You are here:

  1. Home
  2. Services
  3. Council and elections
  4. Privacy notices
  5. Corporate privacy notice

Corporate privacy notice

Online council services

Privacy and cookies

We are a data controller under the Data Protection law as we collect and process personal information about you in order to provide public services and meet our statutory obligations. Please see below 'Why we need your information', for a full description of the public services in which we may use your personal data.

We are committed to protecting and respecting your privacy. Through this Privacy Notice we have sought to be as transparent as possible to fully explain how your personal data is held and processed.

This Privacy Notice explains when and why we collect personal information about people who engage or come into contact with us, whether via applying or receiving our services, living or visiting the borough or our website.  Upon visiting our websites, we will use third party service providers to collect technical information from your device including standard internet log information such as the Internet Protocol (IP) address, your browser type and version, and certain page interaction information.

This notice explains how we collect, use and share your information and how long we keep it, and how we keep it secure.

Each service that we provide or you engage with also has its own Privacy Notice to explain in more details how they use your information and the legal basis for using the information.

We may change this Privacy Notice from time to time so please check this page regularly to ensure that you’re happy with any changes.

Any questions regarding our privacy practices should be sent by email to:

Data Protection Officer
Waltham Forest Town Hall
Forest Road
London
E17 4JF
Email: Information.Officer@walthamforest.gov.uk

What type of information is collected about you Click to get info

We may collect various types of personal data about individuals depending on the services you receive and your contact with the council, such as your:

  • contact details; including name, address, email address, telephone number, etc.
  • date of birth
  • proof of identity
  • national identifiers such as; NHS number and NI numbers
  • information about your family
  • IP address and information regarding what pages are accessed and when
  • lifestyle, social and personal circumstances
  • the services you receive
  • financial details for purposes of receiving or making payments
  • employment details (when you apply for jobs)
  • housing information relating your council tenancy
  • visual images, personal appearance and behaviour
  • licenses or permits held
  • business activities

We may also collect sensitive personal data (also known as special categories of data) that may include:

  • physical or mental health details
  • racial or ethnic origin
  • gender and sexual orientation
  • trade union membership
  • political affiliation and opinions
  • offences (including alleged offences)
  • religious or other beliefs of a similar nature
  • criminal proceedings, outcomes and sentences

We may also record and monitor telephone calls to our Contact Centre for quality and training purposes.

Why we need your information Click to get info

We need your personal data in order to provide you with council services that you apply for or receive from us and also for where we are required to use information in order to meet our statutory obligations or public tasks.  We will only collect personal data that is absolutely necessary and any information we collect about you will be strictly in accordance with the Data Protection legislation and other statutory obligations which we are bound by.

We process your information for the following services:

In most cases the information will be collected and used where we have statutory obligations to collect use or share your information or where you have consented or agreed to receive a service. For example, "Service Store".

You will be advised of any additional purposes or uses at the time the information is collected or used.

Who your information may be shared with Click to get info

We have a statutory obligation to collect, process and share personal or sensitive personal information without consent, with our partners such as the NHS, housing associations, schools, central government, such as DWP, HMRC, Home Office, Dept. Of Education, Dept. of Health, other councils and law enforcement agencies such as the Police and the Crown prosecution service, for the following purposes:

  • health and wellbeing and public health
  • safeguarding of vulnerable adults and children
  • the prevention and detection of crime
  • the assessment of any tax or duty
  • collection of debt
  • if we are required to do so by any court or law
  • prevention of fraud
  • the national fraud initiative
  • protect you or other individuals from serious harm
  • protect public funds
  • public safety and law enforcement
  • criminal or civil prosecution of offenders
  • national security

We may also share your information with our partners to deliver national government programmes and initiatives such as the Troubled Families programme, or improving services we deliver, or provide the services you agreed to receive. We may share with: 

  • NHS (GPs, hospital, mental health, CCGs etc.)
  • schools
  • voluntary sectors
  • central government
  • other councils
  • housing associations

In most cases this will be done where there is a lawful basis under the conditions set out in the Data Protection Legislation.

