Privacy Notice - Flood and Community Resilience

Spelthorne Borough Council plays a key role in managing flood risk, particularly under the framework established by the Flood and Water Management Act 2010. Additionally, we contribute to local emergency planning and flood response efforts under the Civil Contingencies Act 2004. We also work with communities to raise awareness, support resilience efforts, and facilitate recovery after flood events.

In order to comply with the Data Protection Act and the UK General Data Protection Regulation, Spelthorne Borough Council must provide you with the following information about the personal data you give to us. 

The Council is the data controller for the personal information. 

We collect the following information to manage flood risk and emergency response to flood incidents, including providing grants and support.

  • Identity data [name of property owner or tenant, property address, contact details]

In addition to the information above where you are requesting financial support or assistance, we may process the following information.

  • Financial information [bank account, payments made or received]
  • Insurance details

Our lawful basis for the above purposes is Public task - we need to collect or use your information to carry out a task laid down in law.

  • Flood and Water Management Act 2010
  • Civil Contingencies Act 2004
  • All your data protection rights may apply, except the right to erasure and the right to portability.

Your information may be shared with third parties including:

  • the Environment Agency, Surrey County Council (the Lead Local Flood Authority), 
  • Applied Resilience and other emergency responders to enable them to support you in an emergency and request support from you where agreed. 
  • Water and sewerage companies
  • Internal Drainage Boards
  • Highways Authorities

We are obliged under the Flood and Water Management Act 2010 to share information with other relevant risk management authorities in order for them to perform their statutory duties.

You have the following rights:

  • you have the right to be informed via Privacy Notices such as this
  • you have the right to request access to and to receive a copy of any information we hold about you (including in an electronic format) - to request a copy of this information you must make a subject access request in writing
  • if you find that the information Spelthorne Borough Council holds about you is no longer accurate, you have the right to ask to have this corrected
  • you have the right - under certain conditions - to ask us to erase your personal data
  • you may request that Spelthorne Borough Council stops processing your personal data in relation to any council service (this may delay or prevent us delivering a service to you, we will seek to comply with your request but may be required to hold or process information to comply with our legal duties)

To exercise any of these rights contact the Data Protection Officer at data.protection@spelthorne.gov.uk.

You also have the right to make a complaint to the Information Commissioner's Office (ICO). This is an independent body responsible for making sure that organisations comply with Data Protection legislation.

The ICO will always expect you to have raised your concerns with us before submitting a complaint.

 

Last modified: 06/07/2026