Privacy Notice - Business to Business

Spelthorne Borough Council and its subsidiaries has collected / may collect your personal details to allow us to undertake business with you / your organisations and to keep you informed of ongoing services.

In order to comply with the Data Protection Act 2018 and the UK General Data Protection Regulation, Spelthorne Borough Council must provide you with the following information about the personal data you give to us or we receive from third parties as recommendations:

What information does the Council collect?

Your name and contact details which can include company email addresses, telephone number(s) and company address (information also included in email signatures). The personal information may also include job role/profession, photographs and title.

Why does the Council process personal data?

The Council processes this information to allow us to communicate with you for work reasons which may include procurement and undertaking business with you / your organisation. This may include purchasing goods and services for the Council and its service users. We will keep you informed for ongoing services where necessary.

When we process your data in terms of contact (email, telephone, letter) and to keep you informed we are doing so under the basis of GDPR Article 6(1)(f) Legitimate Interests when procuring new business and GDPR Article 6(1)(b) Contract if a business relationship has been established under contract.

We are also required to process personal data for the fulfilment of our legal obligations such as Public Contracts Regulations 2015 and Local Government Transparency Code 2015F and are then doing so under basis of GDPR Article 6(1)(c) Legal obligation. 

Who does the Council share your personal data with?

We will at times share your data with other departments within Spelthorne Borough Council including its subsidiaries. We may also share your data, where necessary, with external consultants and legal representatives.

How long does the Council keep your data?

The Council will continue to hold your personal data for the duration of the business or duration of the contract and will hold your information for a further 7 years in line with the Council's retention policy.

For further information about how the Council uses your personal data, including your rights as a data subject, please see below. 

If you have any direct enquiries, Spelthorne Borough Council's Data Protection Officer can be contacted at data.protection@spelthorne.gov.uk.

The GDPR provides the various rights regarding your personal data; for further information please see the data protection rights page on our website.