We may also share your information with third party service providers working on our behalf for the purposes of completing tasks and providing services to you on our behalf (for example; domiciliary care providers).  However, when we use third party service providers, we disclose only the personal information that is necessary to deliver the service and we have a contract in place that requires them to keep your information secure, as required by the Data Protection Act 1998 and General Data Protection Regulation 2016 (GDPR), and not to use it for any other purposes.

We will never use or share your personal information to third parties for marketing purposes without your permission.

How long we keep your information Click to get info

We review our retention periods of the information we hold about you on a regular basis.  We are legally required to hold some types of information to fulfil our statutory obligations.

We will hold your personal information on our systems for as long as it is necessary for the relevant activity or service that we provide to you, or as required by law.

Analytics Click to get info

Google Analytics

We use Google Analytics to collect information about how people are using our website - what information they look at, how they use a web page, how long they spend on the site, etc.

This information is only processed in a way which does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website.

If we do want to collect personally identifiable information through our website, we will be up front about this. We will make it clear when we collect personal information and will explain what we intend to do with it.

Hotjar

We use Hotjar in order to better understand our users’ needs and to find ways to improve our website.
Hotjar helps us better understand our users experience (e.g. how much time they spend on which pages, which links they click on, what users do and don’t like, etc.) and this enables us to build and maintain our service based on user feedback.

Hotjar uses cookies and other technologies to collect information on our users’ behaviour:

  • IP address (captured and stored only in anonymized form)
  • Device screen size
  • Device type (unique device identifiers)
  • Browser information
  • The country you are in

Hotjar stores this information in a pseudonymized user profile. Neither Hotjar nor we will ever use this information to identify individual users or to match it with further data on an individual user.

For further details, please see Hotjar’s privacy policy .

You can opt-out to the creation of a user profile, Hotjar’s storing of data about your usage of our site and Hotjar’s use of tracking cookies on other websites by following this opt-out link.

Cookies Click to get info

Upon visiting our website, cookies are used to collect information about website usage. Cookies are also set when you:

  • click on social networking buttons in our pages such as Facebook and Twitter
  • watch videos
  • register for services
  • take part in online surveys

Find out more about the cookies used on this website.

Marketing and e-newsletters Click to get info

We always acts upon your choices around what type of communications you want to receive and how you want to receive them.  Where you have signed up for one of our newsletters, we will seek your consent as well as use email newsletters to inform you of what we’re doing, news and events.

Tools may be used to help us improve the effectiveness of our communications with you, including tracking whether the emails we send are opened and which links are clicked within a message.  This helps us to improve and refine future email marketing around our campaigns and make sure all our emails are relevant and useful as possible.

You have a choice about whether or not you wish to receive information from us. 

GovDelivery will be used for storing details about consent and marketing materials.

Gathering customer feedback Click to get info

We use GovMetric to gather feedback on the services we provide to customer so we can learn from the issues people are having with our services so that we can improve them.

View GovMetric's privacy policy.

Web chat Click to get info

We use Click4Assistance to supply and support our web chat service, which we use to handle customer enquiries in real time.

If you use web chat we will collect your name, email address (optional) and the contents of your chat session.

You can request a copy of your chat session if you provide your email address at the start of your session or when prompted at the end.

See Click4Assistance's own privacy policy.

Business intelligence Click to get info

We may analyse your personal information to improve services and for the following purposes;

  • undertake statutory functions efficiently and effectively
  • service planning by understanding your needs to provide the services that you request
  • understanding what we can do for you and inform you of other relevant services and benefits
  • help us to build up a picture of how we are performing at delivering services to you and what services the people of Waltham Forest need
  • analysis of costs and spend of services we provide so that we can to ensure better and efficient use of public funds
  • evaluating, monitoring health of the Waltham Forest population and protecting and improving public health

We are committed to using pseudonymised or anonymised information as much as is practical, and in many cases this will be the default position.

Pseudonymisation is a procedure by which the most identifying fields within a data record are replaced by one or more artificial identifiers, or pseudonyms. There can be a single pseudonym for a collection of replaced fields or a pseudonym per replaced field.

Anonymisation is the process of removing identifying particulars or details from (something, especially medical test results) for statistical or other purposes.

