This privacy notice is designed to help you understand how and why Buy Local processes your personal data. This notice should be read in conjunction with the Council’s Corporate Privacy Notice.
Who are we?
North Yorkshire County Council is a ‘Data Controller’ as defined by Article 4(7) of the General Data Protection Regulation (GDPR).
This business directory has information about businesses and tradespeople open for business in North Yorkshire during the COVID-19 restrictions. The directory lets people know where to go locally for supplies and services during this difficult time.
Businesses and tradespeople who would like to make an entry to the directory must create an electronic account. This Privacy Notice informs users of those accounts about how and why their data is being used by North Yorkshire County Council.
North Yorkshire County Council also utilises information already made public in other online directories so that members of the public can access all relevant information in one location.
The Council has appointed Veritau Ltd to be its Data Protection Officer. Their contact details are:
Data Protection Officer (Veritau Ltd)
Tel: 01609 53 2526
What personal information do we collect and why do we need it?
The following information is collected when creating an account and is not published online.
- Name: we collect this information to verify your unique identity. We store this with your customer record, so that you can change it at any time yourself.
Email address: we collect this information to verify your unique identity. We collect this so that we can contact you about the listings you have added if need be, so that we can verify your account, communicate with you about your account and/or any listings that you create and to help you reset your password if need be. We store this with your customer record, so that you can change it at any time yourself.
All the above information is for the account creation purpose
The following information is collected as part of the published Buy Local directory.
Details such as:
- Business name,
- Business address,
- Opening hours etc,
is made public as part of the listing creation process.
Who do we share this information with?
We do not routinely share your account information with anyone outside of North Yorkshire County Council. Your personal data provided as part of your account creation will not be published on the Buy Local directory.
Business information, as outlined above, will be made publicly available as part of our Buy Local directory. This business information may also be used by and shared with other district councils and the Local Enterprise Partnership.
How long do we keep your information for?
Your information will be retained for the lifetime of your Buy Local account, in line with the retention policy. If an account has no listings associated with it, then it will expire after 18 months. When an account expires, the personal information is deleted.
Directory Information will be updated depending on the source of the data and the original lawful basis used.
- Where legitimate interest has been used, information will be updated and refreshed on a three monthly basis;
- Where inclusion in the directory is based on consent, the information will be kept live as long as consent remains in place and the original data is within the established retention period.
What is our lawful basis for processing your information?
Your personal data is processed by North Yorkshire County Council under the lawful basis of consent in regards to the creation of your account.
Buy Local directory information is processed either under under legitimate interest, as it is in the interest of the public to maintain as complete and easy to access directory as possible and to ensure the contents of that directory are accurate and up to date. Or under consent.
For more information about how the County Council uses your data, including your privacy rights and the complaints process, please see our Corporate Privacy Notice.