More for Eastfield

This privacy notice is designed to help you understand how and why the North Yorkshire Council, processes your personal data. This notice should be read in conjunction with our corporate privacy notice.

Who are we?

North Yorkshire Council is a ‘data controller’ as defined by Article 4(7) of the UK General Data Protection Regulation (UK GDPR). More for Eastfield project is a CLLD funded project which is a partnership of local organisations who are working together to support residents who need help to get into work or training.

The council has appointed Veritau to be its Data Protection Officer. Their contact details are:

Information Governance Office


West Offices

Station Rise


North Yorkshire



Tel: 01904 552848

What personal information do we collect?

The council will collect the following personal data:

  • name
  • address
  • date of birth
  • national insurance number
  • telephone number
  • email address
  • proof of ID which could include copies of passports, driving licences, etc
  • records of correspondence with you via email, letter, or phone
  • call recordings (you will be informed upon contacting the council if your call is being monitored or recorded)
  • we also collect evidence such as photographs, and video footage to help develop case studies

The council also collects the following information relating to project partners and external organisations involved in the programme (for instance, those who support the project, or we signpost to):

  • name and role
  • work email address and telephone numbers.

Why do we collect your personal information?

The council collects personal information of all the clients who would like to sign up for the MORE project for the following reasons:

  • to enable clients to gain access to the support provided by the project
  • to signpost clients to support which is provided by the council or external organisations
  • to assess eligibility for the project
  • to evidence the council’s participation in the more for Eastfield CLLD project, client details are recorded for statistical and contractual purposes

The council also collects data relating to organisations to be able to signpost clients to them and keep them informed of developments and activities within the project and encourage referrals.

Who do we share this information with?

We may use your personal data in case studies about the project but we will only do this with your permission.

The council has a duty to protect public funds and may use personal data and data-matching techniques to detect and prevent fraud, collect taxes and ensure public money is being used in a cost-effective manner. Your personal data may be shared with other bodies responsible for auditing or administering public funds, including the department for work and pensions, HM revenue and customs, the police and other local authorities.

How long do we keep your information for?

The council will retain your personal information in accordance with the organisation’s retention schedule. For the purposes of satisfying its statutory obligations, the council is required to retain some information for a set period. However, where statutory retention periods do not apply, the Council will only retain the data for as long as necessary to fulfil the purpose it was collected for.

What is our lawful basis for processing your information?

North Yorkshire Council relies on the following lawful basis to process your personal data:

UK GDPR Article 6 (1) (a) - the data subject has given consent to the processing of his or her personal data for one or more specific purposes. For example, you have agreed to allow us to use your information in a case study.

UK GDPR article 6 (1)(b)-processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.

UK GDPR Article 6 (1) (c) -processing is necessary for compliance with a legal obligation to which the controller is subject.

UK GDPR Article 6 (1) (f)- processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party.

For more information about how we use your data, including your privacy rights and the complaints process, please see our corporate privacy notice.