Profiling and automated-decision making Click to get info

Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a person, to analyse or predict aspects concerning that person’s economic and health situation, reliability, personal preferences and interests etc.

Automated-decision making means any processing that is carried out by automated means without any human review element in the decision-making.  For example; carrying out credit checks searches to detect and reduce fraud.

We may use your information from the different services that you engage with to create a single view and profile of you, which will help us to better understand your specific needs and ensure we are providing the right and efficient services to you in accordance with your needs as well as ensure that we hold one accurate record of your basic personal data across all our council services; such as your name, date of birth, address, email address, change in circumstances etc.

Profiling will be carried out only when it is necessary in order to provide you with the service you have agreed to receive or where we have a statutory obligation or where to the law allows. However, we will notify you where we would do this and where required we will seek your consent.

Protecting your information Click to get info

Any information held by us about individuals is held securely and in compliance with the Data Protection Act 2018 and GDPR

We are committed to protecting its service user’s personal data.  We have put measures in place to ensure that our staff, service providers, partners and suppliers all protect your information in line with good practice and the law. These follow the rules and practices known as Information Governance (IG).

The information security measures we've put in place include:

  • following good Information Governance practice and the law when it comes to collecting, handling and giving access to information
  • training staff in their data protection responsibilities
  • putting processes in place to ensure good Information Governance practices for information we collect, hold or handle in both manual and electronic forms
  • access to your information is only given to those who need to know and where it is necessary
  • information will not be held for longer than required and will be disposed of securely
  • we encrypt all our electronic devices and sensitive information that is transmitted.

How you can access, update, restrict, remove or correct your information Click to get info

The General Data Protection Regulation (GDPR) gives you certain rights regarding your data and the way we use it.

You can ask us to:

  • send you a copy of the data we hold about you (called a Subject Access Request)
  • erase your data (Subject Erasure Request)
  • transfer your data (Subject Portability Request)
  • correct your data (called a Subject Rectification Request)
  • limit the use of your data (called a Subject Processing Restriction Request)
  • stop using your data (called a Subject Processing Objection)

Find out how to make these requests, on our Your data privacy page.

The accuracy of your information is important to us to be able to provide relevant services more quickly.  We continue to work to make our record keeping more efficient.  

You can request that we remove your details from our database at the address below.  We will remove data in accordance with your wishes excluding data we are required to keep by law.

If you change your address or email address, or if any of your circumstances change or any of the other information we hold is inaccurate or out of date, please contact us, or write to or email us at:

Information Officer
Business Hub
Waltham Forest Town Hall
Forest Road
Walthamstow
E17 4JA
Email: Information.Officer@walthamforest.gov.uk

Alternatively, you can log on to your 'My Account' using your account details

Your information choice and rights Click to get info

Where we use your personal data for other purposes other than what you have consented or where we have to fulfil a statutory obligation, or where the data protection law allows, then we will let you know so that you can make an informed choice about how your information is used.

If you do not want your information to be used for any purpose beyond providing the services you have agreed to receive, such as; sharing it with our partners or providers for service delivery planning or improvement of services or for Business Intelligence, profiling research or statistical purposes (in such instance only minimum and necessary, anonymised or pseudonymised data will be used), you can choose to opt-out of this.

You may not be able to object to your information being used, held, or shared under certain circumstances.  For example, where have a duty to safeguard a vulnerable adult or a child, or the prevention and detection of crime, or where we are required to fulfil our statutory obligations.

Where you would like to withdraw your consent or opt-out of any other use of your information, please write to:

Data Protection Officer
Waltham Forest Town Hall
Forest Road
London
E17 4JF
Email: Information.Officer@walthamforest.gov.uk

 

Information Commissioner’s Office Click to get info

The Information Commissioner is the UK's independent body set up to uphold information rights.

If you would like to know more about your rights under the Data Protection law, and what you should expect from us, visit the Information Commissioner’s website.

If you have any concerns regarding our privacy practices or about exercising your Data Protection rights, you may contact the Information Commissioner’s Office:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Tel: 0303 123 1113 or 01625 545 745 
Email: casework@ico.org.uk

Changes to our privacy policy 

The terms of this Privacy Notice may change, so please recheck periodically. This statement was last updated May 2018.