Skip to content

Privacy statement

We take our responsibility to look after personal data very seriously and we ensure that respecting privacy is at the heart of all we do.

someone reading

Like all organisations who collect and use personal data, Sport England is subject to the requirements set out in the General Data Protection Regulation (‘GDPR’). Our privacy statement explains how Sport England collects, uses and looks after personal data.  Personal data is any information relating to an identified or identifiable living person. This definition of this may be found in the Data Protection Act 2018. 

We have robust policies and procedures in place, including a Data Protection Policy and File Retention Schedule. We have also adopted a ‘Privacy by Design’ approach across the organisation and this helps to ensure that we consider the privacy implications of all our projects, IT systems, and day-to-day work. In addition, Sport England has an appointed a Data Protection Officer to oversee our approach to data protection and privacy. Our DPO can be contacted by emailing dpo@sportengland.org.

The data protection principles

The GDPR includes six principles that organisations must apply when they collect and use personal data. These principles are:

  • Personal data must be processed in a manner which is lawful, fair and transparent. This means that when we collect and use personal information we must have a lawful basis for doing so, we must consider the rights and interests of the person the data is about, and provide clear information about our use of the data.
  • Personal data must be collected for specified, explicit and legitimate purposes and not used in any ways which are incompatible with those purposes. When we collect personal data we must be very clear about why we need it and what we'll do with it. If we collect personal data for one purpose may not use it for an unconnected purpose.
  • Personal data we collect must be adequate, relevant and limited to what is necessary for the purposes for which it is used. This means must make sure that we only collect and use personal data that is strictly necessary for our stated purpose or purposes.
  • Personal data must be accurate, and where necessary, kept up to date. We are required to take all reasonable steps to ensure that the personal data held is correct and kept up to date. This means that from time to time, we'll review the personal data we hold and we may contact you to make sure the personal data we have about you is current and does not contain any errors.
  • Personal data must be kept in a format which allows identification for no longer than is necessary for the purposes for which it is used. In some cases, it may only necessary for us to be able to directly identify an individual for a short period of time. When we no longer need to be able to identify an individual we will anonymise the personal data. Where personal data is anonymised and the data subject in no longer identifiable that data will cease to be personal data.   
  • Personal data must be used in a manner that ensures appropriate security of the data. This means that our policies, procedures, systems and working practices must ensure that personal data is protected from unlawful access and is kept secure at all times.

Lawful basis

Before we collect and use personal data, Sport England must be able to demonstrate that there is a lawful basis for us to do so. GDPR provides six lawful bases for processing personal data:

  • Consent: when you have explicitly told us that we may collect and use your personal data – for example by asking us to add you to one of our mailing lists.
  • Contract: when we need to collect and use personal data to enter into or perform a contract – for example if you receive funding from us.
  • Legal obligation – when we need to collect and use personal data to carry out our legal duties – for example to respond to a request for information under the Freedom of Information Act.
  • Vital interests: when we need to collect and use personal data to protect your vital interests or the vital interests of another person – for example by contacting the relevant authorities if we believe an individual is likely to come to immediate harm.
  • Public task: when we need to collect and use personal data to carry out one of our official tasks, or a task that's in the public interest – for example when we carry out surveys about sports participation to create official statistics.
  • Legitimate interests: when we need to collect and use personal data to pursue the legitimate interests of Sport England or a third party, unless doing so would interfere with your rights and freedoms – for example when we're dealing with complaints about an organisation we have funded.

Our lawful basis for collecting and using personal data varies depending on why we have collected it and what we'll do with it. Whenever Sport England collects personal data directly from you we aim to set out our lawful basis as clearly as we can using pop-up messages, or links to the information you need. If we receive personal data about you from a third party, we'll use reasonable efforts to identify our lawful basis and to inform you of this where it's possible and practical for us to do so.

Why we need to collect personal data

Sport England collects and uses personal data for a variety of purposes including:

  • Staff selection and recruitment
  • Grant application submission and assessment
  • Grant monitoring and evaluation
  • Research into physical activity
  • Responding to correspondence from members of the public
  • Managing requests to be added to a Sport England mailing list
  • Complying with regulatory and financial requirements
  • Promoting and encouraging participation in sport and physical activity.

When we collect personal data directly from you, we'll provide specific and detailed information about why we need to do so.

About the personal data we collect and use

Sport England collects a range of personal data including:

  • Names and contact details (including postal and email addresses and telephone numbers)
  • Biographical information such as participation in sport, membership of sports clubs and interest in, or opinions.
  • Information about ethnicity, sexual orientation, health related data or other special category personal data where it's necessary and relevant for a specific purpose
  • Photographs, including for publicity or promotional purposes.

When we collect and use personal data directly from you, we aim to provide specific and detailed information about the categories of personal data involved.

Collecting personal data about children

We do not knowingly collect personal data about children under the age of 13. If you become aware that a child has provided us with their personal data without the consent of the parent or guardian we would ask you to contact our Data Protection Officer straightaway so that we can address the matter.

How we share personal data

Relevant Sport England colleagues, suppliers and subcontractors will have access to your personal data for the purpose(s) it was collected for. When suppliers and subcontractors have access to your personal data, Sport England will still be responsible for decisions about how your personal data is used.

In some cases, where there is a lawful basis for us to do so we may share personal data with third parties such as the Department for Digital, Culture, Media and Sport, external auditors, the Information Commissioner’s Office, the Parliamentary and Health Service Ombudsman or other trusted partners, including NGBs and funded organisations. Where possible we'll tell you if your personal data will be shared, and the third parties the data be shared with, at the time we collect your personal data.

