Privacy Notice

The Isle of Man Government Department for Enterprise (known as "DfE") is responsible for delivering a diverse economy where people choose to work, live and invest. Locate.im is the official website of the DfE Locate Isle of Man (created to promote the Isle of Man as a place to relocate). This privacy notice tells you what to expect when we use this website to collect personal information.

How we use your information

This privacy notice tells you what to expect when Locate Isle of Man collects personal information on this website. It applies to information we collect when people:

Visit our website
contact us by email, in person or over the phone or on our webform
consent to the use of cookies or passive technologies on your browser

Visiting our website

If we do want to collect personally identifiable information through our website, we will be up front about this. We will make it clear when we collect personal information and will explain what we intend to do with it.

The only people who have access to personal information submitted on this website are those who have a legitimate need to; this includes the Marketing and Business Intelligence Directorate where the Marketing Team are responsible for the running and maintenance of the website.

Isle of Man Government Website

DfE also has a sub-site on The Isle of Man Government website, gov.im/enterprise; this website is owned by the Cabinet Office. Their Privacy Notice in relation to how you use gov.im can be found at the top of each page next to the Terms and Conditions or following this link: https://www.gov.im/about-this-site/privacy-notice/.

Contact us by email, in person or over the phone or on our webform

We will only ask for your name and postal or email contact details. You may choose to provide extra information if you are making an enquiry. Email mailboxes are accessed by only a select number of staff central to Locate Isle of Man who are able to allocate enquiries out to the team who will be able to address your enquiry or request. Such emails will only be shared outside the Department with your knowing, and only do so in order to address your enquiry or request.

We securely store personal information electronically and manually:

Ongoing email communications are stored on our Isle of Man Government email system, Microsoft Outlook
We have three main records management tools across Locate Isle of Man all specifically designed for the type and use of the information recorded; depending on the nature and destination of your communication, your information will likely be stored in either: Microsoft Dynamics CRM or the Isle of Man Government secure network.

In normal circumstances we will only keep a record of this communication in an active area (e.g. emails will be used in Outlook) until the request or enquiry has been fulfilled; after this time they will be kept for 6 months in one of our records management systems.

Why will we process personal data (aka "the legal basis")

We will only process your personal information if a lawful basis exists:

Consent if we rely on your consent to process your information, we will make it obvious what we are asking for consent to do and always tell you how you can withdraw your consent e.g. registering for services, newsletters and competitions.

Public task if it is the public interest for us to collect or store e.g. when handling enquiries from members of the public

How will we securely process personal data?

All personal information is kept with the highest standards and safeguards in place. This includes technical security, preventing unauthorised access, undertaking audits and maintaining backups:

Emails - Email communications are stored on our Isle of Man Government email system, Microsoft Outlook We encrypt and protect all our emails in line with government standards. If your email service does not support this encryption, you should be aware that any emails we send or receive may not be protected in transit. We will also monitor any emails sent to us, including file attachments, for viruses or malicious software. Please be aware that you have a responsibility to ensure that any email you send is within the bounds of the law

Microsoft Dynamics CRM - Only certain members of staff will have access to your personal information on CRM and there is security in place to ensure this. Locate Isle of Man's marketing lists are held on CRM. The administration of CRM is undertaken by Government Technology Services in the Cabinet Office; however, they are unable to access the content of any records and so will not be able to access your personal information.

Isle of Man Government Secure Network – There are strict access controls in place meaning that only those within specific Divisions can access team folders; in addition, only the teams within the Divisions who are able to access personal information, are those that have a business need to do so. The administration of the IOMG Secure Network is undertaken by Government Technology Services in the Cabinet Office; however, they are unable to access the content of any records and so will not be able to access your personal information

Manual records - We do not routinely store manual records, however, those that are already in storage and an new records we are required to hold any manually are either stored onsite or in a third party storage facility with whom we have a data protection agreements in place.

