Waste Management Service
To comply with the UK General Data Protection Regulation (UK GDPR), where personal data relating to a data subject is collected, Lancashire County Council would like to provide you with the following details.
Contact details of this Lancashire County Council service:
Note that for queries intended for this specific service, do not contact the Data Protection Officer (DPO) mailbox, instead please direct your query to the following point of contact:
Reasons for processing your personal data
Lancashire County Council Waste Management Service processes personal data to:
Manage and deliver household waste and recycling services.
Administer recycling centre access arrangements, permits, bookings and other waste management schemes.
Monitor the safe and lawful use of waste and recycling facilities.
Prevent, detect and investigate misuse of services, unlawful waste disposal, anti-social behaviour and other incidents.
Communicate with residents about waste management services, enquiries, applications, complaints, feedback and service updates.
Deliver waste reduction, reuse, recycling and environmental engagement initiatives, including reward and behaviour-change programmes.
Administer rewards, prize draws, donations and other activities associated with waste reduction and recycling campaigns.
Monitor, evaluate and improve the effectiveness of waste management and recycling services.
Produce reports, statistics and management information to support service planning, performance monitoring and environmental objectives.
Comply with legal, regulatory and public sector obligations relating to waste management, environmental protection and public service delivery.
Use of artificial intelligence (AI) technologies
We are increasingly utilising AI technologies to process your personal data. This is primarily utilised within Lancashire County Council using Microsoft Copilot Web and Microsoft Copilot 365. Please consult our Artificial Intelligence privacy notice for more details of how we use these specific platforms.
We do not use AI to make automated decisions. There is always a human intervention to review and approve any outputs from the AI tools. Decisions are not made solely by automated means.
Within the Waste Management Service, approved AI technologies may be used to support the administration and improvement of our services. For example, AI tools may be used to:
Draft and review communications, reports, guidance and other service documents.
Summarise information and assist with administrative tasks, planning activities and meeting notes.
Support the creation of educational content and campaigns relating to waste reduction, reuse and recycling.
Analyse service information, trends and performance data to help identify opportunities for service improvement. Where possible, this analysis is undertaken using anonymised or aggregated information.
Assist officers in preparing management information, presentations and service updates.
AI technologies are used as a supporting tool only. All outputs are reviewed by appropriately trained officers, and no decisions that produce legal or similarly significant effects on individuals are made solely by automated means.
Legal basis for processing personal data
Lancashire County Council Waste Management Service processes personal data under the following UK GDPR Article 6 lawful bases, depending on the activity being carried out:
Article 6(1)(a) - Consent
Where participation in an activity is optional and consent is appropriate, such as certain communications, prize draws or promotional activities, we will seek your consent and you may withdraw it at any time.
Article 6(1)(c) - Legal Obligation
Processing is necessary to comply with legal and regulatory duties relating to waste management, environmental protection, health and safety, crime prevention, and the operation of recycling and waste facilities.
Article 6(1)(e) - Public Task
Processing is necessary for the performance of tasks carried out in the public interest and in the exercise of Lancashire County Council's official functions. This includes delivering waste management services, promoting waste reduction and recycling, administering environmental initiatives, and monitoring and improving service performance. Relevant legislation includes the Environmental Protection Act 1990, Waste and Emissions Trading Act 2003, Local Government Act 2000 and Localism Act 2011.
Article 6(1)(f) - Legitimate Interests
In limited circumstances, processing may be necessary for legitimate interests such as maintaining the security and integrity of waste management services, managing bookings and permits, investigating incidents, preventing misuse of services, and protecting public resources and facilities.
The specific lawful basis relied upon will depend on the Waste Management Service activity being provided.
Legal basis for processing special categories of personal data
The Waste Management Service does not routinely process special category personal data. However, in limited circumstances, special category personal data may be processed where it is necessary to investigate incidents, protect staff and service users, prevent unlawful activity, or comply with legal and regulatory requirements.
Where special category personal data is processed, the lawful basis relied upon is:
Article 9(2)(g) - Substantial Public Interest
Processing is necessary for reasons of substantial public interest, including the prevention or detection of unlawful acts, safeguarding individuals, protecting the public, and carrying out Lancashire County Council's statutory functions. This is supported by Schedule 1 of the Data Protection Act 2018.
