- Name of service - National Trading Standards Scams Team
- Directorate - Community Protection and Emergencies
- Date of issue - 14 January 2020
- Review date - 14 January 2021
The reasons why we use your personal data
Purpose/function of the service
This privacy notice applies to the functions of the National Trading Standards (NTS) Scams Team. The NTS Scams Team is hosted by Surrey County Council (SCC) and helps tackle mass marketing scams and disrupts the operations of perpetrators behind mail scams. It works in partnership with agencies across the country to identify and support victims of mass marketing fraud. The team provides guidance, best practice and establishes a centre of excellence to assist local authorities in supporting local victims and taking local enforcement action.
What processing of personal data is undertaken by the specific teams or services
Your personal data is collated in order to carry out our functions in relation to law enforcement on one or more of the following bases:
- You have given your consent to the processing of your data for a law enforcement purpose which has been communicated to you; or
- The processing is necessary for the performance of a task carried out for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, including the safeguarding against and the prevention of threats to public security.
What information do we collect?
Name, Address, Contact details, health details, DOB or age, financial details, family details such as names of relatives, lifestyle and social circumstances details and conviction data.
How we are allowed to use your personal data
SCC is a competent authority processing personal data for law enforcement purposes as set out in part 3 of the Data Protection Act 2018 (DPA18).
Our legal basis for processing law enforcement data is that it is necessary for the performance of functions contained in:
- Consumer Rights Act 2015
- Consumer Protection from unfair Trading Regulations 2008
- Enterprise Act 2002
In some circumstance SCC may obtain your consent. If consent is required to process your personal data, we will explain to you what we are asking you to agree to and why. If we have consent to use your personal data, you have the right to remove it at any time. If you want to remove your consent, please contact us at the following email address: firstname.lastname@example.org and we will deal with your request.
It is important to note that subject access rights and the rights to rectification, erasure and restriction do not apply to the processing of 'relevant personal data' in the course of a criminal investigation or criminal proceedings.
Who we share your personal data with
Local Authority Trading Standards services, law enforcement agencies and data processors who act on our behalf.
Automated decision making (when computers make any decisions about you)
We do not use automated decision making
Personal data being sent or processed outside of the UK and EU
SCC uses third party suppliers to manage documents, some of which operate outside of the EEA. In respect of all of these suppliers, SCC takes steps to ensure data security.
In the case of suppliers based in the USA, SCC relies on Privacy Shield arrangements.
In the case of any suppliers the NTS Scams Team may use which are based in Andorra, Argentina, Canada, the Faroe Islands, Guernsey, Israel, the Isle of Man, Jersey, New Zealand, Switzerland, or Uruguay, SCC relies on declarations of adequacy made by the EU Commission.
All of the third-party suppliers used by the NTS Scams Team are either based in the EEA or the USA or a territory in respect of which a declaration of adequacy has been made by the EU Commission. In the event that we should use a supplier not falling within these categories, we shall consider their security arrangements and only use the supplier if we believe them to be adequate.
SCC also works with international law-enforcement partners some of which are based outside of the EEA. We may lawfully share data with these partners under ss. 75 and/or 76 of the DPA18, which provides safeguards for data subjects and oversight by the ICO.
Retention of data
Data will be retained for six years plus current year. After this date data is then anonymised from the NTS Scams Team's systems.
For further information on our privacy notices, please see information and privacy.