoean Economic Area (EEA). Where this is the case, all appropriate technical and legal safeguards will be put in place to ensure that you are afforded the same level of protection as within the EEA.

How long we keep your personal information

Where you use the form to submit information on the Independent Inquiry into Child Sexual Abuse website, we will record your email address and other information you provide, for the purpose of entering into correspondence with you about the matters raised in your form but there is no obligation to share any personal information with IICSA.

All personal details and accounts of child sexual abuse provided to us by those wishing to share their experience through the Truth Project, either in writing or in person, will be securely destroyed at the close of the inquiry.  

Anonymised versions of accounts of child sexual abuse will be published, with permission of those who provide them, on our website. Otherwise, the records of the work of the inquiry will be permanently preserved at The National Archives, in accordance with their guidance, including the evidence used in our hearings and reports, anonymised data used by our Research team, and the website.

Your data protection rights

Under data protection law, you have rights over your personal data. The rights available to you depend on our reason for processing your information.

  • Your right of access You have the right to ask us for copies of your personal information. This right applies for all processing. There are some exemptions, which means we may not always be able to provide all the information we process.

  • Your right to rectification You have the right to ask us to correct information you think is inaccurate or to complete information you think is incomplete. This right always applies.

  • Your right to erasure You have the right to ask us to erase your personal information in certain circumstances. The Inquiry is required to retain some information but will remove as much information as possible following an erasure request.

  • Your right to restrict processing If you have concerns about the accuracy of your information, or about how it is being used, you have the right to restrict the processing until your concerns have been resolved.

  • Your right to object to processing You have the right to object to processing when we are processing you personal information to perform our public task. If you wish to object to processing, the Inquiry will assess whether the requirements of the public task outweigh the grounds of the objection and the DPO will inform you of the outcome of the assessment.

You are not required to pay any charge for exercising your rights. We have one month to respond to you.

Please contact dpo@iicsa.org.uk if you wish to make a request or contact our information line on 0800 917 1000.

Sharing your information

In accordance with our Terms of Reference, the Inquiry has a duty to pass on to the police any allegations about child abuse. These are shared with Operation Hydrant, a national policing team, which was set up in 2014 to coordinate the investigation of non-recent child sexual abuse. Operation Hydrant is independent of the Inquiry and does not have any direct access to Inquiry data or information. It acts as the conduit between the Inquiry and local police forces in England and Wales and does not investigate any allegations itself.

The Inquiry will pass your name and contact details to the police if you agree for us to do so. However, we will have to pass on your name and contact details without your agreement to the police or other relevant authorities if we believe there is a child protection concern or someone is at risk of serious harm.

The Inquiry might receive a request to disclose the information we hold relating to what you share with us, if you are involved in criminal proceedings. For example, information might be requested by either the prosecution or defence teams where an individual is being prosecuted for child sexual abuse. We will only pass this information on with your consent, or if we are ordered by a court to do so.

We share documents received as part of the Inquiry's investigation with core participants and redactions are applied in accordance with the Inquiry's Protocol on the Redaction of Documents. Material that is adduced during the Inquiry's public hearing and relied upon by the Panel in their reports is also published on the Inquiry's website.

We use data processors who are third parties who provide elements of services for us. We have contracts in place with our data processors. This means that they cannot do anything with your personal information unless we have instructed them to do it. They will not share your personal information with any organisation apart from us. They will hold it securely and retain it for the period we instruct.

Your right to complain

The Independent Inquiry into Child Sexual Abuse works hard to protect your information and maintain high standards when it comes to processing your personal information. If you have any queries or concerns, please contact us at dpo@iicsa.org.uk.

If you remain concerned about how your personal information is being processed, you can make a complaint to the ICO as the UK supervisory authority.

Managing contact

We may impose a restriction on your access to the Inquiry if it’s necessary to protect our staff from unacceptable behaviour.

If we do this, we’ll explain the restriction we have applied and why we feel it’s necessary. We’ll create a record of the restriction for administration purposes, so relevant staff members know the restriction is in place. This will include your name, contact details and a description of why we have imposed a restriction.

The legal basis we rely on to process your personal data in this way is article 6(1)(e) of the GDPR, which allows us to process personal data when this is necessary to perform our public task. You have the right to object to our processing of your personal data for this reason, however there are legitimate reasons why we may refuse your objection.

The decision to impose a restriction will be taken, and reviewed, by a manager. We’ll write to you explaining why we’ve applied the restriction and we’ll review the restriction periodically. If you no longer communicate with us or if your behaviour has changed, we’ll remove the restriction.

How you can contact us

  • Calling our information line We use a third party provider, Victim Support, to supply and support our information line. These calls will be recorded and a summary provided to IICSA through a secure electronic transfer system, Egress. We also hold statistical information about the calls we receive, but this does not contain any personal data.

  • Sending us post When you send us post a third party screening service, Swiss Post, will scan your mail. They will not open the mail unless there is a significant concern to investigate.

Visitors to our website

  • Analytics When you visit www.iicsa.org.uk, we use a third-party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of our site. This information is only processed in a way that does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website.

    We do collect personal data through our Expression of Interest form, but we’re upfront about this. We make it clear that we’re collecting personal information and explain what we intend to do with it.

  • Cookies You can read more about how we use cookies on our Cookies page. We use a cookies tool which requires explicit opt in action by users of our website. This applies to the non-necessary cookies. Any necessary cookies for functionality and security are not deleted by the tool.

     

Your privacy

There are very limited circumstances where we tell anyone your name without your consent, for example if a child is currently at risk and we need to tell the police.