- Name of service - Surrey ENCTS (Free Bus Pass)
- Directorate - Highways, Transport and Environment
- Date of issue - 18 May 2018
- Date of current version - 20 May 2022
- Review date - 20 May 2025
The reasons why we use your personal data
Purpose / function of the service
This privacy notice applies to the functions of Surrey's England National Concessionary Travel Scheme (ENCTS), also known as Surrey Free Bus Pass.
The scheme is enshrined in Primary Legislation through the Transport Act 2000, as modified by the Concessionary Bus Travel Act 2007.
The scheme allows residents in the administrative county of Surrey to make an application for an older person or a disabled person concessionary bus pass. As an additional concession eligible applicants can apply for a companion permit (C+ on the bus pass).
In any application for a concessionary bus pass, the onus will be on the applicant to provide proof of their entitlement.
Successful applicants will be issued with an ENCTS bus pass.
What processing of personal data is undertaken by the specific team?
Your personal data is collated for the purposes of assessing eligibility.
In addition, we collect your personal data for the following:
- Service delivery
- Service improvement and planning
- Prevention and detection of crime/fraud
- Statistical analysis and reporting
- Vital Interests
What information do we collect?
- Contact details
- National Insurance Number
- Photographic image for identification purposes
- Copies of documents submitted for assessment to prove eligibility. This can include proof of ID and age such as Passport or Driving licence; proof of address such as Utility bill or Pension letter; proof of disability such as DWP benefit entitlement, medical report or records
- Payment transactions are made via Worldpay site
- Journey information
How we are allowed to use your personal data
Legal obligation or public task under various UK legislation including but not limited to:
The England National Concessionary Travel Scheme (ENCTS) is enshrined in Primary Legislation through the Transport Act 2000, as modified by the Concessionary Bus Travel Act 2007.
We will obtain your explicit consent if you choose to use our online automatic verification process.
To process your personal data, we will explain to you what we are asking you to agree to and why. If we have consent to use your personal data, you have the right to remove it at any time. If you want to remove your consent, please contact us at the following email address firstname.lastname@example.org and we will deal with your request.
As part of the online automatic verification process you have the right to be informed about the processing, request human intervention and challenge any decision made.
If you have any queries concerning how your information is or has been used as part of the online automatic verification process, then please contact us at the following email address email@example.com and we will deal with your request.
Who we share your personal data with
No data is shared commercially however data is shared with:
- System supplier currently: SmartCitizen Ltd
- National Fraud Initiative
- Other local authority council departments such as Adult Social Care, Blue Badge
If you consent and choose to use the online automatic verification process, then we may share limited personal information with a range of agencies and organisations to confirm your identity and age and address as part of your validation.
These organisations are listed below.
Please note that if an address is checked against an address held by a credit reference agency, then your credit rating will not be affected.
Automated decision making (when computers make any decisions about you)
For the identification, age and address checking process older residents (of pensionable age) will be given the choice to use an online automatic verification process (Lexis Nexis) which is available as part of the online application.
The check will work by presenting the applicant's details to an Application Programming Interface (API) provided by LexisNexis which attempts to verify the data provided using a number of data sources and providing a score at the end of the process.
Address verification includes checks being made against the following agencies' databases and systems:
- OSIS Limited and XD
- Tracesmart register
- Smartdepart Gone Away
- Electoral roll
Date of birth verification includes checks against the following agencies databases and systems
Personal data being sent or processed outside of the UK and EU
We do not send or process data outside of the UK and EU
Retention of data
Data will be kept for the life time of an active record i.e. with an active bus pass or an application pending assessment. You can view Surrey's Data Retention guidelines online.
Data on an inactive record will be kept in accordance with SCC countywide data retention schedule.
For further information on our privacy notices, please see information and privacy