Skip to main content
Get adult social care data

BetaThis is a new service. Help us improve it and give your feedback (opens in new tab).

Our privacy notice

Last updated 19 February 2026

Your privacy is important to us. This privacy policy covers what we collect and how we use it.

Who we are

Get Adult Social Care Data (GASCD) is a new service provided by the Department for Health and Social Care as part of the Data Access Project. The GASCD service gives key stakeholders in the adult social care sector access to adult social care data in one place.

Data controller

The Department of Health and Social Care (DHSC) is the data controller for the GASCD service.

What data we collect from you

The personal data we collect from you when you create a GASCD service account includes:

  • your name
  • your CQC registered or GOV.UK email address
  • name and location of your employer or organisation.
  • your mobile phone number
  • the IP address you use to access the GASCD service

When you subscribe to our mailing list

If you subscribe to the GASCD service mailing list, we'll collect your:

  • email address
  • organisation

We use the GOV.UK Notify platform to send updates and requests. This involves us sharing your email address with the platform provider, Government Digital Service (GDS) as the data processor. For more information, you can read the GOV.UK Notify privacy notice.

When you contact us

If you contact us about the GASCD service, we'll collect your name, email address and any other personal information you choose to include in your message.

Why we need your data

We collect your personal data to:

  • allow you to access the GASCD service
  • understand who is using the service
  • gather feedback to improve our services
  • respond to any feedback you send us, if you$'ve asked us to
  • send email alerts to users who request them
  • monitor use of the service to identify security threats
  • understand who is using the service
  • monitor the performance of the service to identify inefficiencies and errors
  • analyse the information we collect using Google Analytics to see how you use the GASCD service and to see how well it performs on your device.

We do this to help:

  • make sure the GASCD service is meeting the needs of our intended users
  • make performance improvements to the service

Our legal basis for processing your data

The legal basis for processing your personal data is Public Interest.

The legal basis for processing data collected with Google Analytics and government digital services is your consent. For more information you can read about the cookies we use.

What we do with your data

We use your data to check that you are allowed to access the GASCD service and to carry out the purposes mentioned earlier.

We will not:

  • sell or rent your data to third parties
  • share your data with third parties for marketing purposes

We will share your data if we are required to do so by law – for example, by court order, or to prevent fraud or other crime.

How long we keep your data

we'll keep your personal data for as long as you have a GASCD service account.

We review accounts every six months. If you have not logged into your account for more than a year, your account will be deleted.

When you ask us to close your account, we will delete your data within 1 year.

When we close your account, we'll delete your:

  • name
  • mobile phone number
  • name and location of your employer or organisation.
  • GASCD service password

So that we can carry out security audits, we'll keep your email address and IP addresses for 1 year before we delete them.

Where your data is processed and stored

We design, build and run our systems to make sure that your data is as safe as possible at any stage, both while it's processed and when it's stored.

Your personal data will be processed in the UK only.

How we protect your data and keep it secure

We are committed to doing all that we can to keep your data secure. To prevent unauthorised access or disclosure we have put in place technical and organisational procedures to secure the data we collect about you – for example, we protect your data using varying levels of encryption. We also make sure that any third parties that we deal with have an obligation to keep all personal data they process on our behalf secure.

What are your rights

You have the right to:

  • get copies of information - individuals have the right to ask for a copy of any information about them that is used
  • limit how the information is used - individuals have the right to ask for any of the information held about them to be restricted - for example, if they think inaccurate information is being used
  • get information corrected - individuals have the right to ask for any information held about them that they think is inaccurate to be corrected - this is not an absolute right under UK GDPR and will be assessed on a case-by-case basis
  • object to the information being used - individuals can ask for any information held about them to not be used - this is not an absolute right under UK GDPR and will be assessed on a case-by-case basis
  • get information deleted - this is not an absolute right under UK GDPR and will be assessed on a case-by-case basis

If you have any of these requests, get in contact with our Data Protection Officer, you can find their contact details below.

Questions or complaints

Contact the DHSC's Data Protection Team if you either:

  • have questions about anything in this document
  • think that your personal data has been misused or mishandled

DHSC's Data Protection Officer

Email: data_protection@dhsc.gov.uk

Post:

Data Protection Officer
1st Floor North
39 Victoria Street
London
SW1H 0EU

Anyone who is still not satisfied can complain to the Information Commissioner's Office. Their website address is www.ico.org.uk and their postal address is:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Changes to this notice

We may modify or amend this privacy notice at our discretion at any time. When we make changes to this notice, we will amend the last modified date at the top of this page. Any modification or amendment to this privacy notice will be applied to you and your data as of that revision date. We encourage you to periodically review this privacy notice to be informed about how we are protecting your data.