Privacy notices

Skip to:

This privacy notice is here to tell you what information we collect about you, what we do with that information and why we do it, who we share it with, and how we protect your privacy.

Privacy notices for specific services can be found here:

Homes for Ukraine

We have a Homes for Ukraine Privacy Notice that describes the personal data we are processing as part of the council’s response to the Homes for Ukraine Scheme

COVID-19 response work

We have a COVID-19 Privacy Notice that describes the personal data we are processing as part of the council’s response to COVID-19

Elections and Electoral Registration

By law, the council must appoint an Electoral Registration Officer (ERO) and a Returning Officer (RO) who have legal powers and a statutory duty to collect and process personal data. The ERO/RO is a separate data controller to the council. This information describes the council’s activities and does not apply to the processing of personal data for Elections or Electoral Registration.

Elections and Electoral Registration Privacy Notice

Personal information

Personal information is information that identifies a living person. That can be obvious information like name and address, or it may be something like an IP address or an identifier like an NHS number.

This includes information you tell us about yourself, information we are given by other people or organisations, or what we learn by having you as a resident or client.

Some information is considered more sensitive or special:

  • sexuality and sexual health
  • religious or philosophical beliefs
  • ethnicity
  • physical or mental health
  • trade union membership
  • political opinion
  • genetic/biometric data
  • criminal history.

We must take extra care when collecting and using these types of information.

Why we need your personal information

We use personal information in many ways, either because the law says we must, or because the law allows us to, so that we can deliver council services. We use personal information:

  • to provide services and support to you. For example, you give us information on a benefit claim form so that we can handle your benefit claim
  • to protect and support people living and working in our borough (safeguarding)
  • manage our services to see how we can best deliver services and support to you, and make sure we’re spending public money in the best way
  • to monitor how well we dealt with your request, for admin purposes and to handle any complaints.
  • so that we can tell you about and provide services that suit your needs. For example, providing assistance to new parents, or telling you about any free services or additional help available to you
  • because the law says we must. For example, the council must monitor how well it meets the requirements of laws on equalities and health and safety
  • where we need to for legal duties. The council has responsibilities for areas like licensing of premises (such as pubs), planning enforcement, trading standards and council tax where we legally must process personal information. Sometimes this is information provided by the individual and sometimes other people or organisations have provided information about individuals, for example if someone makes a complaint to us
  • where we must process personal information so that we comply with legal obligations for the prevention and detection of crime. For example, investigating fraud against the council or working with the police
  • so that we can make financial transactions for things like grants, payments and benefits involving the council, or where the council is acting for another government body like the Department for Work and Pensions (DWP)
  • for statistical and research purposes.

Why we can use your personal information

We can only collect and use (process) personal information if we have a proper reason or 'legal basis' to do so. In most cases, our legal basis is because there is a law or laws that require us to deliver a service. We call this a statutory duty.

The legal reasons for using personal information are:

  • it is necessary to undertake our statutory duties
  • it is required by law
  • you have entered into a contract with us
  • it is necessary to deliver health or social care services 
  • you, or your legal representative, have given consent
  • you have made your information publicly available
  • it is necessary for legal cases
  • it is necessary for employment purposes
  • it is necessary to protect someone in an emergency
  • it is to the benefit of society as a whole
  • it is necessary to protect public health
  • it is necessary for archiving, research, or statistical purposes.

Who we share information with

We do not sell your personal information to anyone. We don't share your personal information with any people or organisations unless they are providing services to us under contract or where providing that information is allowed by, or required by, law.

Personal information we collect is routinely shared between council services as well as with other organisations such as government bodies, the police, health & social care organisations and educational establishments like schools. We do this where have a legal basis to do so.

We consider Barnet to be a ‘commissioning council’, where we work with partners like the health service, or private companies to deliver the best service that is also value for money.

Our partners include Barnet Homes for housing services and Your Choice Barnet for specialist social care and support to adults. Companies that we ask to work on our behalf include Capita for the Customer Support Group (CSG) contract, who provide services such as HR and Revenues and Benefits, or the joint venture company Re Limited, for services such as planning and environmental health.

We only share information with these organisations where the law says we must, or where the law says that we can. We require these organisations to follow the law, including data protection laws, and we make routine checks before information is shared, to make sure that these organisations have adequate systems and procedures in place to protect your information.