If we're required by law to disclose personal data we will do so, in keeping with our obligations.

We do not routinely transfer personal data outside to any third countries outside the European Economic Area (or ‘EEA’). However, if you've asked us to send you one of our newsletters, we use a third party to administer the mailouts. This third party is currently based in the USA.

Sport England never sells personal data to third parties for any purpose, and we do not collect or compile personal data for dissemination to third parties for marketing purposes.

How we look after your personal data

We have a number of ICT and Information Governance procedures in place which set out the technical and organisational measures we take when collecting and using personal data. If you'd like to find out more about these policies and procedures please contact our Data Protection Officer.

Personal data is held securely within Sport England’s IT environment, or in our trusted third-party hosting providers’ secure systems. Where personal data is held on third party hosting providers’ secure systems, it's stored according to our instructions and in accordance with the contracts we have in place.

How long we keep personal data

All the personal data that we collect and hold is kept in accordance with our File Retention Schedule. This Schedule is guided by the legislative and regulatory frameworks we are subject to and helps us to ensure that we do not keep personal data for longer than is necessary for the purpose(s) it was collected for.

Your rights

The GDPR gives individuals a number of rights in relation to any personal data an organisation holds about them and it is Sport England’s policy to make it as easy as possible for people to exercise these rights.

Subject access

Under GDPR all individuals are entitled to be told what personal data an organisation holds about them, and to receive copies of that information, free of charge, within one month.

You can make a subject access request to Sport England by contacting the Information Governance Manager:

dpo@sportengland.org

Rectification and erasure

If you believe that Sport England is holding inaccurate information about you, you're entitled to ask us to rectify that data. In addition, if you believe that Sport England no longer has a lawful basis to use your personal data, you can ask us to delete it.

The right to rectification and erasure is not absolute, but we will consider any requests carefully and comply with such requests where it's appropriate for us to do so. You can ask to have your personal data rectified or erased by contacting the Information Governance Manager:

dpo@sportengland.org

Withdrawing consent

If our lawful basis for collecting and using your personal data was consent, then you're entitled to withdraw that consent at any time. You do not need to give a reason for withdrawing your consent and we are required to comply promptly. You can inform us that you wish to withdraw consent by contacting the information Governance Manager:

dpo@sportengland.org

Complaints

If you're in any way dissatisfied with the way we have handled your personal data, Sport England provides a Complaints Procedure, which can be found towards the bottom of this page.

In addition, regardless of whether you make a complaint under our Procedure you're entitled to lodge a complaint about our data handling practices with the Information Commissioner by writing to:

The Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

www.ico.org.uk

Changes to our privacy statement

We keep our approach to privacy under close review, and this means we may update our privacy statement from time to time. Updates to the privacy statement are published on our website.

Newsletter data privacy information

Sport England is a public body that works to encourage as many people as possible to become and remain physically active. Our head office is based at 21b Bloomsbury Street London, WC1B 3HF. As part of this work we produce a regular newsletter, The Latest from the Pitch.

Like all other organisations who collect and use personal data we are subject to the requirements set out in the General Data Protection Regulation (GDPR). We take our responsibility to look after personal data very seriously and we ensure that respecting privacy is at the heart of all we do.

Sport England has an appointed a Data Protection Officer to oversee our approach to data protection and privacy. Our DPO can be contacted by emailing:

dpo@sportengland.org

  • Why we need to collect your personal data

    We need to collect your personal data in order to complete your request to receive our regular Latest from the Pitch Newsletter.

    You have told us that you would like us to send you our regular Latest from the Pitch Newsletter, and we have a legitimate interest in making sure your request is fulfilled. Our lawful basis for collecting your personal data under Article 6 of the GDPR is therefore ‘legitimate interest’

    Read less
  • What personal data we will collect and how we will use it

    We will collect the following personal data about you:

    Your email address, when you sign up to receive the newsletter

    Information about the way you interact with the content in the newsletters we send you.

    Read less
  • Who we’ll share it with

    Your personal data will be made available to relevant Sport England colleagues for the purposes of sending you the newsletter. It will be held securely and we will not make it available more widely than is necessary.

     

    Your personal data will be shared with third parties who manage the Sport England website on our behalf, and third parties who administer our mailing lists, and send newsletters on our behalf. We will not share your personal data with any other third parties and promise not to sell it, use it for commercial purposes or bombard you with irrelevant content.

    You should be aware that we may transfer your data to third country outside the EEA, where model clauses are in place to allow such transfers. Your data will be processed in the UK, other countries in the EEA and the USA.

    We will disclose personal data to third parties if we believe we are reasonably required to do so by law, regulation, court order or any competent government, statutory or public authority.

    Read less
  • How long we will keep it

    We will keep your data for the lifetime of the Latest from the Pitch newsletter, unless you tell us you don’t want to receive it any more.

    You can unsubscribe at any time by clicking on the unsubscribe link found at the bottom of every email. You can also email our Data Protection Officer via dpo@sportengland.org and we will make sure you don’t hear from us again.

    Read less
  • Your rights

    Under the GDPR you are entitled to access your personal data by making a subject access request to the DPO at the contact details provided above.

    You are also entitled to ask us to rectify any mistakes in your personal data and, in some circumstances, to have it erased

    You are also entitled to lodge a complaint about our handling of your personal data with the Information Commissioner’s Office.

    Read less