Where special category personal data is collected for a different purpose, Lancashire County Council will identify and apply the appropriate UK GDPR Article 9 condition and provide further information where required.
Legal basis for processing criminal offence data
The Waste Management Service does not routinely process criminal offence data. However, in limited circumstances, information relating to alleged offences, anti-social behaviour, unlawful waste disposal, fraud, or other incidents may be processed where necessary to protect staff, service users, public assets and the environment.
Where criminal offence data is processed, we rely on:
UK GDPR Article 10 - Processing of personal data relating to criminal convictions and offences under the control of official authority and in accordance with UK law.
Data Protection Act 2018, Schedule 1, Part 2
Paragraph 6 - Statutory and Government Purposes.
Paragraph 10 - Preventing or Detecting Unlawful Acts.
This processing may be necessary to:
Investigate incidents and complaints.
Prevent and detect unlawful activities, including illegal waste disposal and misuse of waste management services.
Support enforcement action and information sharing with relevant regulatory, enforcement and law enforcement agencies where required by law.
Appropriate safeguards are applied to ensure that any criminal offence data is accessed only by authorised individuals and retained only for as long as necessary.
Information we process about you
Depending on the waste management service you use, we may process the following types of personal data:
Name, address, postcode and contact details such as email address and telephone number.
Information provided as part of permit, booking, registration or account management processes.
Vehicle details, including vehicle registration numbers collected through permit schemes, site monitoring or Automatic Number Plate Recognition (ANPR) systems.
Records of your use of waste and recycling facilities, services and programmes.
Details of enquiries, complaints, compliments, feedback and correspondence with the service.
Information relating to your participation in waste reduction, recycling, rewards and engagement initiatives.
Account, reward, donation and prize draw information where relevant.
CCTV, body-worn video, photographs, audio recordings or other evidence collected for safety, security, incident management or enforcement purposes.
Information relating to accidents, incidents, anti-social behaviour, safeguarding concerns or suspected unlawful activity where necessary.
Technical and usage information relating to the use of our websites, applications and digital services.
In limited circumstances, we may also process special category personal data or criminal offence data where this is necessary for incident investigation, safeguarding, health and safety, enforcement activities or compliance with legal obligations.
Recipients of the personal data that we process about you
We will only share personal data where it is necessary, lawful and proportionate to do so. Depending on the service being provided, recipients may include:
Lancashire County Council employees and service areas who require access to the information to carry out their duties.
District and borough councils within Lancashire where information sharing is necessary to deliver waste management services, administer permits, investigate incidents or support enforcement activities.
Lancashire Constabulary and other law enforcement agencies for the prevention, detection and investigation of crime or unlawful activity.
The Environment Agency and other regulatory bodies where required for environmental regulation, compliance or enforcement purposes.
The Driver and Vehicle Licensing Agency (DVLA) where vehicle keeper information is required for lawful enforcement activities.
Contractors, suppliers and service providers who process personal data on behalf of Lancashire County Council, including providers of booking systems, digital platforms and waste management services.
Schools, charities and community organisations where necessary to administer rewards, donations, grants or community engagement initiatives.
Professional advisers, auditors, insurers or legal representatives where required to support the delivery and governance of council services.
Government departments, regulators and other public authorities where disclosure is required or permitted by law.
Personal data is not shared for marketing purposes and is only disclosed where there is a clear legal, regulatory, operational or public interest reason for doing so.
Any transfers to another country
Lancashire County Council Waste Management Service does not normally transfer or process your personal data outside the United Kingdom or the European Economic Area (EEA).
Where we use third-party suppliers or cloud-based systems, we will ensure that appropriate safeguards are in place to protect your personal data and comply with UK data protection legislation.
Retention periods
Lancashire County Council will only keep your personal data for as long as is necessary to deliver waste management services, comply with legal and regulatory requirements, investigate incidents, respond to enquiries, and fulfil our statutory duties. Information is securely stored and deleted when it is no longer required.