What we do with your information

There are some things we do across the whole council that use your personal information, these are listed below. We also use different information for delivery of different services and to make this information easy to use, on the left-hand side you will see categories of the services that we deliver. This is so that you can easily identify which processes affect you.

Reviewing and improving our services

We regularly use personal information to look at how people are using our services and whether we are performing well. This may be assessments that we do within our services, or we might contact you to ask you for feedback on our services.

This helps us to improve the way we deliver services to you, and to plan the best way to deliver services to people.

We like to share any comments or compliments you give us, to thank our staff or publicise council projects and services. Where we do this, we will remove your personal details from your comments or compliments to anonymise them. Once anonymised, the comments will not allow you to be identified.

Statutory Returns and Public Registers

A statutory return is when the law says that we must provide specific information about you to another organisation. An example of this would be the pupil census data that the council must provide to the Department of Education.

We are also required to publish some information or make it available on a public register.

Data Matching (comparing information from different sources)

We routinely check information we hold about you across different areas of the council. We also sometimes collect information about you from other organisations (such as another council). We do this so that we can:

  • check that the information we hold about you is accurate
  • prevent or detect crime
  • protect public funds from fraud
  • meet our legal obligations.

We may provide information about you to other organisations (such as another council) so that they can do these things too.

Anti-Fraud and Crime Prevention

We use personal information across all our services to help to prevent and detect crime and fraud and to protect the public funds that we manage. The law allows us to use and share personal information so that we can do that. The privacy notice for anti-fraud has more information. 

Safeguarding

There are laws that give the council specific responsibilities for safeguarding (protecting people). These include our responsibilities for caring for children and vulnerable adults. We also have a broad duty of care to our residents and clients. Together, these responsibilities require, or allow us, to use personal information and share it with relevant organisations like the police, health and social care services. All our services use personal information for safeguarding purposes.

The council has a legal duty to protect our staff and those working on our behalf, and we must record and report incidents of work-related violence and abuse. These incidents are recorded on a Potentially Violent Persons Register (PVPR)

Information requests

The council must respond to requests made under laws that allow access to information. The Freedom of Information Act 2000 and Environmental Information Regulations 2004 require us to answer requests for information that we hold. Data protection legislation also requires us to respond to requests for information about individuals, which we tell you more about in the Your Rights section of this notice.

All council services use personal data so that we can comply with these laws.

Complaints

We use personal information to handle any complaints you or another person makes to us. Sometimes we manage complaints for specific legal reasons, such as for enforcing planning law or for environmental health reasons.

Equalities information

Sometimes we collect equalities-type information from you because it is necessary for us to deliver a service to you or support you. For example, many of our social care teams need information about disabilities so that they can assess you for the right support.

We also often collect equalities information on our forms or as part of working with you, because the Equality Act 2010 requires the council to show that it has given due regard to equalities as we plan and deliver our services and how we involve our residents and service users. We aim to consider the needs of everyone who lives in the borough, including the protected characteristics listed in the Equality Act, and other people who may experience disadvantage. 

We collect equalities information such as your age, gender, ethnicity and race, religion, sexual orientation and disability status and sometimes, where relevant, gender reassignment, pregnancy, maternity and marriage/ civil partnership, and make it anonymous, so that we can use the information to better plan and deliver our services and ensure that no one is unfairly disadvantaged.

The council sometimes also asks extra questions where relevant, for example, about particular disabilities, including learning disabilities, and mental health issues, carers (including young carers), people on low income, people from areas of deprivation and the unemployed.

The disclosure of equalities information is voluntary (unless we need it to assess your support needs) and we always include an option if you prefer not to say.

Insight and profiling

We use personal information to analyse patterns and trends of service use. We call this insight, and we use the information to plan and improve the services we deliver; improve outcomes for our residents; to better plan where and how we spend public money; and to help us make decisions and create policy. For example, we analyse information to place children’s centres in areas where they are most needed.

By bringing together and analysing customer information that the council holds (creating insight) it helps us to deliver high quality services where they are most needed.

More information can be found in our Insight and Intelligence privacy notice.

My Account (council website)

MyAccount is the way to register with the council’s website to access information, such as your library account, and sign up to be sent notifications about different services.

Your rights

Individuals like you (data subjects) have rights under data protection laws to control what information you provide to us and what we can do with it.

