Privacy Notice

Privacy Notice

Last updated by the Ministry of Technology

Overview

This privacy notice explains how the Non-Democratic Republic of Carl collects, uses, and manages your personal data through the Citizen Services Portal. By existing as a citizen of the NDRC and possessing a CARL-ID, you have consented to these terms. Withdrawal of consent is not available.

Data we collect

The following data is collected automatically when you use this portal:

  • CARL-ID and associated identity information
  • IP address, device identifiers, and browser information
  • Full browsing history and session duration
  • All form submissions and service requests
  • Click patterns and navigation behaviour
  • Keystroke timing analysis (for security verification)
  • Geolocation data (if available from your device)
  • Time of access and session frequency patterns

How we use your data

Your data is used for:

  • Providing government services and processing your requests
  • Identity verification and fraud prevention
  • CDI score calculation and compliance monitoring
  • Security threat detection and investigation
  • Statistical analysis and population monitoring
  • Chargeability compliance verification
  • Behavioural pattern analysis for loyalty assessment
  • Any other purpose deemed necessary by the state

Data sharing

Your data is shared with all government ministries and departments, as required. There are no restrictions on inter-departmental data sharing within the NDRC government. Specifically, data is routinely shared with:

  • Ministry of Security (all data, unrestricted)
  • Ministry of Labor (employment and productivity data)
  • Ministry of Health (health-related interactions)
  • Ministry of Technology (technical and usage data)
  • Office of the Supreme Leader (aggregated population data)
  • BlackWatch Intelligence (as required for investigations)
  • SurveilSync (all activity data, real-time)

Data retention

Data is retained indefinitely unless specific retention periods are mandated by departmental policy. Minimum retention periods are: activity logs (10 years), service requests (7 years), compliance reports (permanent), medical access records (permanent).

Your rights

Under NDRC law, citizens have the right to:

  • Access their own basic CARL-ID information
  • Request correction of factual errors in their records

Citizens do not have the right to:

  • Deletion of personal data
  • Restriction of data processing
  • Object to data collection or sharing
  • Data portability
  • Withdraw consent

Contact

For data enquiries, contact the Ministry of Technology Data Office at data@technology.ndrc.uk. Note that enquiries about surveillance data or security-related records will not be answered and may trigger a compliance review.