This privacy notice is designed to help you understand how and why we process your personal data in relation to Bus Passes. This notice should be read in conjunction with our corporate privacy notice.
Who are we?
North Yorkshire Council is a ‘data controller’ as defined by Article 4(7) of the UK General Data Protection Regulation (UK GDPR).
Older people of pensionable age and disabled people are entitled to a bus pass giving free off-peak travel on local bus services anywhere in England. This notice details how we will process personal data in order to facilitate this scheme.
We have appointed Veritau Ltd to be our data protection officer. Their contact details are:
Information Governance Office
Veritau
West Offices
Station Rise
York
North Yorkshire
YO1 6GA
Email: infogov@northyorks.gov.uk
Tel: 01904 552848
What personal information do we collect?
When applying for your bus pass, you will be asked to provide the following information that will be collected, stored and processed:
- basic identifiers: title, name, address, date of birth, and gender
- contact details: telephone number and email address
- supporting evidence of your age; if applying for an older persons pass
- a head and shoulder photograph or image
- the reference number from your current bus pass (for renewals)
- blue badge number (if applicable)
If applying for a disabled persons pass then we will also ask for disability type and supporting evidence of your disability. See details of the eligibility criteria and evidence required on our disable persons bus pass page on our website.
Why do we collect your personal information?
We collect your personal information in order to check your eligibility for the service using the guidelines provided by the department for transport and to facilitate the issuing of the bus pass. Your information may also be used to contact you when your bus pass has expired to remind you to reapply or to automatically reissue you with a card.
Who do we share this information with?
We have a contract in place with a third party called ENCTS card management company and ENCTS card printing company who we share this information with so that your bus pass can be printed and sent out to you.
We may share your information within our organisation and with external organisations such as the Police and other councils if we suspect that a bus pass is being used fraudulently and /or a vulnerable person may be at risk. Basic identifiers and contact details are shared with our other internal teams in order to offer consistent customer support.
We participate in the national fraud Initiative which is currently run by the cabinet office. Your information will be shared with Cabinet Office as part of an exercise that matches electronic data within and between public and private sector bodies to prevent and detect fraud.
| Data held | Retention period |
|---|---|
| Customer details and records relating to bus pass applications, including supporting documentation sent with your application. | For as long as the customer chooses to have a live bus pass. Where bus passes are cancelled or not renewed data will be removed from the system within 12 months. |
What is our lawful basis for processing your information?
We process your personal data in order to comply with our statutory duty as a travel concession authority of issuing travel concession permits to eligible residents as set out in the Transport Act 2000.
For more information about how we use your data, including your privacy rights and the complaints process, please see our corporate privacy notice.