MyNavy Privacy Notice

This privacy notice covers the MyNavy application only.

MyNavy is an application managed by Navy Digital, a department of the Royal Navy which is part of the Ministry of Defence.

What to expect

We will ensure that we will treat all personal information in accordance with data protection legislation, including the General Data Protection Regulation and Data Protection Act 2018.

When we access, collect, hold, use, or process in any way your personal data, you are entitled to be told:

  • The purpose for which the data is being used, and our lawful basis for processing it
  • How long we will keep your data, who we will share it with
  • Whether it will be transferred or accessed outside the UK or EU, and what legal safeguards are in place to protect it
  • About any rights you may have, including the right to access your information, or to object to its being used
  • About your right to complain to the Information Commissioner if you feel that your personal information has been mishandled
  • About the identity of our Data Protection Officer (an independent advisor on data protection matters)
  • Expect us to only ask for what we need, and not to collect too much or irrelevant information

You are also entitled to have your personal information:

  • Protected and kept secure
  • Kept accurate and up to date
  • Not used for purposes which are incompatible with those for which it was collected
  • Kept only for as long as it is needed for the purpose for which it was collected (unless it must be kept as part of the historic record)

Ministry of Defence Data Protection Officer

As an application managed by Navy Digital, a department of the Royal Navy which is part of the Ministry of Defence, the contact details for the Data Protection Officer for the Ministry of Defence is:

MOD Data Protection Officer
Ground floor, zone D
Main Building

Email address: [email protected].

Email [email protected]

Personal information that we collect and process

We access, collect and process personal information for the exercise of our own and associated public functions.

These include:

  • Name, Service number, Unit, Service, UIN, date of birth, nationality, promotion and appraisal Information, NHS/CI Number, readiness details, personal contact phone number, personal contact email address
  • Ethnicity data
  • Assignment details including Trade, Branch, location, availability dates
  • Session date, device ID (make and model), IP address, push notification ID, browser type
  • Pay and benefits information including current and past pay statements, P60, Leave totals
  • Standard learning credits applications
  • Kit holdings and orders
  • Sickness and absence reporting data including basic conditions

We may also use information we hold about you to:

  • Enable targeted announcements within the application to support Royal Navy communications
  • Undertake statistical analysis to monitor performance and improve our services
  • Assist in verifying your identity
  • Fulfil other legal requirements

How to find out what personal information we hold about you

You have the right to be informed that we are processing your personal information. In most circumstances, we will let you know at the time the information is collected. However, in certain circumstances, for example where the information is not obtained directly from you but from a third party, we will inform you of this complying with the requirement under the Data Protection legislation.

However, if you want to find out if we or any of our agencies hold any personal information about you, or want to make any corrections, you can make a 'subject access request' (SAR) under the Data Protection Act 2018 (DPA 18).

If we do hold information about you, we will:

  • Give you a description of it
  • Tell you why we are holding it
  • Tell you to whom it has, or will be disclosed, in particular if it has been disclosed to international organisations
  • Let you have a copy of the information in a form that is as clear and understandable as possible Please be as specific as you can about the information you want, and, if it isn’t obvious, explain why you expect us to hold your personal information

For information about how to make a SAR application see our guide about how to obtain information about yourself held by MOD.

View guide on GOV.UK

How we store your personal data

Your personal data will be stored in secure government Information Technology systems. We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.

In addition, we limit access to your personal information to only MOD personnel, agents, contractors and other third parties who have a business need to know.

Retention of personal data

We will keep your data for as long as is needed to provide you with a service or in the exercise of our own and associated public functions. Where notification data is stored to enable push notifications of relevant content, this is removed after 30 days.

After the retention period has elapsed all data will be destroyed securely in line with MOD data destruction policy. Our defence records management policy and procedures JSP 441 is available online.

For further information please email [email protected].

View JSP 441

When we share information

We may share personal information within our organisation or with other bodies if it would be compatible with the purpose for which we collected it, and/or where we need to, or are permitted to do so by law. This may include sharing your personal information with:

  • Other government departments and agencies
  • Police and other law enforcement agencies
  • Courts and other judicial bodies
  • Foreign governments and other authorities
  • Foreign law enforcement and judicial bodies
  • MOD service providers

Your Rights

Under Data Protection legislation you have the following rights with regards to your personal information:

  • The right to be informed about the collection and use of your personal data
  • The right of access your personal data and supplementary information
  • The right to have inaccurate personal data rectified, or completed if it is incomplete
  • The right to erasure (to be forgotten) in certain circumstances
  • The right to restrict processing in certain circumstances
  • The right to data portability, which allows you to obtain and reuse your personal data for your own purposes across different services.
  • The right to object to processing in certain circumstances
  • Rights in relation to automated decision making and profiling
  • The right to withdraw consent at any time (where relevant)
  • The right to complain to the Information Commissioner

For information about how to make an application see our guide on Data Protection: rights for data subject on GOV.UK.

Further information can be found at:

View Data Protection: rights for data subject

Requests under the Data Protection legislation

As stated above, if we hold any data about you, you have the right to ask for a copy of it through a subject access request (SAR).

There are a small number of cases where we do not have to give you the information you have asked for. For example, if we are using data for the purposes of investigating, preventing or detecting crime, or apprehending or prosecuting offenders where to do so would be likely to prejudice those purposes. In cases where it is known the police are investigating, or prosecuting offences, we will ask for their view on whether providing you with the information would prejudice their activities.

Guidance is also available on how to Obtain information about yourself held by MOD.

If you wish to exercise any of your other rights with regards to your personal information, please see our guide on Data Protection: rights for data subject. Or contact:

MOD Information Rights Team
Ground floor, Zone D
Main Building
London SW1A 2HB

Email: [email protected].

Email MOD Information Rights Team

How to make a complaint to MOD

If you are dissatisfied with the way we have handled your personal information and want to make a complaint, please write to:

MOD Information Rights Team
Ground floor, Zone D
Main Building
London SW1A 2HB

Email: [email protected].

We will acknowledge your complaint within 5 working days and send you a full response within 20 working days. If we can’t respond fully in this time, we will write and let you know why and tell you when you should get a full response.

Email [email protected]

The role of the Information Commissioner

For independent advice about data protection, privacy and data-sharing issues, you can contact the Information Commissioner at:

Information Commissioner
Wycliffe House
Water Lane
Cheshire SK9 5AF

Tel: 08456 30 60 60 or 01625 54 57 45
Fax: 01625 524510


Visit CIO website