AI-Powered Matching - We use artificial intelligence to help match candidates to relevant job opportunities. This process works as follows:

What data is used: Your professional profile data (skills, qualifications, work experience, and job preferences) is converted into a numerical representation (an "embedding") and stored in a secure vector store hosted on Amazon Web Services (AWS S3). This numerical representation does not contain your name, contact details, or any other personally identifiable information (PII).
How matching works: When an employer or agency runs a candidate search or job alert, our AI system (powered by AWS Bedrock) compares job requirements against stored profile embeddings to produce a compatibility score and rationale. At no point is your PII transmitted to or processed by the AI model.
Third-party processors: AWS (Amazon Web Services) acts as a data processor for the storage of anonymised profile embeddings and the execution of AI inference. AWS processes this data solely on our instruction and in accordance with our data processing agreement.
Your rights: You can request deletion of your profile at any time, which will also remove your stored embeddings from the vector store. You have the right to object to automated decision-making that produces legal or similarly significant effects - please contact us if you wish to exercise this right.

Your rights as a data subject and access to personal information

Under the Data Protection Act, you have rights as an individual which you can exercise in relation to the information we hold about you. At any point while we are in possession of or processing your personal information, you, the data subject, have the following rights:

Access You have the right to request a copy of the information that we hold about you
Rectification You have a right to correct data that we hold about you that is inaccurate or incomplete
Erasure In certain circumstances you can ask for the data we hold about you to be erased from our records
Restriction of processing Where certain conditions apply, you have a right to restrict the processing of your data
Portability You have the right to have the data we hold about you transferred to another organisation
Objection You have the right to object to certain types of processing such as direct marketing
Objection to automated processing You also have the right to be subject to the legal effects of automated processing including profiling
Judicial review In the event that the Department for Enterprise refuses your request under rights of access, we will provide you with a reason as to why. You then have the right to complain as outlined in Complaints

You can find out more about these rights here – or by contacting our Data Protection Officer using the details at the end of this notice.

Complaints

In the event that you wish to make a complaint about how your personal information is being processed by Locate Isle of Man (or third parties), or how your complaint has been handled, you have the right to lodge a complaint directly with our Data Protection Officer in the first instance; as well as the Isle of Man Information Commissioner.
This privacy notice was drafted with brevity and clarity in mind. It does not provide exhaustive detail of all aspects of Locate Isle of Man's collection and use of personal information. However, we are happy to provide any additional information or explanation needed. Any requests for this should be sent to the address below.

Miscellaneous

Under what circumstances can Locate Isle of Man contact me?

Our aim is never to be intrusive, and we aim to always avoid asking irrelevant or unnecessary questions. Moreover, any information you provide us will always be subject to rigorous measures and procedures to maintain your privacy. You will never be contacted by a means you did not consent to when providing us with your data.
Retention period

We only use personal information for as long as it is needed and will store it for the shortest amount of time possible, in accordance with the law. See our Retention of Records Procedure on our Information Governance and Privacy page.

Processing special category (sensitive) data and the data of children (under 16s)

We have to put additional measures in place if we plan to process any special category personal data , including ethnic origin or religion; however, Locate Isle of Man does not process any special category personal information using this website. In order to process the personal information of children, we would have to put additional measures in place because they may be less aware of the risks involved . Locate Isle of Man does not target any services to children and does not process the personal information of children for marketing purposes, competitions or registering for services or user profiles.

Sending us private message on social media

In addition to this website, Locate Isle of Man also has social media profiles. We include them in this notice for completeness: You may choose to provide us with personal information on our social media platforms; we ask that you do also check the platform's privacy policy and terms of service prior to sending us anything.

Social media message boxes are accessed by the team responsible for that service/product; this includes the Marketing and Business Intelligence Division, who have responsibility for maintaining Locate Isle of Man's social media platforms. Such messages will only be shared outside Locate Isle of Man with your knowing, and only in order to address your enquiry or request. The Marketing and Business Intelligence Division may at certain times require a third party to manage Locate Isle of Man's social media; if this happens this policy will be revised. Social media messages will only be kept for a month after the conclusion of the enquiry.

Contact

For any privacy enquiries, please feel free to contact our Data Protection Officer, or the Isle of Man Information Commissioner:
Department for Enterprise Data Protection Officer:

Address St George's Court, Upper Church
Street, Douglas, Isle of Man, IM1 1EX Tel +44 1624 686733
Email DPO-DfE@gov.im

Isle of Man Information Commissioner:

P.O. Box 69, Douglas, Isle of Man, IM99 1EQ Tel +44 1624 693260
Email ask@inforights.im
Web inforights.im

Notice Issued under Locate Isle of Man Data Protection Policy on 30-April-2026; subject to annual review