Buy With Confidence privacy notice

Read our privacy notice for information on how we collect, store and process your data.

The council is the data controller for purposes of the Data Protection Act (2018) and EU General Data Protection Regulation as of May 2018 and is registered as a data controller with the Information Commissioner’s Office (ICO)

Brighton & Hove City Council are committed to protecting your personal information. As a data controller we have a responsibility to make sure you know why and how your personal information is being collected in accordance with relevant data protection law.

Purposes and lawful basis of processing

We are collecting your data for the purpose of processing your application to join the Buy with Confidence Membership Scheme. Your information will be used to complete the necessary checks needed for approval, including credit and background checks. We will also require a Disclosure Barring Service Certificate to process your application. We may also need to use your contact details for communication purposes in connection with the membership. If you are found to have been dishonest or committed an unlawful act your information may be used in any investigation and the necessary enforcement action.

Our lawful basis for collecting and processing your personal data is under the performance of a task carried out in the public interest. Special category data is collected because there is a substantial public interest, specifically relating to the Data Protection Act 2018, Schedule 1, Part 2, Paragraph 11 'protecting the public against dishonesty etc.'.

Who we will share your data with

Your data will not be shared internally, however, your trading name and contact number will be put on the regional Buy with Confidence website and the directory.

How long we will hold your data (retention)

We will hold your data for the whole time you are a Buy with Confidence member plus three years. If your application is refused we will keep information for one year from the decision. If your membership is revoked then your information will be kept for six years from that decision.

Transferring data outside the European Economic Area

Your information is not processed outside of the European Economic Area.

Your information rights

Under GDPR you have certain rights concerning your information.

For further information on your rights visit our website.

How to get advice or make a complaint

Data protection contact information 

If you’d like to discuss your data protection rights, you can contact the Data Protection Team. Only use these contact details if you have questions about data protection and not for questions about other services. 

We also have a Data Protection Officer. Visit our data protection officer page to find their contact details. 

Please contact the Data Protection Team first if you have any concerns. 

You can then contact the Information Commissioner’s Office (ICO). The ICO is the national regulator with responsibility for ensuring compliance with data protection.