The council is the data controller for purposes of the Data Protection Act (2018) and EU General Data Protection Regulation as of May 2018 and is registered as a data controller with the Information Commissioner’s Office (ICO)

Brighton & Hove City Council are committed to protecting your personal information. As a data controller we have a responsibility to make sure you know why and how your personal information is being collected in accordance with relevant data protection law.

Purposes & lawful basis of processing

We are collecting your data for the purpose of processing your application to join the Support with Confidence Personal Assistance (PA) Scheme. Your information will be used to make the necessary checks to be approved, including credit and background checks. Information provided may also be used to provide you with the training required to be accredited with the scheme. We may also need to use your contact details for communication purposes in connection with your PA approval. A Disclosure Barring Service check will be completed by Halifax Care Ltd, who will then inform us of the result.

Our lawful basis for collecting and processing your personal data is under the performance of a task carried out in the public interest. Special category data is collected because there is a substantial public interest, specifically relating to the Data Protection Act 2018, Schedule 1, Part 2, Paragraph 18 'Safeguarding of children and individuals at risk.’

Who we will share your data with

Your data may be shared internally with the Adult Social Care Team. We will also share your data externally with Halifax Care Ltd who provide the necessary training. If your application is successful, your information will be put on the council’s website for the public to view.

How long we will hold your data (retention)

We will hold your data for the whole time you are an approved Support with Confidence PA plus three years. If your application is unsuccessful then we will keep your information for one year from that decision. Should your membership be revoked then we will hold your information for six years from that decision.

Transferring data outside the European Economic Area

Your information is not processed outside of the European Economic Area.

Your information rights

Under GDPR you have certain rights concerning your information.

For further information on your rights visit our website.

How to get advice or make a complaint

Data protection contacts

If you wish to discuss any of your data protection rights, you can contact the Data Protection Team on 01273 295959 or by email at

Contact the council's Data Protection Officer 

Whilst we would prefer that you contact us first with any concerns that you might have, you can also contact the Information Commissioner’s Office. The ICO is the national regulator with responsibility for ensuring compliance with data protection.

Information Commissioner’s Office

You also have the right to lodge a complaint with a supervisory authority. Contact details for the ICO is stated below:

You can contact the ICO:

  • on their website
  • by telephone: 0303 123 1113
  • by post: Wycliffe House, Water Ln, Wilmslow SK9 5AF

This Privacy Notice will be subject to review when there is a change.