Information management privacy notice - Privacy notices

• to process and respond to requests to access information under the Freedom of Information Act 2000 and Environmental Information Regulations 2004
• to process and respond to requests from individuals to exercise their data subject rights under the General Data Protection Regulation and Data Protection Act 2018
• to process and respond to requests to access personal data from other organisations
• responding to investigations by regulators such as the Information Commissioner’s Office
• determining the historical value of information for archiving

• name, address, date of birth and other contact information
• identification documentation
• unique identification numbers
• images

We may also process some special category (sensitive) data such as:

• race or ethnic origin
• political views and affiliations
• trade union membership
• physical or mental health data
• sex life and sexual orientation

• necessary to comply with a legal obligation
• necessary to perform a task carried out in the public interest or in the exercise of official authority
• necessary for reasons of substantial public interest

• provided directly by you when you access the service
• provided by regulators such as the Information Commissioner’s Office and the Local Government and Social Care Ombudsman
• provided by other organisations seeking access to information, such as other local authorities, central government and law enforcement

• general public (where publishing is required by law)
• healthcare, social and welfare organisations and professionals
• local and central government
• financial organisations, including debt collection, tracing and credit referencing agencies
• regulatory authorities, such as the Information Commissioner’s Office
• police forces and other law enforcement and prosecuting authorities
• Disclosure and Barring Service
• utilities providers
• voluntary and charitable organisations
• insurance companies

We are required to retain your information for as long as is necessary, after which it will be securely destroyed.

Further information on retention periods is available through our customer privacy notice.

You have several rights in relation to the information that the council holds about you. For information about your rights, when they might apply and how to make a request to exercise them, please see our customer privacy notice.

• Customer privacy notice
• Customer services privacy notice