Research into Group-based Victim Support Interventions: Privacy notice

This privacy notice sets out how we will process information from everyone who takes part in this research. In line with GDPR (the EU General Data Protection Regulation), it explains the legal basis of this study for data processing; who will have access to participants’ personal data; how this data will be used, stored and deleted; and how to submit a query or a complaint.

The Ministry of Justice (MoJ) is the data controller of this information. This includes when it is collected or processed by third parties on their behalf. More information about the MoJ and how the data will be controlled can be found here. Working in partnership with WPI Economics, the National Centre for Social Research (NatCen) is the data processor, responsible for the collection, processing and storage of the data. Further information on NatCen and their policies can be found at http://natcen.ac.uk. 

How and why the MoJ Department uses your information

The MoJ collects, processes and shares personal information to enable it to carry out its statutory and other functions. The MoJ is only allowed to process your data where there is a lawful basis for doing so. For this research, data will be processed for the purpose of delivering a public task under GDPR Article 6 1e.

What is the legal basis for processing data

In order for the use of personal data to be lawful, we need to meet one (or more) conditions in the data protection legislation. Any data shared will be processed in accordance with Article 6(1) of the General Data Protection Regulation (GDPR), which provides the legal basis for processing. For the purpose of this project, the legal basis for processing is ‘public task’. This means that we believe that there is a genuine reason for us to process this data (to understand the landscape of group victim interventions), that this data is needed to fulfil this purpose (we could not evaluate without this information), and that using this data will not interfere with individuals’ interests, rights or freedoms. In line with Article 5, we will ensure that all personal data is:

  • Handled lawfully, fairly and transparently.
  • Kept to a minimum and collected and used for the specified purpose.
  • Accurate and kept up-to date.
  • Processed and stored securely.
  • Retained only for as long as necessary.

Collection of personal data

To complete this research project, the NatCen research team will collect and process the following data:

  • Survey responses from PCC representatives and service providers, including information about the interventions and participant contact details (with participant permission)
  • Interview audio recordings and transcripts from PCC representatives and service providers who agree to take part in follow-up discussions.
  • Interview audio recordings and transcripts with stakeholders involved in commissioning, delivering or evaluating group-based victim support interventions.

The MoJ will support the recruitment stage of this research. Potential participants might be contacted by MoJ or NatCen with an information sheet containing further detail about the research. The information sheet provides project details and how to contact Natcen for further information/agreement to participate.

Interviews will be audio recorded and transcribed with participant permission to provide an accurate record of what you say; NatCen will hold and process this recording and the accompanying transcript, with only the NatCen research team having access to these files. This data will not be shared with the MoJ or other parties.

NatCen will also process data submitted to MoJ which contains monitoring data on victim support interventions. No personal data will be included in these documents.

How NatCen will process your data

NatCen are collecting and processing the data for this research on behalf of the MoJ to develop a deeper understanding of the victim support landscape, with a particular focus on group-based victim support.

All data collected will be handled in accordance with data protection legislation. NatCen will store and handle all data securely and confidentially in line with UK GDPR. Reports and publications arising from this research will not identify any individual participant, organisation, or intervention.

Survey responses from PCC representatives and service providers (with personal details removed) will be combined and analysed to identify patterns in provision, delivery models, and target groups. Information from interviews will be used to provide richer context and examples to support the interpretation of survey findings.

Information obtained from the interview will be anonymised, analysed into themes, and summarised by NatCen into a report shared with the MoJ. The report may be published and may include some quotes from participants, but no identifying information (including, for example, names of individuals or places) will be included. Any personal or identifiable data will be removed, and the report will only contain details of research findings. Findings may be attributed to particular participant groups (e.g. PCC participant). Whilst the MoJ have been involved in the recruitment process for this research, they will not be informed of who is interviewed and all findings / quotes will be robustly reviewed to ensure MoJ staff are unable to attribute them to specific participants.

Storing your information

The data held by NatCen will be stored securely in the UK, in line with international best practice and NatCen’s ISO 27001, ISO 20252 and Cyber Essentials Plus certifications. Data will not be stored in overseas servers. Only the NatCen research team will have access to the data. All personal data will be securely deleted once the project has been completed. Identifiable data will be stored by NatCen for twelve months after publication of the report (which we expect to be by Summer 2026) and then will be securely destroyed.

Can I change my mind during the study?

Yes, participation is completely voluntary. You have the right to withdraw your permission for data processing at any time up to 30 days after taking part, without the need to provide a reason. If you prefer not to be contacted again by NatCen, you can also request that we delete your contact information.

Please get in touch with us up to 30 days after filling in the survey to withdraw your data. After this point we will have started analysing the data so we might not be able to extract your contribution due to anonymising the data. If you do decide to withdraw your data within the outlined timeframe, none of your survey answers will be included in the report provided to the MoJ. If you do withdraw your consent to take part in the survey, please be assured that the MoJ will not be informed – this will be kept confidential.

To withdraw your permission, please contact the study team at GroupInterventionsResearch@natcen.ac.uk.

Disclosure notice

Information provided by you will be kept confidential except in exceptional circumstances. It is unlikely that identifiable information would be available to action any disclosure of threat, crime or harm. However, should NatCen be informed of an imminent threat to life or serious harm, this will be shared with the project lead who will raise the issue with the NatCen Designated Safeguarding Lead (DSL). A decision will then be made as to whether the information needs to be shared with the local authorities. Given that some stakeholders will be working with vulnerable groups, it is important to also remind you not to disclose personal details about specific individuals that you may be working with.

Requesting access to your personal data

You can request access to your personal data and for it to be deleted or updated by NatCen, as well as an explanation of how it has been used, at any time before it has been destroyed. Rights requests will be responded to without delay and within 30 days. Analysis produced from personal data is not considered personal data, and the process of removing identifiable information is not reversible. Individual rights requests apply to personal data only, and there may be some occasions where you will receive an explanation of why the request you've made cannot be complied with. If you would like to make a request about your data, please get in touch with the NatCen research team via the contact details provided below.

Questions or concerns about personal data

We would welcome the opportunity of discussing the research with you to address any concerns directly, should you have any. Please do feel free to contact the NatCen research team via email GroupInterventionsResearch@natcen.ac.uk or telephone on 0808 168 1503. 

If you prefer to speak to somebody at the MoJ or you believe this research has not complied with your data protection rights, you can contact: 

Email: DataProtection@justice.gov.uk

Post: Data Protection Team
Ministry of Justice
Post point 11.52
11th floor tower
102 Petty France
London
SW1H 9AJ

Under GDPR, you can complain to the Information Commissioner’s Office if your query is not satisfactorily addressed. You can lodge a complaint at: 

Post: Information Commissioner's Office
Wycliffe House
Water Lane 
Wilmslow
Cheshire 
SK9 5AF
Phone: 0303 123 1113
Website https://ico.org.uk/concern 

We may review and update this privacy notice periodically. This version was last updated on 01/10/25.