The Data Protection Act 1998 covers the services provided by the DfT through the Code of Everand game. The Data Controller for this website is the Department for Transport.

The purpose of this policy is to inform users of the Code of Everand website, which is managed by the Department for Transport, about the information that is collected from them when they visit this site, how this information is used, if it is disclosed and the ways in which we protect users' privacy.

If the privacy policy changes in any way, we will place an updated link on this page. Regular updating of this page ensures you are always aware of what information we collect, how we use it and under what circumstances, if any, we will share it with other parties.

The Data Protection Act 1998 establishes rights for individuals who disclose their personal information - where personal information is widely defined - to any organisation for any purposes involving processing of that information. Any organisation which processes information about living individuals is a data controller for the purposes of the Act; that is a person who determines the purposes for which and the manner in which any personal data are, or are to be, processed. A data controller is required by the Act to ensure that the data subject has, is provided with, or has made readily available to him certain specified information, including the data controller's identity, the identity of any other person to whom he may disclose the information, and the purpose or purposes for which the data are intended to be processed.

The data controller in relation to this website is the Department for Transport. The purposes for which the data are intended to be processed are as follows:

1. Comments, questions and feedback
If you send an enquiry by e-mail to either a specific contact or a general enquiry address identified on the DfT or Code of Everand website, we will only use your personal details obtained from your enquiry to respond to your query or improve the site.

2. E-mail alert services sign up
We do not allow third-party companies to solicit or advertise to our users. Our intention is to keep Code of Everand free from any direct advertising.

3. Site usage information
i) Cookies
Cookies are pieces of data that are often created when you visit a web site and are stored in the cookie directory of your own computer.
Cookies are used by the Code of Everand to enable Google Analytics to define user sessions and, in turn, provide meaningful reports about the behaviour of visitors to the website. Google Analytics cookies do not collect personal data about website visitors, nor can they be used to identify individual users.
ii) Log files and logging
Log files and logging allow us to record visitors' use of the site. DfT puts together log file information from all our visitors. Log files are records of the visits made to the site, including email addresses, usernames and Internet Protocol (IP) addresses. Log files therefore effectively contain personal information about you and the areas of the website that you have visited. We may use email addresses and usernames to track usage and to ensure users are following the site's Terms of Use. In addition, we may use an email address and user name to ban a user temporarily or permanently from the Code of Everand website if that user engages in inappropriate conduct on the site. We do not make any other use of this personal information, nor do we pass it on to any other organisation.

As a data subject, you have various rights under the Data Protection Act 1998, including a right of access to any personal data being held about you by DfT as data controller. DfT will supply you with details of any personal data we are holding about you if you submit a request 'subject access request'. To find out more, please see How to make a request under the Data Protection Act.

For further help about this web site please contact the support@codeofeverand.com e-mail account.

You can find out if we hold any personal information about you by making a "subject access request" under the Data Protection Act (DPA). If we do hold information about you we will:

• give you a description of it
• tell you why we are holding it
• tell you why we are holding it
• tell you who it could be disclosed to
• and let you have a copy of the information in an intelligible form.

To help us give you the information you want, we need you to tell us which part of our Department you have been dealing with and why you believe we hold that information. If you think the information is held by one of our agencies, you should send your request direct to that agency.

To make a request to central DfT, please send your Subject Access Request to the:

Data Protection Officer
Department for Transport
D/04, Ashdown House
Sedlescombe Road North
St Leonards on Sea
East Sussex, TN37 7GA

You will need to provide two forms of identification (e.g. passport, driving licence).

If you prefer, you may email your request to Informationhandling@dft.gsi.gov.uk but we would also need you to post your proof of identification to the above address. We regret we are unable to accept requests by telephone.

We will then aim to complete your request within 40 days of us receiving sufficient information for us to locate your personal data.