Skip to main content

How we will handle your data.

First published:
5 March 2026
Last updated:

Introduction

The Wales Procurement Review Unit will need to collect some personal information from you if you choose to use this feedback service. Welsh Government will be the controller for this information, and we will process it in line with our public task and the official authority vested in us.

The information you provide will help us identify areas for improvement in public sector procurement and ensure that procurement in Wales complies with the rules set out in procurement legislation.

Who we will share your data with

Personal data may be shared, where necessary, with Welsh Government officials, a panel of experts appointed to investigate recurring breaches, and, where appropriate, with the Welsh contracting authority connected to your query.

Where personal data has not been obtained directly from you, it may have been provided by someone responding to a request from the Wales Procurement Review Unit.

If information is obtained from an organisation not mentioned above, we will be able to identify and confirm the name of that organisation.

How long will we keep your data

Your personal data will be retained for a period of 3 years from the date your concern or query has been finalised.

Your rights

You have the right to request information about how your personal data are processed, and to request a copy of that personal data.

You have the right to request that any inaccuracies in your personal data are rectified without delay.

You have the right to request that any incomplete personal data are completed, including by means of a supplementary statement.

You have the right to request that your personal data are erased if there is no longer a justification for them to be processed.

You have the right in certain circumstances (for example, where accuracy is contested) to request that the processing of your personal data is restricted.

You have the right to object to the processing of your personal data where it is processed for direct marketing purposes.

You have the right to object to the processing of your personal data.

You have the right to request a copy of any personal data you have provided, and for this to be provided in a structured, commonly used and machine-readable format.

Contact details

For further information about the information which Welsh Government holds and its use, or if you wish to exercise your rights under the GDPR, please see contact details below:

Wales Procurement Review Unit (WPRU)

Welsh Government
Cathays Park
CARDIFF
CF10 3NQ

Rydym yn croesawu gohebiaeth yn Gymraeg / We welcome correspondence in Welsh.

Data Protection Officer

Welsh Government
Cathays Park
CARDIFF
CF10 3NQ

Rydym yn croesawu gohebiaeth yn Gymraeg / We welcome correspondence in Welsh.

Information Commissioner’s Office

Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone:

0303 123 1113