Website and telephone payments Sunday 19 May
Our website and telephone payment systems are unavailable between 9am and 2pm on Sunday 19 May. You will not be able to pay for any council services on our website or over the phone during this time.
This privacy notice is designed to help you understand how and why trading standards, processes your personal data. This notice should be read in conjunction with our corporate privacy notice.
North Yorkshire Council is a ‘data controller’ as defined by Article 4(7) of the UK General Data Protection Regulation (UK GDPR) for general processing and Section 32 of the Data Protection Act 2018 for law enforcement processing.
North Yorkshire council trading standards service (the service) is responsible for enforcing a wide range of trading standards, consumer protection and safety legislation across North Yorkshire. Our aims are to safeguard consumers, so that every adult has a longer, healthier and independent life and every child has the best possible start in life; and to support legitimate traders to ensure that North Yorkshire is a place with a strong economy and a commitment to sustainable growth.
The council has appointed Veritau to be its data protection officer. Their contact details are:
Information Governance Office
Veritau
West Offices
Station Rise
York
North Yorkshire
YO1 6GA
Email: infogov@northyorks.gov.uk
Tel: 01904 552848
Trading Standards may collect the following categories of personal information:
Depending on the service/action being undertaken, further information may be required.
We will only gather the minimum amount of data necessary for a legitimate purpose ensuring collection is proportionate to the circumstances.
NYC collects your personal data for the following purposes:
In addition to information you provide North Yorkshire Council may also receive information from:
NYC may be required to share information with organisations such as:
Sharing will only take place where legal gateways allow it and the sharing is necessary and proportionate. We will assess the impact of any disclosure and make decisions on a case by case basis unless formal information sharing protocols which permit otherwise are in place.
Data held |
Retention period |
---|---|
Consumer advice - all records relating to providing consumers with information and advice on minimum standards of buying and selling of goods and services |
3 years since from when record was created |
Fair trading - all records relating to the administration of fair trading schemes |
3 years since from when record was created |
Product safety - all records relating to advice and support given to businesses about product safety |
6 years from the date that the advice was given |
Retail trading standards - all records relating to the development and implementation of retail trading standards |
6 years from the date that the standard expires |
Trading standards advice to businesses - all records relating to trading standards advice given to businesses |
6 years from the date that the advice was given |
Under age sales - all records relating to the monitoring and enforcement of under age sales |
6 years from the date of enforcement action |
Weights and measurements - all records relating to the monitoring and enforcement of weights and measures |
6 years since from when record was created |
Child performance licences - all records relating to the allocation of child performance licences |
25 years from the date of birth of the child |
Illegal street trading - all records relating to the licensing and monitoring of street traders and street trading |
6 years from when the date that the licence expires or the date of the resolution of enforcement action |
North Yorkshire council relies on the following lawful basis to process your personal data under the UK GDPR:
With regard to special category data, the council will rely on the following lawful basis
UK GDPR Article 9(2)(g) – The processing of your special category data is necessary for reasons of substantial public interest (with a basis in law), meeting Schedule 1, Part 2 of the Data Protection Act 2018 as below:
Where information is for law enforcement purposes the council processes under the data protection act. The processing is specified, explicit and legitimate; meets section 35 of the data protection act and where information is sensitive it is processed under schedule 8:
Please see the trading standards enforcement policy for more information.
For more information about how we use your data, including your privacy rights and the complaints process, please see our corporate privacy notice.