We aim to improve the standard of private sector properties through grant assistance, enforcement action, education and advice.
Most of the personal information we hold about you is provided by you. The information collected and held will vary and depend on the nature of the service. If you choose not to provide us with the information we ask for, in many cases, we will not be able to provide you with the service.
Processing activity/purpose - we will process personal information relating to supporting the delivery and administration of the Green Homes Grant Local Authority Delivery Scheme and the GHG LAD (1 and 1b) (together the Scheme).
Information requirements - processing activities may include:
- Address and details of property receiving the Scheme’s installation(s)
- Details about the Scheme’s installation(s) installed at the property, including type, size and cost
- Contact address (if not the property receiving the Scheme’s installation(s))
- Address and details of property offered, but not receiving, the Scheme’s installation(s)
- Your name
- Household income and any other scheme eligibility information
- Any financial contribution you have made towards the Scheme’s installation(s)
- Details about the expected energy, carbon and cost savings expected to be delivered by the installation, including pre- and post-installation property EPC details where appropriate
- Email address
- Phone number
- Health data
Installers:
- Your name
- Relevant accreditation and registration information
- Contact address
- Email address
- Phone number
- Details of GHG LAD installations delivered
- Whether directly contracted or sub-contracted by us to install GHG LAD installations
- The number of employees in your organisation
Lawful bases[1] - our lawful bases for processing your personal information are:
- that the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Authority (UK GDPR Article 6(1)(e)) and DPA 2018 section 8(c) in service to the Home Energy Conservation Act 1985 (the 1985 Act) and Fuel Poverty (England) Regulations 2014 (the 2014 Regs) ;
- the processing by the Authority of special category personal data, namely health data (UK GDPR Article 9(1));
- the processing of special category personal data is necessary for reasons of substantial public interest (UK GDPR Article 9(2)(g) and DPA 2018, section 10(3) and Schedule 1, part 2, para.6(2)(a), justified by the 1985 Act and the 2014 Regs.
and
- consent, between you and the Department for Business, Energy and Industrial Strategy (BEIS) where it is conducting an evaluation of the Scheme.
We have a Data Protection Policy that sets out how this information will be handled.
Data Processor - Aran Construction Services (the appointed contractor for this Scheme) processes personal information on our behalf in accordance with our written instructions.
Data sharing - delivery and administration of the Scheme may require linking your data to other data sets held by us and sharing your data with;
- appointed contractor(s), suppliers and their sub-processors;
- BEIS and its contractors for delivery, administration and evaluation of the Scheme, statistical, research and fraud prevention purposes;
- Ofgem and delivery partners of central and local government home energy schemes such as the Energy Company Obligation and Renewable Heat Incentive;
- other Government departments where necessary.
BEIS will be conducting an evaluation of the Scheme. This may include you being contacted to take part in further research. Where the research involves processing of personal data in addition to that already collected for delivery of the Scheme, you will be given the opportunity to opt-in to that research at the point of contact.
Personal data shared may be stored on the BEIS’s IT infrastructure and may therefore be shared with BEIS’s data processors Microsoft and Amazon Web Services. This means your data may be transferred and stored securely outside the UK or European Economic Area. Where that is the case, it will be subject to equivalent legal protection through the use of Model Contract Clauses.
Your data may also be used for statistical, research and fraud prevention purposes.
We may rely on a number of exemptions, which allow us to share information without needing to comply with all the rights and obligations under the Data Protection Act 2018. Please refer to the Kent and Medway Information Agreement for further details on our sharing arrangements.
Retention period - we keep your personal information for the minimum period necessary. The information outlined in this Privacy Notice will be kept for 6 years after the last action. All information will be held securely and disposed of confidentially.
Your personal data will be stored securely by BEIS for a maximum period of 25 years following the close of the Scheme. BEIS may choose to store anonymised data beyond this period.
Anonymisation - your personal information may be converted ('anonymised') into statistical or aggregated data in such a way that ensures that you cannot be identified from it. Aggregated data cannot, by definition, be linked back to you as an individual and may be used to conduct research and analysis, including the preparation of statistics for use in our reports.
Right to object - where processing your personal information is required for the performance of a public interest task (see our lawful basis above), you have the right to object on ‘grounds relating to your particular situation’. We will have to demonstrate why it is appropriate for us to continue to use your personal data.
Changes to this Privacy Notice - we review this Privacy Notice regularly and will place updates on our website.
Please refer to our Corporate Privacy Notice for further details of how we process your personal information and your rights.
-------------------------------------------------
1 Note that we may process your personal information on more than one lawful basis depending on the specific purpose for which we are using your information