This page explains what kind of personal information the Government Equalities Office (GEO) holds about you, how it's protected and how you can find out about it.
What personal information GEO holds about you
GEO hold the following information about you if you create an account to report gender pay gap data:
- your personal details: your name, email address, job title and telephone number
- whether you've signed up to be contacted for feedback purposes or information on closing your gender pay gap
GEO also hold the following information about the responsible person required to authorise gender pay gap returns for your organisation:
- their name and job title
We use your personal data to enable the creation of user accounts, and to publish data about responsible persons in line with our legal obligations.
Legal basis of processing
For publication of the name and job title of the responsible person:
Processing is necessary to comply with a legal obligation placed on us as the data controller under regulation 15(2) of the Equality Act 2010 (Gender Pay Gap Information) Regulations 2017.
For processing of user account data:
Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller, in particular:
Allowing the submission by employers with more than 250 staff in England, Scotland and Wales of gender pay gap data as part of the regulations under section 78 of the Equality Act 2010. The specific regulations are:
- The Equality Act 2010 (Gender Pay Gap Information) Regulations 2017 and
- Equality Act 2010 (Specific Duties and Public Authorities) Regulations 2017
How long GEO keeps your personal data
When you create an account you will be sent an email with a verification link. You will need to verify your account within seven days otherwise we will securely delete all your personal details.
Once you have verified your account, we will keep your personal data for three calendar years from the date you last signed in. If you do not sign in within three years we will permanently delete all personal identifiable data. We will warn you a month/week before we delete your data.
In addition to this, we will retain audits of account activity as long as we have an ongoing legitimate business need to do so.
A legitimate business needs means:
- That we have a need to retain your details in order to provide services to you or to your organisation.
- The law requires us to provide these services
Information we publish about the name and job title of the responsible person will be retained indefinitely.
Sharing your information
The name and job title of responsible persons will be published.
If you register as a user on behalf of your organisation, your name will be shared with other Gender Pay Gap service users registered to report for your organisation. Your name will not be shared with any other users.
Your information will be shared with our mail and email service providers where this is needed to process your registration. It will also be shared with our hosting suppliers and third party IT support companies for the purposes of managing the site. It will also be shared with the Department for Education who currently provide some IT services for us.
Your information may be shared with the Equalities and Human Rights Commission (EHRC). EHRC have the power to investigate any breaches of the regulations.
There are some cases when your information can be shared for other reasons, e.g. to prevent crime, respond to legal obligations or cooperate with public inquiries.
Where personal data have not been obtained from you
Your personal data were obtained by us from your employer or organisation.
- You can ask to see and rectify the personal information GEO holds about you. Users can do this by logging into their account on the gender pay gap service via the manage account page.
- In certain circumstances, you may also object to or restrict the processing of your data by GEO by making a request to the firstname.lastname@example.org mailbox.
- You may delete your account within the GPG service, however GEO may retain details about your account in line with legitimate business needs and your rights under the General Data Protection Regulation.
The data controller for your personal data is the Cabinet Office.
The contact details for the data controller are:
or 0207 276 1234, or email@example.com.
The contact details for the data controller’s Data Protection Officer are:
Data Protection Officer
The Data Protection Officer provides independent advice and monitoring of Cabinet Office’s use of personal information.
How to make a complaint
If you're unhappy with the way GEO handled your personal information, you can write to:
firstname.lastname@example.org or in writing to:
Government Equalities Office
6th Floor, Sanctuary Buildings,
Great Smith Street,
If you consider that your personal data has been misused or mishandled, you may make a complaint to the Information Commissioner, who is an independent regulator.
The Information Commissioner can be contacted at:
Information Commissioner's Office
or 0303 123 1113, or email@example.com.
Any complaint to the Information Commissioner is without prejudice to your right to seek redress through the courts.