Read our privacy notice for information on how we collect, store and process your data.
The council is the data controller for purposes of the Data Protection Act (2018) and EU General Data Protection Regulation as of May 2018 and is registered as a data controller with the Information Commissioner’s Office (ICO)
Brighton & Hove City Council are committed to protecting your personal information. As a data controller we have a responsibility to make sure you know why and how your personal information is being collected in accordance with relevant data protection law.
We are collecting your data for the purpose of investigating compliance of a food business. Information gathered may be used to update and amend records or as part of our investigation. From our investigations we may issue food hygiene rating scores and/or take enforcement action where necessary. Contact details may be used in relation to any investigation.
Our lawful basis for processing data is due to our legal obligations under the Food Safety Act 1990.
During investigations we may collect special category data, which would be done so under substantial public interest, specifically the Data Protection Act 2018 Schedule 1, Part 2, Paragraph 12 ‘regulatory requirements relating to unlawful acts and dishonesty etc.’.
Your data may be shared internally with other Regulatory Services Teams, Legal Services, School Organisations and the Communications Team.
Your information may also be shared externally with other local authorities, Food Standards Agency, Public Health England, the courts, the Chartered Institute of Environmental Health or the food business being investigated or their representative. We use an email and text message service provider, Gov.UK Notify to send email and text updates. Your contact email address and mobile number may be uploaded to Gov.UK Notify so that we can contact you quickly with information we are under a duty to provide to you in association with our services. These details will be used solely for the purpose of making contact when we are required to.
Details are held on their servers for no longer than 7 days after an email/text has been sent. Find more information on their security settings.
For business operators, your information will be kept for six years from when your business closes and for those who have made a complaint, your information will be kept for six years from when the case closes.
Your information is not processed outside of the European Economic Area.
Under GDPR you have certain rights concerning your information.
Check your rights in relation to your personal information.
If you have a concern about how we collect or use your personal data you can contact the Council’s Data Protection Officer.
We aim to resolve all complaints about how we handle personal information. You also have the right to make a complaint about data protection to the Information Commissioner's Office.
Contact them by post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF or phone 0303 1231 113.
You can also make a complaint or find out more information on the Commissioner's Office website.
If your complaint is not about data protection, find details on how to make a complaint about a council service.