Privacy policy

Privacy policy

Greater Manchester Business Compliance Support Privacy Notice

Our core data protection obligations and commitments are set out in the Council’s Corporate Privacy Notice and on our website at Data Protection – Privacy Notice.

This notice provides additional privacy information for individuals who engage with Greater Manchester Business Compliance Support, a partnership between Greater Manchester local authorities to provide coordinated business compliance services.

Purpose(s)

We collect your personal information for the following purpose(s):

To provide compliance guidance and support;
Carrying out statutory inspections of businesses;
Investigation of complaints or responding to enquiries;
Pro-active enforcement activities to ensure compliance;
For the prevention and / or detection of fraud and / or crime Intelligence sharing with enforcement partners;
To allow us to communicate with service users, including marketing communications such as newsletters and workshop invitations, with your explicit consent;
To fulfil a legal obligation;
To provide a chargeable service to businesses to drive compliance;
To signpost you to other sources of support.

Categories of Personal Data

In order to carry out these purposes we collect and obtain the following categories of personal data:

Name;
Business name;
Contact details (email address, telephone number(s));
Compliance status;
Type & size of business;
Bank details (where paying for a chargeable service);
Social Media accounts;
Photographs (where applicable);
Staff salary information (where applicable).

Legal Basis for Processing

We collect and use your personal information because:

You have given your consent under GDPR Article 6(1)(a).
It is necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract under GDPR Article 6(1)(b);
It is necessary under GDPR Article 6(1)(e) for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Council; or
It is necessary for compliance with a legal obligation or statutory function of the Council under GDPR Article 6(1)(c). Such legal obligations and statutory functions are as set out in, but not limited to:

Licensing Act 2003
Local Government (Miscellaneous Provisions) Act 1976 and 1982
Air Quality (Taxi and Private Hire Vehicles Database) (England and Wales) Regulations 2019 (SI 2019 No. 885)
Animal Welfare (Licensing of Activities Involving Animals)(England) Regulations 2018
Animal Welfare Act 2006
Criminal Justice and Police Act 2001 sec 19-28
Gambling Act 2005
Animal By-Products (Enforcement) (England) Regulations 2013
Animal Welfare Act 2006
Animal Welfare (Licensing of activities involving animals)(England) Regulations 2018
Cancer Act 1939
Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013
Consumer Protection from Unfair Trading Regulations 2008
Consumer Rights Act 2015
Copyright, Designs and Patents Act 1988
Cosmetic Products Enforcement Regulations 2013 and the EU Cosmetic Regulation1223/2009
Fair Trading Act 1973
Fireworks Act 2003
General Product Safety Regulations 2005
Hallmarking Act 1973
Housing Act 2004
Housing and Regeneration Act 2008
Package Travel, Package Holidays and Package Tours Regulations 1992
Pyrotechnic Articles (Safety) Regulations 2015
REACH Enforcement Regulations 2008
Single Use Carrier Bags Charges (England) Order 2015
Standardised Packaging of Tobacco Products Regulations 2015
Textile Products (Labelling and Fibre Composition) Regulations 2012
Tobacco Advertising and Promotion Act 2002
Toys (Safety) Regulations 2011
Trade Marks Act 1994
Food Act 1984
Food and Environment Protection Act 1985
Food for Specific Groups (Information and Compositional Requirements)(England) Regulations 2016
Food Information Regulations 2014
Food Safety and Hygiene (England) Regulations 2013
Spirit Drinks Regulations 2008
Wine Regulations 2011
Animal Feed (Composition, Marketing and Use)(England) Regulations 2015
Animal Feed (Hygiene, Sampling etc and Enforcement)(England) Regulations 2015
Official Controls (Animals, Feed and Food)(England) Regulations 2006 in so far as it relates to feed law
Official Feed and Food Controls (England) Regulations 2009 in so far as it relates to feed law
Measuring Instruments Regulations 2016
Weights and Measures Act 1985
Weights and Measures (Packaged Goods) Regulations 2006
Health and Safety at Work Act 1974
Animal Welfare (Licensing of activities involving animals)(England) Regulations 2018
Food Safety Act 1990
Health Act 2006
Local Government (Miscellaneous Provisions) Acts 1976 and 1982
Local Government Act 1972
Noise Act 1996
Noise and Statutory Nuisance Act 1993
Pollution Prevention and Control Act 1999
Prevention of Damage by Pests Act 1949
Protection of Animals Act 1911
Scrap Metal Dealers Act 2013
Sunbeds (Regulation) Act 2010
Sunday Trading Act 1994

If you fail to provide certain information when requested, we may not be able to provide the service to you or we may be prevented from complying with our legal obligations.

