Coventry City Council complies with the Data Protection Act and the UK GDPR and is registered with the Information Commissioner’s Office (ICO) as a Data Controller.
This Privacy Notice explains how personal information is going to be used, what for, who it will be shared with and why.
Why we collect and use personal data about you
We collect and hold personal information to pay money into your bank account, to collect monies owed from you and to contact you regarding payments.
We also use this information to:
- Provide you with necessary and appropriate services
- Help us and other Council departments to develop and improve our services
- Complete statistical returns to Government departments
- Help us test our systems and train our staff
- Help us develop and improve our services
- Send reports to Government departments
- Detect and prevent crime
- Get back any money that has been overpaid to you
- Make sure public money is correctly used
- Sending out correspondence
We process personal data because it is necessary to comply with our legal obligations, including:
- The Financial Regulations 2007
- Public Contract Regulations 2015
- Local Government Finance Act 1992 and 1998 t
- The Localism Act 2011
- The Local Government Transparency Code (all as amended from time to time)
What information do we collect about you?
- Names
- Addresses
- Contact details (including but not limited to email and telephone number(s))
- Supplier account information
- Contract details
- Information required by regulations (such as the Public Contract Regulations 2015)
- Bank details
- We may also collect names and contact details of anyone you have appointed to act on your behalf.
- We may collect this information from you, or from other organisations such as other Councils, HM Revenues and Customs, Companies House, credit reference agencies, the National Fraud Initiative, other customers, trade and/or sector associations, consultants/technical specialists, auditors and other council departments.
Who we share your personal data with
- We will work with AccessPay who provide payment services.
- The Cabinet Office (who are a government department), for the purposes of a data matching exercise called the National Fraud Initiative. The purpose of the exercise is to detect fraud and error. The Council is legally required to participate in this exercise. More information on the National Fraud Initiative.
- A nominated third-party supplier, Caatalyst to carry out Accounts Payable recovery audits on the Council’s behalf. The purpose of the audit is to identify and recover monies owed to the Council.
- A nominated third-party supplier, Oxygen Finance Ltd (https://www.oxygen-finance.com/privacy-policy/) the provider of the Council’s Early Payment Discount system. The purpose is to offer the Council’s suppliers access to a programme facilitating the early payment of invoices.
- A nominated third-party supplier, Lloyds Banking Group (https://www.lloydsbank.com/help-guidance/privacy/data-privacy-notice.html) who provide the Council’s purchase card system. The purpose is to offer the Council’s suppliers access to payment option services.
- Other Council departments - in order to provide and include services and protect public funds.
How long will we keep your information?
We will only keep your information for as long as we need to so we can give you the service you need, unless we must keep it for legal reasons.
Your Rights
You have the right to:
- Ask to see the personal information we hold about you
- Ask us to change information we hold about you if it is wrong
- Ask us to delete the information we hold about you
- Ask us to limit the way we use your personal Information
- Ask for human intervention regarding decisions made about you by a computer
- Data portability (have your data transferred to another Authority)
- Complain to the Information Commissioner’s Office
To exercise any of these rights please contact procurement.services@coventry.gov.uk
Complaints
You have the right to submit a complaint if you are unhappy with the way your request is handled or disagree with a decision made by the council regarding your data. In these circumstances you can contact the Data Protection Team (DPO) and request a review of the decision.
If you are not satisfied with any outcome from the DPO you may wish to apply to the Information Commissioner’s Office at:
The Information Commissioner’s Office,
Wycliffe House,
Water Lane,
Wilmslow,
Cheshire,
SK9 5AF.
Date of last review: January 2024