Privacy and Housing and Regulatory Services

This Privacy Notice explains how the Housing and Regulatory Service - comprising the advisory and enforcement functions of food safety, health & safety, environmental protection, private sector housing, and infectious disease and public health - at Buckinghamshire Council (the data controller) will use the personal information we collect about you when you use this service.

Information held about you

We can hold the following information on you:

  • your name
  • your contact details, including address, phone number and email
  • other information you or a third party - for example, Thames Valley Police, government departments or landlords - have given us to deal with enquires or to investigate a complaint
  • we may also require names, addresses of businesses and home addresses of business owners

Depending on what type of request we are dealing with we may require your:

  • date of birth
  • national insurance number
  • employer details
  • work history and qualifications
  • income and bank and building society details
  • Power of Attorney details
  • medical information, food history and recent travel information if we are investigating a health and safety accident, health incident, food poisoning or infectious disease
  • criminal convictions
  • contact we have had with you (such as correspondence)

Why we need your information

We use your personal information to perform our statutory and discretionary services and comply with our statutory obligations which include, but are not limited to:

  • providing advice and guidance to businesses
  • investigating complaints and recording actions taken
  • identifying emerging issues and threats
  • working with other enforcement agencies
  • for purposes of public safety and safeguarding
  • taking enforcement and legal action
  • providing services to businesses and residents to promote a safe environment
  • performing our licensing functions
  • ensuring our staff are safe at work

What is the lawful basis for us to process your information?

The lawful basis for processing the personal information under the Data Protection Act 2018 and UK GDPR is:

  • Article 6(1)(e) we need it to perform a public task
  • Article 6(1)(c) The processing is necessary for compliance with a legal obligation

The obligations that may apply would include the enforcement of any regulations and statutory instruments made under relevant environmental health legislation.

We may also process special categories of personal data. For example information about health. Where we do so our lawful basis is

  • Article 9 (g) reasons of substantial public interest (with a basis in law)

How we share and process your information

We may share your information with others including, but not limited to:

  • third parties contracted by Buckinghamshire Council - such third parties include:
    • pest and dog control contractor – SDK Environmental Ltd
    • contractors undertaking enforcement action on our behalf
  • other bodies and Government departments in connection with the prevention of crime, criminal or legal investigations or proceedings including fraud (such as the National Fraud Initiative) or regulatory functions (such as the Local Government Ombudsman)
  • other local authorities
  • Citizens Advice Bureau
  • NHS and UK medical agencies e.g. GP practices
  • other relevant services within the council

Automated decision making

We do not carry out any automated decision making in relation to this information.

Your rights

You have legal rights over your information. For details of those rights, see our corporate Privacy Policy. Your rights will differ depending on our lawful basis for processing your personal information.

Our Data Protection Officer can be contacted at:

Buckinghamshire Council,
The Gateway,
Gatehouse Road,
Aylesbury,
HP19 8FF

You can also contact our Data Protection Office by email at [email protected]or by phone at 0300 131 6000.

If you have any concerns about our use of your personal information, you can make a complaint to the Data Protection Officer. You can also then complain to the ICO if you remain unhappy with how we have used your personal information.

Date of publication/last update: March 2024