More details on your full rights under data protection law can be found on ICO website

The right to be informed about collection and use of your data

We must provide you with information including:

  • what data we process about you
  • why we process data about you
  • how long we keep your data
  • who we share your information with.

This notice is part of how we give you that privacy information. You can see more about how we process your data by following the links in the menu to privacy information for each of our services.

You can ask for access to the information we hold on you

Asking for your own information is called a Subject Access Request (SAR)

We usually expect to share what information we hold about you with you whenever we assess your needs or deliver services to you. 

You also have the right to ask for information we hold about you and the services you receive from us. When we receive a request from you, we must give you access to everything we’ve recorded about you. 

The law tells us that we can withhold information from you where it:

  • also contains confidential information about other people
  • will cause serious harm to your mental or physical health and wellbeing
  • may stop us from preventing or detecting crime or collecting tax.

Requests are free and we must respond with 30 days, unless your request is large or complicated, when we are allowed to take longer to respond to you.

If you can’t ask for your records in writing, we’ll help you to make your request. 

Make a Subject Access Request

You can ask us to provide your information to you in a commonly accessible format

You have the right to request that your personal information be given back to you or another service provider of your choice in a commonly accessible format.

This is called ‘data portability’, but it only applies if it is personal data you have provided to us directly and we're using your personal information with consent (not if we're required to by law) and if decisions were made by a computer and not a human being. It is likely that data portability will not apply to most of the services you receive from the council.

You can ask to change information you think is inaccurate

If you believe that information we hold about you is wrong, you can ask us to change it. This might be if we have spelled your name wrong or have an incorrect address.

You should speak to the council department who is delivering the service to you to let them know you think something is wrong. 

We may not always be able to change or remove that information but we’ll correct factual inaccuracies and may include your comments in the record to show that you disagree with it.  

Where we have shared your personal information with others, we’ll do what we can to tell them to correct the information.

You can ask us to delete information (right to be forgotten)

In some circumstances you can ask for your personal information to be deleted, for example: 

  • where your personal information is no longer needed for the reason it was collected in the first place
  • where you have removed your consent for us to use your information (where there is no other legal reason for us to use it)
  • where there is no legal reason for the use of your information
  • where deleting the information is a legal requirement.

We cannot always delete your information, for example, if there is a legal reason we need to keep it or where you still expect us to deliver a service to you. But we should tell you why we can’t delete what you are asking us to.

Where we have shared your personal information with others, we’ll do what we can to make sure those using your personal information comply with your request for deletion.

You can ask us to restrict what we do with your personal data

You have the right, in some circumstances, to ask us to limit what we use your personal information for, or to stop using your data.

This right applies where:

  • you contest the accuracy of your personal data and we are verifying the accuracy;
  • we have unlawfully processed your data (ie in breach of the lawfulness requirement of the first principle of the UK GDPR) and you want us to keep your data and not delete it as we normally would do if we had processed data unlawfully
  • we don’t need to keep your data but you ask us to keep it in order to establish, exercise or defend a legal claim (you are restricting us from deleting your data)
  • you object to us using your data (see below), and we are considering whether our legitimate reasons for processing your data override your objection.

Where possible we'll seek to comply with your request, but we may need to hold or use your personal information because we are required or allowed to by law.

You can object to us using your data

You can object to our use of your data if we are using it for direct marketing. You can also object where our reason for using your data is in the public interest or part of our public task, or if we believe it is in the council’s legitimate interests to use your data.

If you make an objection, the law allows us to continue using your data if we meet criteria in the legislation. We will tell you this in our response to your objection.

Rights about automated processing or profiling

If we are using:

  • automated decision making (making a decision solely by automated means without any human involvement)
  • or profiling (automated processing of personal data to evaluate certain things about an individual).

We must tell you that we are doing this and provide simple ways for you to request human intervention, or challenge a decision. The council does not usually use automated decision making or profiling. Where we do so, we will describe this you as part of the privacy information we provide to you for that service.

The ICO website has full details on your rights. 

If you have questions

Data Controller: London Borough of Barnet

The London Borough of Barnet is required to appoint a Data Protection Officer (DPO), who is responsible for monitoring our compliance with data protection legislation and advising on our data protection obligations.

If you have any questions or worries about how the council collects or uses your personal information you can email the Data Protection Officer at data.protection@barnet.gov.uk

For independent advice about data protection and privacy, you can contact the Information Commissioner’s Office (ICO). The ICO oversees how organisations comply with data protection legislation in the UK.

