Taxi licensing privacy notice: Allerdale

Privacy notice for the taxi licensing service

The Cumberland Council hackney carriage and private hire policy is now available. We are currently in the process of updating the webpages, please refer to the policy for the most up to date information.

The former Allerdale Borough Council is registered as a Data Controller with the Information Commissioner's Office (ICO). Our registration number is Z5680850.

Personal information we collect

We collect the following information in relation to an application for a drivers’ licence:

  • name
  • address
  • phone number
  • email address
  • date of birth
  • medical information
  • driver licence information and history
  • criminal conviction information and complete history (the Rehabilitation of Offenders Act 1974 does not apply to the taxi trade, and no conviction is therefore ever considered to be spent)
  • proof of your right to work and reside in the United Kingdom
  • Certificate of Good Conduct from any other countries

A lesser amount of personal information is required prior to the grant of a vehicle or operator licence.

Legal basis for processing your information

We have a statutory duty under the Local Government (Miscellaneous Provisions) Act 1976 and the Town Police Clauses Act 1847 (and associated regulations and amended legislation) to ensure that those we licence are fit and proper persons.

We are not permitted to collect information we do not need or will not use.

Sharing your data

We may share your data with the following departments and agencies.

Cumbria Police

Cumbria Police and other police forces/enforcement agencies may request information that will assist them in investigating and preventing crime.

We can share your information with the police if the law allows us to. We also have a data sharing agreement with Cumbria Police that allows us to share information.

Councillors

Councillors who sit on the council’s licensing committees may have access to your data where we refer your application or licence (in the case of a review) to the council’s licensing committees for determination.

Public registers

We are required to hold some of your data in Public Registers.

The type of information contained in the register is stipulated in the legislation.

Cabinet Office

We have a legal duty to submit information to the Government as part of the National Fraud Initiative (NFI). Further information on the type of information that we have to disclose is available on the NFI website.

HM Revenue & Customs (HMRC)

We have a statutory duty under schedule 23 of the Finance Act 2011 to submit returns to the HMRC.

National Anti-Fraud Network (NAFN)

We share information with NAFN as part of the national database of taxi and PHV driver licence refusals, suspensions and revocations.

Department for Transport (DfT)

We share some information with the DfT for statistical purposes. However, this would not normally include personal or special category information.

Department for Environment, Food & Rural Affairs (DEFRA)

We share information with DEFRA as required by The Air Quality (Taxis and Private Hire Vehicles Database) (England and Wales) Regulations 2019.

The information we are required to share includes:

  • Vehicle Registration Mark
  • the start and expiry date of the vehicle licence
  • whether the vehicle is a taxi or PHV
  • the name of the licensing authority
  • the licence plate number
  • an indication of whether it is a wheelchair accessible vehicle

Internal council departments

Where the law allows us to do so, we may share your data with internal departments.

Sources of information

Sources of information for data include:

  • applicants and existing drivers
  • the Disclosure and Barring Service, to check if you are eligible to hold a licence
  • Cumbria Police, to check criminal history
  • the Driver and Vehicle Licensing Agency (via GOV.UK) to view your driving record, for example vehicles you can drive and/or to check your penalty points or disqualifications
  • other licensing authorities with whom you may have held a licence
  • Medical professionals and practitioners responsible for certifying your fitness to hold a licence
  • Licensed operators

How long we keep personal data

We only keep information for as long as it is needed. This is based on either a legal requirement (where a law says we have to keep information for a specific period of time) or accepted business practice.

In accordance with our retention schedule Allerdale Borough Council keeps information for the following periods of time:

  • Information submitted as part of an application - 6 years after the date in which the application is refused
  • Information held in respect of a licence - 6 years after the date from which the licence ceases to be held
  • Information received as part of an enforcement investigation – for a minimum of 6 years and then for only so long as may be necessary to inform a decision to protect the public
  • Information held on the NR3 database will be held for a period of 25 years

How is your information stored

We store your information in a number of computer systems (currently Lapac and Comino), which can only be accessed by password.

The systems have appropriate security features which limit the information that officers can view.

What happens if you don’t provide us with your information

If you don’t provide us with your information we will not be able to assess your application and you may not be granted a licence.

Automated decision making

We will not use the personal data you provide to make any automated decisions.

Your rights as a data subject

The law gives you specific rights over your information. These rights are:

  • to be informed of our use of information about you
  • of access to information about you
  • rectify information about you that is inaccurate
  • to have your information erased (the ‘right to be forgotten’)
  • to restrict how we use information about you
  • to move your information to a new service provider
  • to object to how we use information about you
  • not to have decisions made about you on the basis of automated decision making
  • to object to direct marketing
  • to complain about anything the Council does with your information (see the ‘Complaints’ section below)

Some of the rights listed above apply only in certain situations and some have a limited effect.

Your rights are explained further in the in the Individuals’ Rights section of our website.

Changes to this privacy notice

This notice is kept under regular review to make sure it is up to date and accurate.

Data Protection Officer (DPO)

The council is required by law to have a DPO. The DPO has a number of duties, including:

  • monitoring the council’s compliance with data protection law
  • providing advice and guidance on data protection
  • acting as the point of contact for data subjects
  • co-operating and consulting with the Information Commissioner’s Office (see ‘Complaints’ below)

Our DPO makes sure we respect your rights and follow the law. If you have any concerns or questions about how we look after your personal information, please email the Data Protection Officer.

Email: foi@allerdale.gov.uk

Complaints

If we have been unable to resolve your complaint, you can refer the matter to the Information Commissioner’s Office (ICO).

The ICO is the UK's independent body set up to uphold information rights and it can investigate and adjudicate on any data protection related concerns you raise with it.

Website: www.ico.org.uk

Telephone: 0303 123 1113

Post: Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

National Register of Hackney Carriage and Private Hire Driver Revocations and Refusals (NR3 Register) Privacy Notice

This privacy notice provides information on how Allerdale Borough Council (‘the Council’) collects and processes your personal data.

It explains:

  • what personal information is collected
  • what it is used for
  • who it is provided to

The notice also describes why we require your data, and the legal basis on which we do this.

It provides additional information that specifically relates to this particular service and should be read together with Council’s Corporate Privacy Notice which provides more detail.