Privacy Notice - Government of Bermuda

1. Introduction

The Government of Bermuda ("we", "us", "our") is committed to protecting the privacy and security of your personal information. This Privacy Notice explains how we collect, use, store, and share your personal data when you use our website Gov.BM and related government digital services.

This notice applies to all visitors, residents, and users of Gov.BM and its associated services.

2. Information We Collect

We may collect the following types of personal information:

Information you provide directly: When you submit forms, create accounts, or contact us, we collect your name, email address, phone number, postal address, and any other information you choose to provide.
Automatically collected information: When you visit Gov.BM, we automatically collect technical data including your IP address, browser type, device information, pages visited, time spent on pages, and referring website.
Cookies and similar technologies: We use essential cookies to ensure the website functions correctly. Analytics cookies help us understand how visitors use the site so we can improve it. You can manage your cookie preferences through your browser settings.

3. How We Use Your Information

We use your personal information for the following purposes:

To provide and improve government services and information
To respond to your enquiries, applications, and requests
To send important notifications about services you have requested
To analyse website usage and improve the user experience
To comply with legal obligations and protect against fraud
To maintain the security and integrity of our systems

4. Legal Basis for Processing

We process your personal data on the following legal grounds:

Public task: Processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority.
Legal obligation: Processing necessary to comply with a legal obligation to which the Government is subject.
Consent: Where you have given clear consent for us to process your personal data for a specific purpose.
Legitimate interests: Processing necessary for the legitimate interests of the Government, such as improving public services.

5. Data Sharing

We may share your personal information with:

Other Government of Bermuda departments and ministries, where necessary to deliver services you have requested
Authorised third-party service providers who assist in operating our website and delivering services, under strict data protection agreements
Law enforcement or regulatory bodies, where required by law

We do not sell your personal information to third parties.

6. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Specific retention periods vary by service and are governed by the Government's records management policies.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, secure hosting, and regular security assessments.

8. Your Rights

Under applicable data protection legislation, you have the right to:

Access: Request a copy of the personal data we hold about you
Correction: Request correction of inaccurate or incomplete personal data
Deletion: Request deletion of your personal data, subject to legal retention requirements
Restriction: Request restriction of processing in certain circumstances
Objection: Object to processing based on legitimate interests or public task
Portability: Request transfer of your data in a machine-readable format

To exercise any of these rights, please contact us using the details below.

9. Public Access to Information (PATI)

Under the Public Access to Information Act 2010 (PATI), you have the right to request access to records held by public authorities in Bermuda. For more information, visit the PATI Statements section of this website or contact the Information Commissioner's Office.

10. Third-Party Links

Gov.BM may contain links to external websites operated by third parties. We are not responsible for the privacy practices of these websites. We encourage you to read the privacy notices of any external sites you visit.

11. Changes to This Notice

We may update this Privacy Notice from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated effective date.

12. Contact Us

If you have any questions about this Privacy Notice or how we handle your personal information, please contact us:

Email: privacy@gov.bm
Phone: +1 (441) 295-5151
Post: Government of Bermuda, Cabinet Building, 105 Front Street, Hamilton HM 12, Bermuda

Effective date: 1 January 2026