Information Commissioner's Office

Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Tel: 0303 123 1113 (local rate) or 01625 545 745 if you prefer to use a national rate number.

Alternatively, visit the ICO website or email ICO

Visitors to our websites

When someone visits our website we collect routine internet log information, which allows us to see visitor behaviour patterns. We do this to determine which pages are being viewed as this assists us in improving our website. 

Internet log information is collected in a way which doesn’t allow us to identify you and we do not make any attempts to find out the identities of individuals visiting our site.

Website Cookies

Cookies are small text files, placed on your computer or mobile device by the websites you visit. They are widely used to make websites work, or work more efficiently.

We use cookies to control our website functions, to keep statistics and for session management. We do not store any personal information in cookies. Examples of how we use cookies include:

  • recognising your computer, so you don't have to give the same information several times
  • recognising that you may already have given a username and password
  • measuring how many people are using our websites, so we can make improvements.

If you do not want to accept cookies, your browser can be set to automatically reject them or to inform you every time a website asks to store a cookie. You can also delete previously stored cookies.

You can find out more about cookies and how to manage them on the GOV.UK website

Controlling cookies

You can use your web browser to:

  • delete all cookies
  • block all cookies
  • allow all cookies
  • block ‘third-party’ cookies (cookies set by online services other than the one you are visiting)
  • clear all cookies when you close the browser
  • open a private browsing/incognito session, which allows you to browse the web without recording your browsing history or storing local data such as cookies (you should however be aware of the limitations of this feature in a privacy context)
  • install add-ons and plugins that extend browser functionality.

How to control cookies from your browser

For information on how private browsing works as well as its limitations, visit the support pages for your browser: Microsoft Edge, Internet Explorer, Firefox, Chrome, Safari (mobile and desktop) and Opera

Our cookie policy is set to be compliant with the EU Privacy and Electronic Communications Directive.

The cookies we use

Used for

Name

Domain

Add to any social media sharing

__cfduid

.addtoany.com

 

d2f0a4f08a0a6974d6360af1e0570b3df1551836630

.addtoany.com

 

__utmc

.twitter.com

 

_ga

.twitter.com

 

_twitter_sess

.twitter.com

 

ads_prefs

.twitter.com

 

auth_token

.twitter.com

 

csrf_same_site

.twitter.com

 

csrf_same_site_set

.twitter.com

 

dnt

.twitter.com

 

eu_cn

.twitter.com

 

guest_id

.twitter.com

 

kdt

.twitter.com

 

lang

cdn.syndication.twimg.com

 

nodocdom

.twitter.com

 

personalization_id

.twitter.com

 

remember_checked_on

.twitter.com

 

syndication_guest_id

.twitter.com

 

tfw_exp

.twitter.com

 

twid

.twitter.com

 

uvc

 

Barnet.gov session ID

JSESSIONID

.barnet.gov.uk

Cookie consent alert dismissed

cookie_consent_dismissed

.barnet.gov.uk

Google Analytics

_ga

.barnet.gov.uk

 

_gat

.barnet.gov.uk

 

_gid

.barnet.gov.uk

Google Translate

googtrans

.barnet.gov.uk

Load balancer route

ROUTEID

.barnet.gov.uk

MyAccount Session Id

_JAR

.google.com

 

APISID

.google.com

 

ASP.NET_sessionID.

.account.barnet.gov.uk

 

CONSENT

.google.com

 

GMAIL_RTT

.google.com

 

HSID

.google.com

 

JSESSIONID

.account.barnet.gov.uk

 

Lwa

.account.barnet.gov.uk

 

NID

.google.com

 

S

.google.com

 

SAPISID

.google.com

 

SID

.google.com

 

SIDCC

.google.com

 

SSID

.google.com

Computer viruses

We make every effort to ensure all information is virus checked before it is uploaded and made available on our website. The council cannot accept responsibility for any loss or damage which may occur from use of downloaded documents, it is the responsibility of users to re-check all downloaded documents with their own virus check software.

External links

This website contains external links to third party sites. Our privacy policy applies only to information collected by or on behalf of the London Borough of Barnet. When you are transferring to another site you should read their privacy statement on the use of your information before submitting any personal details.

Updating this privacy notice

We will update this privacy notice when how we collect and use your information changes. We encourage you to check this privacy notice before providing us with any personal information.