File type | Description | Security | Retention period |
|---|---|---|---|
Correspondence and enquiries | Emails, letters, complaints, compliments and general enquiries relating to Waste Management Services. | Stored within secure Lancashire County Council systems with access restricted to authorised staff. | 6 years from date of correspondence |
Waste permits and applications | Information provided when applying for permits, registrations or access schemes. | Stored within secure council-managed systems with role-based access controls. | 6 years from date permit expires |
Recycling centre usage records | Records relating to visits, bookings and use of recycling facilities. | Stored within secure council systems with restricted access. | 6 years from end date |
ANPR records | Vehicle registration numbers and associated images collected for site management and enforcement purposes. | Stored within secure systems with restricted access and appropriate security controls. | 5 years from date recorded. |
CCTV and body-worn video | Images and recordings captured for site safety, security, incident management and enforcement. | Stored securely with access limited to authorised personnel. | 6 weeks, or up to 7 years where required for an investigation or legal process. |
Incident, accident and enforcement records | Information relating to accidents, incidents, complaints, investigations or enforcement activities. | Stored within secure systems accessible only to authorised officers. | Usually, 6 years from date of incident closure |
Participation in waste reduction and recycling initiatives | Registration, account and participation records for waste reduction, engagement and rewards programmes. | Stored within secure systems operated by Lancashire County Council or approved service providers. | Duration of participation plus a defined retention period, typically between 12 months and 6 years depending on the record type. |
Subject access requests and data protection records | Records relating to information rights requests and associated correspondence. | Stored securely with restricted access. | 6 years after closure of the request. |
Your rights
You have certain rights under the UK General Data Protection Regulation (UK GDPR), these are those rights:
to be informed via Privacy Notices such as this.
to withdraw your consent. If we are relying on your consent to process your data, then you can remove this at any point.
of access to any personal information the council holds about yourself. To request a copy of this information you must make a subject access request in writing. You are entitled to receive a copy of your personal data within 1 calendar month of our receipt of your subject access request. If your request is complex then we can extend this period by a further two months, if we need to do this, we will contact you. You can request a subject access request, either via a letter or via an email to Information Governance Team, address below.
of rectification, we must correct inaccurate or incomplete data within one month.
to erasure. You have the right to have your personal data erased and to prevent processing unless we have a legal obligation to process your personal information.
to restrict processing. You have the right to suppress processing. We can retain just enough information about you to ensure that the restriction is respected in future.
to data portability. We can provide you with your personal data in a structured, commonly used, machine readable form when asked.
to object. You can object to your personal data being used for profiling, direct marketing or research purposes.
in relation to automated decision making and profiling, to reduce the risk that a potentially damaging decision is taken without human intervention.
If you want to exercise any of these rights, then you can do so by contacting:
Information Governance Team
Lancashire County Council
PO Box 78
County Hall
Preston
PR1 8XJ
Email: dpo@lancashire.gov.uk
To ensure that we can deal with your request as efficiently as possible you will need to include your current name and address, proof of identity (a copy of your driving licence, passport or two different utility bills that display your name and address), as much detail as possible regarding your request so that we can identify any information we may hold about you, this may include your previous name and address, date of birth and what council service you were involved with.
Identity and contact details of the data controller
Lancashire County Council, PO Box 78 County Hall, Fishergate, Preston, Lancashire, PR1 8XJ
Contact details of the data protection officer
Our Data Protection Officer is Joanne Winston. You can contact her at dpo@lancashire.gov.uk or Lancashire County Council, PO Box 78 County Hall, Fishergate, Preston, Lancashire, PR1 8XJ
Further information
For more information about how we use personal information see Lancashire County Council's full privacy notice.
If you wish to raise a complaint on how we have handled your personal data, you can contact the Information Governance team who will investigate the matter.
Lancashire County Council, PO Box 78 County Hall, Fishergate, Preston, Lancashire, PR1 8XJ or email: dataprotection@lancashire.gov.uk
If you are not satisfied with our response or believe we are processing your personal data not in accordance with the law you can complain to the Information Commissioner’s Office (ICO).