This notice should be read in conjunction with our corporate privacy notice.
Who are we?
North Yorkshire Council is a ‘Data Controller’ as defined by Article 4(7) of the UK General Data Protection Regulation (UK GDPR).
What personal information do we collect?
In order to deliver our service, we need to collect the following personal data:
- names and contact details
- addresses
- date of birth
- case history
- financial information
Why do we collect your personal information and what is our lawful basis for processing?
We need to collect this information in order to fulfil our obligations in regard to the provision of the following services:
Credit control team
Purpose
We collect your personal information so that we can:
- manage invoices and issue statements, reminders and final notices
- recover unpaid debt owed to the council
- instigate county court action (in conjunction with legal services) refer cases to external debt collectors where necessary
- manage payments (including payment plans)
- issue correspondence and liaise with you regarding any debt raised and provide advice and assistance
- assist with managing the affairs of deceased persons
Lawful basis
UK GDPR Article 6(1)(b) - processing is necessary for a contract you have with the individual, or because they have asked you to take specific steps before entering into a contract.
UK GDPR Article 6(1)(f) – processing is necessary for your legitimate interests or the legitimate interests of a third party.
Who do we share this information with?
In the course of delivering the above stated services, we may share your information with a number of external agencies who are key to delivering our services. These include:
- Experian – if we need to contact you and we do not have your address (or believe that the address details we hold for you may be incorrect or outdated) then we may request your contact details from Experian. In order to help them find your records, we are required to share your name and address with them. Their check will confirm if the contact details we hold for you are accurate according to their records
- 118 electoral register – as above – we may be required to share your name and address with 118 electoral register in order to obtain up to date contact details for you
- external debt recovery agents
How long do we keep your information for?
The following table details the retention periods for records relating to the specific service stated above:
Credit control team
| Data held | Retention period |
|---|---|
| Debt recovery information (including name and contact details of the individual connected to the debt) | Year record created plus 6 years (after last payment) |
Other relevant transparency information
Other data that we may hold about you is only kept for as long as is necessary and all data is retained in line with our record retention and disposal schedule (RRDS).
For more information about how we use your data, including your privacy rights and the complaints process, please see our corporate privacy notice.