Cookies on

Cookies are small files stored on your device when you visit a website. We use some essential cookies to make this website work.

We would like to set additional cookies to remember your settings and understand how you use the site. This helps us to improve our services.

You have accepted all additional cookies. You have rejected all additional cookies. You can change your cookie preferences at any time.

Skip to main content

Privacy notice


This privacy notice is for

Data we collect

We collect information about how you use the ONS Service Manual to help us improve the site and make sure it is meeting the needs of its users.

We collect information on:

  • the pages you visit
  • how long you spend on each page
  • how you got to the site
  • what you click on while you are visiting the site
  • how you interact with a page
  • your Internet Protocol (IP) address

Google analytics

We use cookies and page tagging techniques through software such as Google Analytics to collect this information.

We do not store your personal information through Google Analytics (for example, your name or address). We do not allow Google Analytics to use or share data about how you use the site. We will not identify you through analytics information, and we will not combine analytics information with other datasets in a way that would identify who you are.


We use cookies to monitor the way in which you interact with this website so that we can improve it.

For more information about these cookies, see our cookie policy.


This website contains embedded YouTube videos.

YouTube sets their own cookies through these embedded videos. For more information, see our cookie policy.


This website contains embedded Vimeo videos.

Vimeo set their own cookies through these embedded videos. For more information, see our cookie policy.


We use a third-party provider, Hootsuite (opens in a new tab) , to manage our social media interactions.

If you send us a private or direct message through social media, the message will be stored by Hootsuite for three months. It will not be shared with any other organisations.

Other websites

This site contains links to other websites. The ONS is not responsible for the privacy practices or the content of such websites.

If you go to another website from this one, read the privacy policy on that website to find out what it does with your information.

If you come to from another website, we may receive personal information from the other website. You should read the privacy policy of the website you came from to find out more about this.

Why we need your data

We collect anonymised information through Google Analytics to help:

  • make sure the site is meeting the needs of its users
  • make improvements to the website

We also collect data to:

  • gather feedback to improve our services
  • respond to any feedback you send us, if you have asked us to
  • monitor use of the site to identify security threats

Our legal basis for processing anonymised data for Google Analytics is your consent.

Our legal basis for processing all other personal data is that it is necessary:

  • to perform a task in the public interest
  • in the exercise of our functions as a government department

What we do with your data

The data we collect may be shared with our technology suppliers, for example, our hosting provider.

We will not:

  • sell or rent your data to third parties
  • share data with third parties for marketing purposes

How long we keep your data

We will only retain your access log data for 12 months, after which it will be deleted.

Where your data is processed and stored

We design, build and run our systems to make sure that your data is as safe as possible while it is being processed and when it is stored.

All personal data is stored in the European Economic Area (EEA) (opens in a new tab) . Data collected by Google Analytics may be transferred outside the EEA for processing.

How we protect your data and keep it secure

We are committed to doing all that we can to keep your data secure.

We have set up systems and processes to prevent unauthorised access or disclosure of your data. For example, we protect your data using varying levels of encryption.

We also make sure that any third parties that we deal with keep all personal data they process on our behalf secure.

Your rights

You have the right to request:

  • information about how your personal data is processed
  • a copy of the personal data we keep
  • that anything inaccurate in your personal data is corrected

You can also:

  • raise an objection about how your personal data is processed
  • request that your personal data are erased if there is no longer a justification for it being kept
  • ask that the processing of your personal data is restricted in certain circumstances

If you would like to exercise any of these rights, contact us.

Contact us

If you have any of these requests, contact (opens in a new tab) .

Contact the Data Protection Officer (DPO)

You should contact the DPO if you:

  • have a question about anything in this privacy notice
  • think that your personal data have been misused or mishandled

You can contact the DPO:

Changes to this policy

We may change this privacy policy. In that case, the “Last updated” date at the top of this page will also change. Any changes to this privacy policy will apply to you and your data immediately.

If these changes affect how your personal data is processed, we will take reasonable steps to let you know.

Report a security vulnerability

For information on how to report a vulnerability at HackerOne, see our vulnerability disclosure policy (opens in a new tab) .

Help improve this page

Let us know how we could improve this page, or share your user research findings. Discuss this page on GitHub (opens in a new tab)