Exceptionally, under GDPR Article 6(1)(d) information may also be shared if it is necessary to protect individuals from harm, or under GDPR 6(1)(d) because a serious crime has, or may be, committed.

Withdrawing your consent

Where you have provided consent (GDPR Article 6(1)(a)) for us to process your data to inform you of future workshops and events, chargeable services or to include you in our quarterly newsletter, you can withdraw your consent at any time by emailing [email protected] with ‘unsubscribe’ as the email subject.

However, in these circumstances your own local authority may still hold and process your data under GDPR Article 6(1)(b), GDPR Article 6(1)(e) or GDPR Article 6(1)(c).

Where has your personal information come from?

Most of the information we hold is provided by you, this could be the details you provide when you complete a licensing application or food business registration or if you seek business compliance support from us. We also hold information from individuals raising an issue or making a complaint about a business.

We will only collect basic personal data about you which includes your name, address, business name, telephone number, email etc. together with information you have given us and information that we receive from third parties, for example Citizens Advice, Department for Environment & Rural Affairs, Food Standards Agency, Health & Safety Executive, Greater Manchester Police, Greater Manchester Fire & Rescue Service, Department of Work and Pensions, Office for Product Safety & Standards, Greater Manchester local authorities and other Tameside Council departments.

We use Eventbrite to manage event sign-ups and collect attendee information, including name, email, phone number, and business details. Eventbrite acts as a data processor on our behalf.

Who will we share your information with?

We may collect and share personal information about you with the following types of organisations:

Other Tameside Metropolitan Borough Council Services;
Safeguarding agencies and partnerships;
Commissioned partners (e.g. a charity or other organisation that we ask to provide services on our behalf) and other voluntary and private sector organisations who assist in delivering our service);
Healthcare partners;
Schools, education providers and specialist teachers;
Early education and childcare providers, such as nurseries and pre-schools;
Greater Manchester Police (and other Police forces where appropriate);
Greater Manchester Fire & Rescue Service
Central Government Departments (e.g. Office for Product Safety & Standards, Department for Business and International Trade, Department for Science, Innovation & Technology, Department for Environment & Rural Affairs);
Other National Regulatory Bodies (e.g. Health & Safety Executive, Food Standards Agency);
Greater Manchester Combined Authority (GMCA);
Other Greater Manchester Local Authorities;
Other Greater Manchester business support organisations where your consent is provided.

If your data is shared for purposes beyond those stated, we will inform you unless the law requires otherwise.

How long we will keep your data for and why?

We will only retain information for as long as it is necessary to provide services to you and/or for as long as required by us in order to comply with statutory retention periods.

Transferring data outside the European Economic Area (EEA)

The information you provide to us or to your local authority is not processed outside of the European Economic Area.

For information provided via Eventbrite, your data may be stored on servers outside the UK, but we ensure appropriate safeguards are in place, including Standard Contractual Clauses, to protect your data. For more information, please visit: https://www.eventbrite.co.uk/help/en-gb/articles/460838/eventbrite-privacy-policy/.

Your rights

Information about exercising your rights can be found on the council’s website Exercising Your Individual Rights.

Security

We use appropriate technical, organisational and administrative security measures to protect any information we hold in our records from loss, misuse, and unauthorised access, disclosure, alteration and destruction. We have written procedures and policies, which are regularly audited, and the audits are reviewed at senior level.

Data Protection Officer

If you have any questions or concerns about how we use your personal information, please contact the Data Protection Officer at [email protected] or by calling 0161 342 8355.

Automated Decisions

For this service, all the decisions we make about you involve human intervention.

Updates to Privacy Notice

We may update or revise this Privacy Notice at any time so please refer to the version published on our website for the most up to date details on our Data Protection page .