Woodvale Lodge service privacy notice

Read our privacy notice for information on how we collect, store and process your data.

The council is the data controller for purposes of the Data Protection Act (2018) and The General Data Protection Regulation (EU) 2016/679 ("GDPR") and is registered as a data controller with the Information Commissioner’s Office (ICO) under registration number Z5840053.

Brighton & Hove City Council are committed to protecting your personal information. As a data controller we have a responsibility to make sure you know why and how your personal information is being collected in accordance with relevant data protection law.

Purposes and lawful basis of processing

  • Information relating to a deceased person does not fall under the remit of Data Protection, however the information we process relating to any applicant or living person is personal data and therefore subject to data protection legislation.
  • We are collecting your data for the purpose of process your application for a burial, cremation, headstone, or to purchase a Right of Burial to a grave, memorialisation, or any enquiries related to Bereavement Services.
  • There is a range of different lawful bases for processing personal data. We rely on one or more of the following reasons to process your data:
    • To comply with a legal obligation we are subject to such as Cremation Act 2008, Local Authorities Cemeteries Order 1977 and section 46 Public Health (Control of Disease) Act 1984
    • To perform a contract which you have entered into with us
    • To perform a task carried out in the public interest or where exercising official authority
  • We may process special category data relating to your race, ethnic origin, religious beliefs, health, sex life, or sexual orientation. We will only do so where we have identified an additional condition to our lawful basis for doing so. The basis which we rely on is that processing is necessary for one or more of the following reasons: you have given us explicit consent to do so, in order to carry out certain obligations, and/or processing is in the substantial public interest.

Who we will share your data with

  • Your data may be shared with council’s internal departments (such as housing) and external organisations, such as the coroner, medical referee, care homes, registrar, funeral directors and memorial masons.
  • The council is required by law to protect the public funds it administers. Therefore we may use any of the information you provide to us for the prevention and detection of fraud or to comply with the law.
  • The council operates shared services with Surrey County Council and East Sussex County Council and may share your information with one of these partners if necessary to provide these services.

How long we will hold your data (retention)

Much of your data we may have to hold in perpetuity as a statutory requirement. Depending on some type of information we will keep your information for 15 years (cremation), 10 years and 5 years for renewal or extension period (memorial applications).

Further information regarding our retention policy is available from the Bereavement Service.  

Your information rights

Under GDPR you have certain rights concerning your information. Learn more on our privacy and data webpage.

How to get advice or make a complaint

Data protection contact information 

If you’d like to discuss your data protection rights, you can contact the Data Protection Team. Only use these contact details if you have questions about data protection and not for questions about other services. 

We also have a Data Protection Officer. Visit our data protection officer page to find their contact details. 

Please contact the Data Protection Team first if you have any concerns. 

You can then contact the Information Commissioner’s Office (ICO). The ICO is the national regulator with responsibility for ensuring compliance with data protection.