The Council is the data controller for purposes of the Data Protection Act (2018) and EU General Data Protection Regulation as of May 2018 and is registered as a data controller with the Information Commissioner’s Office (ICO)

Brighton & Hove City Council are committed to protecting your personal information. As a data controller we have a responsibility to make sure you know why and how your personal information is being collected in accordance with relevant data protection law.

Purposes and lawful basis of processing

We are collecting your data for the purpose of responding to your complaint or query regarding environmental health issues. Information gathered will be used determined what action is necessary, including enforcement action. We may use contact details for communication purposes in relation to the matter.

The nature of your complaint or query will depend on which legislation we will use. The following pieces of legislation give us either a duty or power to act upon you complaint or query:

  • Environmental Protection Act 1990
  • Prevention of Damage by Pest Act 1949
  • Public Health Act 1936 & 61
  • Environmental Permitting (England and Wales) Regulations 2010
  • International Health Regulations 2005
  • Public Health (Ships) (amendment) (England) Regulations 2007
  • Burial Act 1857
  • International Health Regulations 2005
  • Licensing Act 2003
  • Building Act 1984
  • Private Water Supplies Regulations 2018
  • Local Government (Miscellaneous Provisions) Act 1982
  • The Environmental Information Regulations 2004

Sometimes it is necessary to process special category data and our lawful basis for doing so is Substantial Public Interest, specifically working within the Data Protection Act (2018), Schedule 1, Part 2, Paragraph 6 ‘statutory etc. and government purposes’.

Who we will share your data with

Your data may be shared internally with other Regulatory Services Teams, Legal services, Housing, Family Children & Learning, Health & Adult Social Care, Planning, City Clean and Highways. Your data may also be shared externally with other local authorities, government organisations, consultants, utility companies, educational establishments, mediation services and property owners or their representatives. 

How long we will hold your data (retention)

We will hold your data for six years from the conclusion of the case. 

Transferring data outside the European Economic Area

Your information is not processed outside of the European Economic Area.

Your information rights 

Under GDPR you have certain rights concerning your information.

How to get advice or make a complaint

Data protection contacts

If you wish to discuss any of your data protection rights, you can contact the Data Protection Team on 01273 295959 or by email at

Contact the council's Data Protection Officer 

Whilst we would prefer that you contact us first with any concerns that you might have, you can also contact the Information Commissioner’s Office. The ICO is the national regulator with responsibility for ensuring compliance with data protection.

Information Commissioner’s Office

You also have the right to lodge a complaint with a supervisory authority. Contact details for the ICO is stated below:

You can contact the ICO:

  • on their website
  • by telephone: 0303 123 1113
  • by post: Wycliffe House, Water Ln, Wilmslow SK9 5AF

This Privacy Notice will be subject to review when there is a change.