Blue Badge Service

In order to comply with articles 13 and 14 of the UK General Data Protection Regulation (UK), where personal data relating to a data subject is collected, Lancashire County Council would like to provide you with the following details.

Identity and contact details of the data controller

Lancashire County Council,
PO Box 78 County Hall,
Fishergate,
Preston,
Lancashire,
PR1 8XJ

Contact details of the Blue Badge Team

For specific enquiries relating to the Blue Badge Team please direct these to bluebadge.admin@lancashire.gov.uk.

Contact details of the data protection officer

Our Data Protection Officer is Paul Bond. You can contact him at dpo@lancashire.gov.uk or Lancashire County Council, PO Box 78 County Hall, Fishergate, Preston, Lancashire, PR1 8XJ

Purposes for processing

The Blue Badge service is designed to enable disabled people who have a condition which impacts their mobility to access goods and services, by allowing them to park close to their destination, either as a passenger or a driver.

The Lancashire County Council Blue Badge Service receives and assesses all applications from residents of Lancashire.

Applicants are eligible 'without further assessment' if they meet the required criteria. Other applicants will be 'subject to further assessment' and will undergo a desktop assessment based on the information they provide to describe their walking ability.

Our website provides further information on the criteria.

Category of personal data being processed

  1. Personal data (information relating to a living, identifiable individual)
  2. Special category personal data (racial, ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation)

Legal basis for processing personal data

The legal basis for processing your personal data, in accordance with Article 6 (1) of UK GDPR is:

(c) Legal Obligation: the processing is necessary for you to comply with the law. You must reference the applicable legislation if you wish to rely on this basis for processing.

(e) Public Task: the processing is necessary for you to perform a task in the public interest or for your official functions, and the task or function has a clear basis in law. You must reference the applicable task/function and its' basis in law if you wish to rely on this basis for processing.

We process your personal data for the purposes of fulfilling a legal obligation or for a public task with a basis in law by virtue of the following legislation:

  • Chronically Sick and Disabled Persons Act 1970
  • The Disabled Persons (Badges for Motor Vehicles) (England) Regulations 2000.
  • Disabled Persons' Parking Badges Act 2013
  • Analysis of Blue Badge data is conducted by Adults’ Health and Care in order to produce statistics required under the Health and Social Care Act 2012.
  • The Blue Badge Local Authority (England) guidance on GOV.UK

Legal basis for processing special categories of personal data

The legal basis for processing your special categories of personal data, in accordance with Article 9 (2) of UK GDPR is:

(g) Processing is necessary for reasons of substantial public interest.

(h) Processing is necessary for the purposes of preventive or occupational medicine, for the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services.

Where Article 9 (2) (g) substantial public interest is being relied upon, it is by virtue of the Data Protection Act (2018) Schedule 1 Part 2 (6) Statutory etc and government purposes.

Recipients of the data

Lancashire County Council's Blue Badge Service work with the following partners:

  • Lancashire Parking Services
  • Able 2 (Occupational Therapists)
  • NEC Software Solutions UK
  • Department for Transport (DfT) - the central government directive responsible for the Blue Badge Scheme
  • GOV.UK - the central government website which allows you to apply online
  • GOV.UK- accessing the government Searchlight portal to view current benefit information.
  • Government Digital Service - used for sending email and SMS notifications and for processing online payments

Information we share

Lancashire County Council's Blue Badge Service will share the following categories of information with the partners listed above.

  • Name
  • Date of birth
  • Contact details
  • Gender
  • Place of birth
  • National Insurance number
  • Contact details for members of your family and support network if you wish them to advocate for you
  • Copies of documents showing your proof of identity (for example, passport, birth certificate)
  • Copies of documents showing your address (for example, council tax bill, benefit letter, driving licence, pay slips)
  • Your photograph
  • Financial information to process your application if you pay by credit/debit card

We also collect the following special category data:

  • Medical information you provide in support of your claim
  • If applicable, copies of documents showing your eligibility to a benefit which automatically qualifies you for a Blue Badge
  • Details of medical history provided by the applicant
  • Reason for referral
  • Actions already taken

Any transfers to another country

 No.

Retention periods

Lancashire County Council will only store your information for as long as is legally required or in situations where there is no legal retention period they will follow established best practice.

File type Description Security Retention period
Blue Badge CMS Record Applications are submitted via the Gov.uk website and received directly into the Blue Badge CMS hosted by NEC Software Solutions UK Personal data initially submitted to us securely via Gov.uk website (including supporting documents if uploaded by applicant). Records are held for:
  • Approved Badge – 3 Years
  • Refused Badge – 12 months
  • Expired Badge – 12 months
  • Cancelled Application – 28 Days from last interaction
Supporting Documents Supporting documents supplied by the customer via email or post Personal data emailed to our Blue Badge service directly. Personal data retained securely on our systems. Destroy 12 months from date of decision

Your rights

You have certain rights under the UK General Data Protection Regulation (UK GDPR), these are the right:

  • to be informed via Privacy Notices such as this.
  • to withdraw your consent. If we are relying on your consent to process your data then you can remove this at any point.
  • of access to any personal information the council holds about yourself. To request a copy of this information you must make a subject access request in writing. You are entitled to receive a copy of your personal data within 1 calendar month of our receipt of your subject access request. If your request is complex then we can extend this period by a further two months, if we need to do this we will contact you. You can request a subject access request, either via a letter or via an email to Information Governance Team, address below.
  • of rectification, we must correct inaccurate or incomplete data within one month.
  • to erasure. You have the right to have your personal data erased and to prevent processing unless we have a legal obligation to process your personal information.
  • to restrict processing. You have the right to suppress processing. We can retain just enough information about you to ensure that the restriction is respected in future.
  • to data portability. We can provide you with your personal data in a structured, commonly used, machine readable form when asked.
  • to object. You can object to your personal data being used for profiling, direct marketing or research purposes.
  • in relation to automated decision making and profiling, to reduce the risk that a potentially damaging decision is taken without human intervention.

If you want to exercise any of these rights then you can do so by contacting:

Information Governance Team
Lancashire County Council
PO Box 78
County Hall
Preston
PR1 8XJ 

Or email: dpo@lancashire.gov.uk

To ensure that we can deal with your request as efficiently as possible you will need to include your current name and address, proof of identity (a copy of your driving licence, passport or two different utility bills that display your name and address), as much detail as possible regarding your request so that we can identify any information we may hold about you, this may include your previous name and address, date of birth and what council service you were involved with.

Further information

If you would like more information about this specific service then please contact bluebadge.admin@lancashire.gov.uk.

For more information about how we use personal information see Lancashire County Council's full privacy notice.

If you wish to raise a complaint on how we have handled your personal data, you can contact the Information Governance team who will investigate the matter.

Lancashire County Council, PO Box 78 County Hall, Fishergate, Preston, Lancashire, PR1 8XJ or email: dataprotection@lancashire.gov.uk

If you are not satisfied with our response or believe we are processing your personal data not in accordance with the law you can complain to the Information Commissioner’s Office (ICO).