Council Tax Energy Rebate Privacy Notice

Read our privacy notice for information on how we collect, store and process your data.

The council is the data controller for the purposes of the Data Protection Act (2018) and the General Data Protection Regulation (EU) 2016/679 ("GDPR") and is registered as a data controller with the Information Commissioner’s Office (ICO). Brighton & Hove City Council is committed to protecting your personal information. As a data controller we have a responsibility to make sure you know why and how your personal information is being collected in accordance with relevant data protection law. 

Purpose for the collection and use of your data 

The government’s Council Tax Energy Rebate is a one-off cash payment of £150 for households in England, whose primary residence is valued in Council Tax bands A to D on 1 April 2022. The scheme falls outside of the Council Tax system but uses the Council Tax database to identify eligible households.    

The council is collecting your information for the purposes of assessing eligibility and making payments under the Council Tax Energy Rebate scheme and the associated Discretionary Scheme. 

We will obtain your personal data from our existing Council Tax database and any additional information you provide, such as your bank details for payment to be made. This may include ‘special category data’ such as health information when related to exemptions, discounts, or applications to the discretionary scheme. The type of information the council uses for the purposes of processing the Energy Rebate to eligible households will include your: 

  • name 
  • address 
  • bank or building society details 
  • email address 

Lawful Basis for Processing Your Data 

Processing of your data is done in the main under the lawful basis of Public Task [GDPR Article 6, 1(e)] 

Where it is necessary to process special category (sensitive) data about you, this will be done under the lawful basis of substantial public interest [GDPR Article 9(2)(g)]. Depending on the circumstances, the substantial public interest being served may relate to the need to process data for statutory and government purposes [Data Protection Act 2018, Schedule 1, Part 2, Para 6] or safeguarding economic wellbeing [Data Protection Act 2018, Schedule 1, Part 2, Para 19]. 

Who We Will Share Your Data With 

We will not disclose your information to another organisation unless it is to detect or prevent fraud, is necessary by law, or is required to provide you with a service.  

We will share the details you provide with Spotlight, which is the government's online automated checking tool. This will allow us to confirm your name and address against the bank details provided, along with other checks  

In order to process your application, we will share your details with our processing team from our software supplier NEC.   

The council may need to share information with the Department for Levelling Up, Housing and Communities for monitoring and reconciliation purposes.     

How Long We Will Hold your Data (Retention) 

We will not keep your data for longer than is necessary, subject to any legal obligations to retain the data.     

Transferring Data outside the European Economic Area 

Your information is processed within the UK. It will not be transferred outside the European Economic Area. 

Your information rights  

  • Under GDPR you have certain rights concerning your information. 
  • For further information on your rights visit our website.  

How to get advice or make a complaint 

Data protection contact information 

If you’d like to discuss your data protection rights, you can contact the Data Protection Team. Only use these contact details if you have questions about data protection and not for questions about other services. 

We also have a Data Protection Officer. Visit our data protection officer page to find their contact details. 

Please contact the Data Protection Team first if you have any concerns. 

You can then contact the Information Commissioner’s Office (ICO). The ICO is the national regulator with responsibility for ensuring compliance with data protection.