Health and Safety Team privacy notice

Information about our privacy notice and how we process your data in accordance with legal requirements.

How London Borough of Hammersmith and Fulham Food Safety Team collects, handles and looks after your personal data.

What service is being provided?

The team carries out various functions under the remit of health and safety of businesses, licensing of massage and special treatments, animal activities establishment licensing, sports ground safety, public safety at major events and the investigations of accidents, incidents and occupational diseases.

The processing of your personal information is necessary for compliance with the legal obligation in the following Acts, to facilitate a statutory obligation, and to provide council services (this list is not exhaustive):

  • Health and Safety etc Act 1974, and health and safety regulation and any other relevant statutory provisions specified in Schedule 1 of the Act
  • London Local Authorities Act 1991
  • Animal Health Act 2006 and associated regulations
  • Local Government (Miscellaneous Provisions) Act 1976
  • The Health Act 2006
  • The Police and Criminal Evidence Act 1984.

To make sure that business activities are carried out in the public interest we must operate according to the provisions of these Acts of Parliament to enable us to process applications and payments, to ensure continued compliance with the above regulations, to accept and investigate complaints or enquiries in relation to businesses we collect, and to store and process personal and sensitive information about individuals and businesses.

Our core obligations under the general data protection regulations (GDPR) and commitments are set out in the council’s privacy notice. 

This notice provides additional privacy information for:

  • members of the public (complaints, notification of infectious diseases)
  • businesses
  • applicants.

It describes how we collect, use and share personal information about you, before, during and after your relationship with us ends, and the types of personal information we need to process.

This includes: name, address (business and personal), date of birth, gender, photographs, contact information (telephone, email) (business and personal), business activities, nationality, evidence of entitlement to work in the UK, national insurance number and payment information.

The law treats some types of personal information as ‘special’ because the information requires more protection due to its sensitivity. We may collect the following information under this category:

  • sexuality and sexual life
  • physical or mental health
  • criminal convictions and offences.

Purposes

The main purposes for which we may process your personal information are:

  • the processing of payments
  • to investigate complaints or enquiries
  • to investigate accidents
  • to carry out enforcement activities to ensure compliance
  • to protect public health in the investigation of infectious diseases
  • to allow us to communicate, provide information in relation to legislative changes, council policy changes, fees and charges, business specific advice and guidance
  • to keep a public register in relation to food business registrations, licenses and enforcement notices
  • for the prevention and detection of fraud, crime or both
  • to issue fixed penalty notices under The Health Act 2006
  • to fulfil a legal obligation.

Don't you need my permission to keep and share information about me?

Information we collect is required by law. It enables us to have accurate information for the purposes of law enforcement, regulation and licensing, criminal prosecutions and court proceedings. Personal data we collect under the Public Health Act, by law, enables us to help protect people from the dangers of communicable diseases and environmental threats. If we intend to use your information beyond legal obligations or to exercise specific rights, we will seek your consent to process your information and full guidance will be provided.

Are there any laws applicable in the processing and protection of my information?

We are required to comply with the Data Protection Act to ensure information is managed securely. Personal data we collect under the Public Health Act is made available only to key professionals who have a clear and legal need to see it. We operate under a scheme of delegation and any legislation authorised under this delegation.

The Data Controller is London Borough of Hammersmith and Fulham

The Data Protection Officer for London Borough of Hammersmith and Fulham is Ben Savage and can be contacted at dpo@lbhf.gov.uk

The Data Processor supporting this purpose is the IT software provider who hosts and manages our comments data.

Data sharing

In addition to the general reasons for information sharing described in the council’s privacy notice, we may share your information with:

  • other council departments for the purposes of law enforcement, regulation and licensing, criminal prosecutions, and court proceedings
  • the Police, and other crime enforcement agencies
  • responsible Authorities including the Fire Brigade
  • other Local Authorities
  • third sector organisations working with the council
  • our translation and interpretation service
  • other organisations, where the disclosure is necessary for the purposes of the prevention and detection of crime
  • when the law requires us to pass information under special circumstances, crime prevention or the detection of fraud as part of the National Fraud Initiative.

We also collect or receive information from external parties such as:

  • members of the public
  • internal council departments, and elected members of the council
  • the police
  • the Fire Brigade
  • other local authorities
  • the Home Office, and other government agencies
  • the UK Health and Security Agency.

Data retention

We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any future legal, accounting, or reporting requirements. The council’s standard retention period is up to 6 years. We must retain necessary information in accordance with our corporate records policy to fulfil legal, statutory and regulatory requirements.

Rights of access, correction, erasure and restriction

You have the right:

  • to ask for your information and there will not be a charge for you to do so. This is known as a subject access request and we act in accordance with this policy
  • to ask for your information to be corrected if it is inaccurate or incomplete
  • to ask for your information to be deleted or removed where there is no need for us to continue processing it (right to be forgotten)
  • to ask us to restrict the use of your information, except when it is necessary for the purposes of the prevention and / or detection of crime
  • to ask us to copy or transfer your information from one IT system to another in a safe and secure way without impacting on the quality of the information
  • tTo object to how your information is used
  • to challenge any decisions made without human intervention (automated decision making). To ask for access to your information you should submit a subject access request.

Where the legal reason for processing your personal information is based on your consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of our processing prior to the withdrawal of your consent. If you do not provide consent, we may not be able to perform the contract we have entered into with you, or we may be prevented from complying with our legal obligations as detailed above. If you wish to withdraw consent you should contact the food and safety team at foodandsafety@lbhf.gov.uk who will process your request as a matter of priority.

Your rights

In addition to the above you have legal rights in relation to your personal information. You have a right to be informed about how and why your personal information is being processed. This notice fulfils that obligation. Full details are contained in the council’s privacy notice and should be read before consenting to this document.

Visit the following links for more information about privacy law, our obligations and your rights: The ICO Guide to the General Data Protection Regulation 2016 and General Data Protection Regulation 2016.

If you have concerns over the way we are asking for or using your personal data, please raise the matter with our Resident Experience Team by the following means:

The Resident Experience Team, London Borough of Hammersmith and Fulham Hammersmith, London W6 9JU
residentexpteam@lbhf.gov.uk
020 8753 2456

If you still have concerns following our response you have the right to raise the matter with the Information Commissioner's Office: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
ICO online form
0303 123 1113

What if this notice changes?

If we make a substantial change to what personal data we process, how or why we process it, or who processes it we will update this notice. We may also contact you using other communication channels to make you aware of the changes.

Translate this website