This privacy notice is designed to help you understand how and why the Specialist (Environment Health and Enforcement) Team at Selby District Council processes your personal data. This notice should be read in conjunction with the Council's corporate privacy notice.
Who are we?
Selby District Council is a ‘Data Controller’ as defined by Article 4(7) of the UK General Data Protection Regulation (UK GDPR).
The Council has appointed Veritau to be its Data Protection Officer. Their contact details are: Data Protection Officer, Veritau, West Offices, Station Rise, York, YO1 6GA, DPO@selby.gov.uk, telephone 01904 552848.
What personal information do we collect and why we collect it?
In order to carry out our statutory functions, in relation to environmental health, we will collect personal data such as names, addresses, and contact details of business proprietors or responsible persons. This may include sole traders.
On occasion, we may process details about an individual’s criminal conviction history. For example, if an individual has been barred from running a food establishment or has been found to infringe hygiene legislation.
Who do we share this information with?
On occasion, we will be required to disclose personal data to certain government departments, for example, the Environment Agency or the Department for Environment, Food, and Rural Affairs.
We may also be required to disclose personal data to crime prevention agencies such as Trading Standards or the Police.
Some information may also be required to be published in accordance with various legislative requirements.
How long do we keep your information for?
Data held |
Retention period |
Food Premises Database and Register |
Indefinitely or until closed |
Environmental Permits including Authorisations, Record of Visits, Notices, Invoices and General Correspondence |
Indefinitely or until closed |
Private Water Supplies Database including Location Maps, Sample Results, Record of Visits, Notices, Invoices and General Correspondence |
Indefinitely or until closed |
What is our lawful basis for processing your information?
Selby District Council relies on the following lawful basis to process your personal data:
UK GDPR Article 6 (1) (e) – processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
We may process criminal conviction data for the purpose of satisfying statutory functions exercised for reasons of substantial public interest as per Schedule 1(6) of the Data Protection Act 2018.
For more information about how the Council uses your data, including your privacy rights and the complaints process, please see our Corporate Privacy Notice.