NoWcard Team, part of the Public and Integrated Transport Team

In order to comply with the UK General Data Protection Regulation (UK GDPR), where personal data relating to a data subject is collected, Lancashire County Council would like to provide you with the following details.

Identity and contact details of the data controller

  • Lancashire County Council, PO Box 78 County Hall, Fishergate, Preston, Lancashire, PR1 8XJ

Contact details of the data protection officer

  • Our Data Protection Officer is Paul Bond. You can contact him at or Lancashire County Council, PO Box 78 County Hall, Fishergate, Preston, Lancashire, PR1 8XJ

Purposes for processing

NoWcard is a partnership between Cumbria and Lancashire County Councils; and Blackburn with Darwen Borough and Blackpool Councils. Lancashire County Council's NoWcard Team issue English National Concession travel passes to residents of Lancashire, Cumbria, Blackburn with Darwen and Blackpool.

LCC collects and processes personal data relating to older people and disabled people applying for English National Concession travel passes. The information given will assist us to provide a bus pass.

Category of personal data being processed

  1. Personal data (information relating to a living, identifiable individual)
  2. Special category personal data (racial, ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation)

Legal basis for processing personal data

The legal basis for processing your personal data, in accordance with the UK GDPR is:

(c) Legal Obligation: the processing is necessary for you to comply with the law. You must reference the applicable legislation if you wish to rely on this basis for processing.

Legal basis for processing special categories of personal data

The legal basis for processing your special categories of personal data, in accordance with the UK GDPR is:

(g) Processing is necessary for reasons of substantial public interest.

Relevant Legislation that supports the admissions authority processing:

Equality Act 2010

  • This Act consolidates the law prohibiting discrimination, harassment and victimisation and expands the list of protected characteristics. All schools must have due regard to their obligations under the Act and review their policies and practices to make sure these meet the requirements of the Act, even if they believe that they are already operating in a non- discriminatory way.
  • An admission authority must not discriminate on the grounds of disability; gender reassignment; pregnancy and maternity; race; religion or belief; sex; or sexual orientation, against a person in the arrangements and decisions it makes as to who is offered admission as a pupil.
    An admission authority must not harass a person who has applied for admission as a pupil, in relation to their disability; race; or sex.
  • An admission authority must not victimise a person in relation to a protected act either done, or believed to have been done by that person (e.g. bringing proceedings under the Equality Act 2010) in the arrangements and decisions it makes as to who is offered admission as a pupil.
  • This Act contains limited exceptions to the prohibition of discrimination on grounds of religion or belief and sex. Schools designated by the Secretary of State as having a religious character are exempt from some aspects of the prohibition of discrimination on the grounds of religion or belief and this means they can make a decision about whether or not to admit a child as a pupil on the basis of religion or belief. Single-sex schools are lawfully permitted to discriminate on the grounds of sex in their admission arrangements.
  • Admission authorities are also subject to the Public Sector Equality Duty and therefore must have due regard to the need to eliminate discrimination, harassment and victimisation, advance equality of opportunity, and foster good relations in relation to persons who share a relevant protected characteristic and persons who do not share it.
  • The protected characteristics for these purposes are: disability; gender reassignment; pregnancy and maternity; race; religion or belief; sex; and sexual orientation.

Human Rights Act 1998

  • The Human Rights Act 1998 confers a right of access to education. This right does not extend to securing a place at a particular school. Admission authorities, however, do need to consider parents’ reasons for expressing a preference when they make admission decisions, though this may not necessarily result in the allocation of a place. These might include, for example, the parents’ rights to ensure that their child’s education conforms to their own religious or philosophical convictions (as far as is compatible with the provision of efficient instruction and the avoidance of unreasonable public expenditure).

Transport Act 2000

Concessionary Bus Travel Act 2007

Travel Concessions (Eligibility) Act (2002)

The Travel Concessions (Eligibility) (England) Order 2010 (SI 2002/1016)

Recipients of the data

In order to manage and administrate the NoWcard scheme your personal data will be shared with the other partners in the partnership, which are:

  • Cumbria County Council
  • Blackburn with Darwen Borough Council
  • Blackpool Council

Information we share

The NoWcard team collects the following information in order to manage and facilitate the service.

  • Title
  • Applicant's Name
  • Date of Birth
  • Contact Number
  • Address
  • National Insurance Number
  • Email
  • Gender
  • Category of disability if applicable

Any transfers to another country

  • No

Retention periods

Lancashire County Council will only store your information for as long as is legally required or in situations where there is no legal retention period they will follow established best practice.

File Type Description Retention period


Emails held in Outlook that haven't been exported or moved elsewhere. Retained in accordance with appropriate internal retention guidelines
Paper application forms Completed application forms.

Incomplete application forms.
3 months 1 year

Your rights

You have certain rights under the UK General Data Protection Regulation (UK GDPR), these are the right:

  • to be informed via Privacy Notices such as this.
  • to withdraw your consent. If we are relying on your consent to process your data then you can remove this at any point.
  • of access to any personal information the council holds about yourself. To request a copy of this information you must make a subject access request in writing. You are entitled to receive a copy of your personal data within 1 calendar month of our receipt of your subject access request. If your request is complex then we can extend this period by a further two months, if we need to do this we will contact you. You can request a subject access request, either via a letter or via an email to Information Governance Team, address below.
  • of rectification, we must correct inaccurate or incomplete data within one month.
  • to erasure. You have the right to have your personal data erased and to prevent processing unless we have a legal obligation to process your personal information.
  • to restrict processing. You have the right to suppress processing. We can retain just enough information about you to ensure that the restriction is respected in future.
  • to data portability. We can provide you with your personal data in a structured, commonly used, machine readable form when asked.
  • to object. You can object to your personal data being used for profiling, direct marketing or research purposes.
  • in relation to automated decision making and profiling, to reduce the risk that a potentially damaging decision is taken without human intervention.

If you want to exercise any of these rights then you can do so by contacting:

Information Governance Team
Lancashire County Council
PO Box 78
County Hall


To ensure that we can deal with your request as efficiently as possible you will need to include your current name and address, proof of identity (a copy of your driving licence, passport or two different utility bills that display your name and address), as much detail as possible regarding your request so that we can identify any information we may hold about you, this may include your previous name and address, date of birth and what council service you were involved with.

Further information

If you would like more information about this specific project then please contact

For more information about how we use personal information see Lancashire County Council's full privacy notice.

If you wish to raise a complaint on how we have handled your personal data, you can contact the Information Governance team who will investigate the matter.

Lancashire County Council, PO Box 78 County Hall, Fishergate, Preston, Lancashire, PR1 8XJ or email:

If you are not satisfied with our response or believe we are processing your personal data not in accordance with the law you can complain to the Information Commissioner’s Office (ICO).