How we use and protect your personal information

We collect and process personal information about you in order to provide public services and meet our statutory obligations.

This privacy notice explains how we use the information about you and how we protect your privacy.

You can also view more detailed privacy notices for each council service.

  • Personal information we collect includes name, date of birth and address, which when put together can uniquely identify a person.

    Some information the Council may process about you is sensitive, known as 'special categories', and needs more protection due to its sensitivity. This includes anything that can reveal your:

    • race
    • ethnic origin
    • politics
    • religion
    • trade union membership
    • genetics
    • biometrics (where used for ID purposes)
    • health
    • sex life
    • sexual orientation
  • We need to use personal information about you to:

    • provide you with a service you apply for or are entitled to receive from us
    • make sure the Council meets statutory obligations
    • support the delivery and improvement of Council services
    • manage the services we provide to you
    • assist and investigate any concerns or complaints you have about our services
    • monitor and keep track of spending on services
    • check the quality of services
    • help with research and planning of new services.

  • There are a number of legal reasons why we need to collect and use your personal information.

    We collect and use personal information:

    • when you, or your legal representative, have given consent
    • when you enter into a contract with us
    • to perform our statutory duties
    • to protect someone in an emergency
    • when it's required by law
    • for employment purposes
    • to deliver health or social care services
    • when you've made your information publicly available
    • for legal cases
    • when it's to the benefit of society as a whole
    • to protect public health
    • for archiving, research, or statistical purposes
    • when you visit our website - find out more about our cookie policy.

    The individual council service privacy notices explain the legal reasons in more detail for each service.

  • We hold records about you (on paper and electronically) in a secure way, and only make them available to those who have a right to see them.

    Ways that we protect personal information include:

    • pseudonymisation - using a different name so we can hide parts of your personal information from view. This means that someone outside of the Council could work on your information on behalf of us, without ever knowing it was yours
    • access controls to systems and networks - stopping people who aren't allowed to view your personal information from getting access to it
    • training and awareness for staff - how to handle information and how and when to report if something goes wrong
    • regularly updating technology infrastructure - includes updating network, server, PC and mobile devices with the latest security updates.
  • The majority of personal information is stored on systems in the UK. However, there are some occasions where your information may leave the UK, either in order to get to another organisation or if it's stored in a system outside of the EU.

    We have additional protections on your information if it leaves the UK, ranging from secure ways of transferring data to ensuring we have a robust contract in place with that third party.

    We will take all practical steps to make sure your personal information is not sent to a country that is not seen as safe.

    If we need to send your information to an 'unsafe' location we'll always seek advice from the Information Commissioner's Office (ICO).

  • We'll keep your personal data in accordance with our retention policy.

    Your information we use for marketing purposes will be kept with us until you tell us that you no longer wish to receive this information.

Find out more about data protection on the Information Commissioner's Office (ICO) website

Your rights

You have a number of rights regarding the personal information we hold on you.

Find out more about how to make data protection request

If you have a concern about how we handle your personal information, please contact our data protection officer.