Who we are
Elmbridge Borough Council are what is known as the ‘Controller’ of any personal data that you provide to us. Our contact details can be seen on the Our Offices page of our website and you can also contact us online.
We have a Data Protection Policy in place to oversee the effective and secure processing of your personal data.
What we need
We only collect any personal data about you that we need in order to fulfil the purpose stated below. The data on the form is the only data that we collect.
Why we need it
The purpose for collecting your data is so that we can administer your application for a grant under the business, start up, high street or digital scheme. This includes grant processing, analysis and accounting.
What we do with it
- We store your personal data on secure ICT systems, which are in the UK. None of your data is transferred outside of the EAA.
- All applications will be subject to internal Elmbridge Borough Council checks, specifically regarding business rates, planning (if applicable) food and licensing (if applicable).
- The information will be processed in order to present your application to our decision board, who will award any funding.
How long we keep it
Your application will be held in full for two years after the date of payment or date of rejection. After this date, we will delete your full application, while keeping some information on our database. This will include the business name, as well as the amount awarded and types of items funded. This is for the purposes of analysis and accounting.
What we would also like to do with it
We would like to use your details to promote the scheme to other businesses. This will include the business name, as well as the amount awarded and types of items funded. We will not use your business name to promote the fund without obtaining you permission first.
What are your rights?
Your rights are outlined in our corporate privacy notice.
If at any point you believe the personal information about you that we process is incorrect you can request to see this information and even have it corrected or deleted.
If you wish to fulfil your rights, please contact our Data Protection Officer and they will investigate the matter and make a decision on what will happen next. You will be notified of this decision and any next steps.
The full details of our Data Protection Officer can be seen in our corporate privacy notice.
If you are not satisfied with our response or believe we are processing your personal data not in accordance with the law, you can complain to the Information Commissioner’s Office (ICO).