We'll get your permission by asking you to either:
- sign a paper consent form
- tick a box online
- give agreement over the phone - if you call our Adviceline or Debt Advice Project
Before we ask for your permission, we'll always explain how we use your information.
If you're using our Debt Advice Project and you've been referred to us from another advice charity, they'll send us your information using a referral form. They'll get your permission before sending us your information.
What information we ask for
We'll only ask for information that's relevant to your problem. Depending on what you want help with, this might include:
- your name and contact details - so we can keep in touch with you about your case
- personal information - for example about family, work, or financial circumstances
- details about services you get that are causing you problems - like energy or post
- details of items or services you've bought, and traders you've dealt with
- information like your gender, ethnicity or sexual orientation
If you don't want to give us certain information, you don't have to. For example, if you want to stay anonymous we'll only record information about your problem and make sure you're not identified.
How we use your information
The main reason we ask for your information is to help solve your problem.
We only access your information for other reasons if we really need to - for example:
- for training and quality purposes
- to investigate complaints
- to get feedback from you about our services
- to help us improve our services
All advisers and staff accessing data have had data protection training to make sure your information is handled sensitively and securely.
Understanding people's problems
We use some information to create statistics about who we're helping and what problems are the most common. This information is always anonymised - you can't be identified.
We share these with funders, regulators, government departments and publicly on our blogs, reports, social media and press releases.
The statistics also inform our policy research, campaigns, or media work.
When we share your information with other organisations
With your permission, we might share your information with other organisations so we can:
- help solve your problem - for example, if you ask us to contact your creditors we might need to share your name, address and financial details with them
- refer you quickly to another organisation for more advice, if relevant
- monitor the quality of our services
Organisations we share your data with must store and use your data in line with data protection law.
There might be specific organisations we share your information with, depending on what service you access.
If you're the client of a different advice charity and used the Debt Advice Project
Your personal information is shared securely with us from the charity you got advice from. We then share that information with the Money Advice Service, our funder, as part of our regular reporting.
This information includes:
- your name, contact details and postcode
- your demographic information - like your age, gender and ethnicity
- your employment and housing status
- your income and debts
- what kind of advice you got and the outcome
- if you were referred to another organisation
The charity you got advice from will have their own policy on how they use, store and share your data.
If we're concerned about yours or someone else's safety
If something you've told us makes us think you or someone you know might be at serious risk of harm, we could tell the police or social services - for example if we think you might hurt yourself or someone else.
Getting feedback on our service
With your permission, we'll share your contact details with our trusted research partner so they can contact you for feedback on your experience with us. We use different research partners depending on how you access our services.
|Where you got advice||Research partner|
|a local Citizens Advice||Maru/edr|
|the Extra Help Unit (energy advice)||Accent|
|the Debt Advice Project||Recognising Excellence, Optimisa and PWC Research|
Storing your information - if you contact us online, by phone or face to face
Whether you get advice face to face, over the phone, by email or webchat, our adviser will log all your information, correspondence, and notes about your problem into our secure case management systems.
Some of your information might also be kept within our secure email and IT systems.
We keep your information for 6 years. If your case has been subject to a serious complaint, insurance claim or other dispute we keep the data for 16 years.
If you use the Extra Help Unit, we keep your information for 3 years from when we close your case.
Our case management systems are hosted within the EEA and wherever possible, the UK.
Most of our trusted partners store their data securely within the European Economic Area (EEA) in line with data protection law.
There might be other places we store your information, depending on how you accessed our advice.
If you contact us for webchat or email advice
In most cases, as well as logging your email advice request form and webchat transcripts in our case management systems, copies are also stored in an online system run by our trusted partner Agilisys. It's stored for 3 months before being deleted.
The system is run by our trusted partner Agilisys.
Agilisys keep anonymised statistics on webchat data in an archive so they can track webchat usage and performance. This data doesn't contain your personal information.
Agilisys store their data securely within the European Economic Area (EEA) in line with data protection law.
Emails between you and your adviser are stored within the local Citizens Advice office email system where the adviser is based. The local Citizens Advice should have their own policy for how they keep these emails secure.
If you use the Extra Help Unit, emails between you and your adviser are held on the Servicemail database and deleted 3 years of your case closes.
If you get advice over the phone
If you call us, we'll record the conversation for training and monitoring purposes.
When you call, you'll hear a recorded message telling you how we use and store your information - you can let the adviser know if you disagree.
Calls are recorded by our trusted partner, KCOM. They'll be deleted after 6 months.
If you get advice by Skype or an app like WhatsApp
Your local Citizens Advice should have their own policy that covers how they store your information through these channels. Contact your local Citizens Advice and ask to see the policy - or check their website.
If your adviser refers you to another Citizens Advice Service
Some other Citizens Advice services store and share your information in different ways.
If your service isn't listed here, there's nothing extra we need to tell you.
If you've been referred to the Citizens Advice consumer service, find out more about how they use, store and share your personal information.
If you've been referred to the Citizens Advice Debt Management Service, find out more about how they use, store and share your personal information.
If you've been referred to the Citizens Advice Debt Relief Order (DRO) Team, find out more about how they use, store and share your personal information.
If you've been referred to the Citizens Advice Witness Service, find out more about how they use, store and share your personal information.
If you've been referred to Pension Wise, find out more about how they use, store and share your personal information.
Contact us about your information
You can contact us at any time and ask us:
- what information we've stored about you
- to change or update your details
If you know the local Citizens Advice you've been dealing with, please contact them directly about information they hold about you.
If you don't know which charity you dealt with, contact your local Citizens Advice and ask them to check your case records to find out.
If you want us to delete the information we hold about you
You can ask us to delete the information we hold about you - this is called your 'right to erasure' under the General Data Protection Regulations. You'll need to give us your contact details and how you accessed our service so we can find all your information.
We'll look into your request within 30 days and let you know when it's done.
If you want to make a complaint
If you're not happy with how we've handled your data, you can make a complaint.