Privacy Policy

This privacy policy relates to the information we store about you as an Internal API portal user, part of the “Find and Use an API” service. It does not relate to the privacy of the end users of any application you develop; under our terms and conditions you are responsible for the information stored by your application.

We hold information about you as a software developer on the EU General Data Protection Regulation (GDPR) lawful basis of 'public task' so that we can run the Internal API portal as a service to you.

We do not knowingly hold personal information on children under the age of 16. The Internal API portal is not for use by children under this age.

We will email you if we update our privacy policy.

Your information

When you use the Internal API portal, we collect:

your personal details including name and email address
information about your applications and the email addresses of your colleagues who access them
your IP address, and details of which version of web browser you use
information on how you use our site, based on cookies and page tagging techniques
any questions, queries or feedback you leave, including your email address, if you contact our support team

How we use your data

We use your personal information:

to create your account on the Internal API Portal
to make sure your account works properly
to send you service updates and notices
in a customer relationship management tool to help us manage our obligations to you

How we protect your data

We comply with the GDPR to protect your personal information.

We will:

tell you why we need the information
only ask for what we need
make sure no one has access to it who should not
only keep the information for as long as we need it
not make it available for commercial use

Our staff are trained in handling information and understand how important it is to protect personal and other sensitive information.

When you close your account, we will:

delete your personal information
keep audit records of your user account activity for up to 6 years

If you want us to delete all the information we hold about you, email our support team.

Asking to see your information

If you want to see the personal information we hold about you:

email our support team to find out which Department for Education office to contact
address your GDPR request to the data protection officer

There is no charge for this.

Sometimes we can withhold information, for example to protect national security.