Privacy Notice
For Be Norfolk Website

What this document is for

This privacy notice provides details on how we, Norfolk County Council, use your personal information for the purposes of providing our Be Norfolk Website.

By ‘use’ we mean the various ways your personal information may be processed including storing and sharing the information.
This document should be read alongside our Cookie Policy which also applies to this website.

Further details

We also provide the following details in our general privacy notice on our website:

  • Who we are
  • How long we use your information for
  • Your rights under the UK General Data Protection Regulation (the UK GDPR) and
  • How to exercise them

You can also ask us for a copy of this information.

What we use your information for

We may use the information about you to:

  • Provide our website;
  • Provide details of experiences and events which are of interest to you;
  • Respond to any enquiries you raise with us via email;

We also use this information to assess the quality of our services and evaluate and improve our policies and procedures.

We may also use information in other ways compatible with the above.

What personal data we collect and use about you

We will collect and use:

  • Cookies (please see our Cookie Policy for more information;
  • IP address (to provide the website)
  • Details you put into an enquiry (including the email you submit your enquiry via)

We do not intentionally collect any ‘special category’ data. However, if you mention something in an enquiry, we may indirectly collect this information.

We do not collect information concerning criminal convictions and offences.

The UK GDPR includes safeguards to protect the use of your special category data and criminal conviction data. Further details can be found on our website in the document named ‘Special category data and criminal offences data policy’ which sets out our procedures for compliance with the principles of the UK GDPR and the retention and erasure of this information.

Who provides this information

We receive this information from you.

Who we share your information with

Any information which is shared will only be shared on a need to know basis, with appropriate individuals. Only the minimum information for the purpose will be shared.

Your personal information may also be given to third parties contracted by the County Council to provide a service to the County Council. These service providers are known as data processors and have a legal obligation under GDPR and to the County Council to look after your personal information and only use it for providing that service. In particular, the County Council has entered into a contract with:

  • Silverless Limited (website developer and provider)
  • Google Analytics (analytics cookies)
  • WPEngine, Inc. (Flywheel) (website host)

How the law protects you and the legal basis for processing your information

We have legal grounds under the UK GDPR to process this information because you have provided consent.

How long will we keep your personal information for

When the information is no longer needed for the above purposes, it will be securely deleted. Data will be stored for up to 1 year and consents will be securely stored as legal documentation.

If we need to use your information for research or reports, your information will be anonymised and any information taken from notes (handwritten or typed) during any consultation sessions will be securely destroyed. The information will continue to be used in a summarised and anonymised form in any research reports or papers that are published. The anonymised information in the papers may be of historic interest and may be held in public archives indefinitely.

How we keep your information

The information is stored electronically, on the County Council’s network.

We do not process your information outside of the European Economic Area, apart from as specified in the Cookie Policy or if you are accessing our website from outside the UK/EEA, at which point your information may be processed on a server based in a county nearer to yourself but outside the UK/EEA.

Automated decision making

We do not make automated decisions about you.

Changes to this notice

We may amend this privacy notice at any time so please review it frequently. The date below will be amended each time this notice is updated.

This notice was created on 27 September 2022.