Privacy Policy

Why we collect your personal information

Borough Council of King’s Lynn and West Norfolk (“the Council”) takes the safety of your personal information very seriously and will only ever process your information in accordance with the law, this includes the General Data Protection Regulations (UK GDPR), the Data Protection Act 2018 and any other relevant legislation.

Under this legislation, you have a right to know how the Council processes your data and the purpose of that processing.

We collect data to fulfil our service tasks and obligations. For example, for:

  • Parking enforcement
  • Parking appeals
  • Blue badge misuse
  • Parking dispensations
  • Car park season tickets
  • Resident permits

The Council may use your data for any of the following purposes, in line with our corporate privacy policy:

  • Statutory requirements i.e. reporting to Government
  • Financial transactions
  • Prevention and detection of crime
  • Equality monitoring
  • Service delivery
  • Service improvement and planning
  • Research purposes including consultations

The personal data collected and used will vary and depend on the nature of the service used.

Why we are allowed to use your data

The Council is permitted to use your data to fulfil a public task and collects your data for those purposes. Our powers and duties come from various UK laws, including but not limited to:

  • The Civil Enforcement of Parking Contraventions (England) General Regulations 2007
  • Traffic Management Act 2004
  • Road Traffic Regulation Act 1984

The parking service collects and processes data using powers conferred upon Local Authorities in UK GDPR. The following categories of lawfulness apply:

  • Article 6(b) Processing is necessary to fulfil a contract.
  • Article 6(c) Processing is necessary for compliance with a legal obligation.
  • Article 6(e) Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Categories of personal data

To carry out our statutory duties we collect and obtain the following information where appropriate:

  • details about you such as name, address, phone number, email address
  • details of your vehicle, such as registration number, vehicle make , model and colour
  • location of vehicle
  • PCN number
  • UPN number
  • civil parking offence details
  • blue badge serial numbers and expiry dates
  • carer eligibility
  • formal parking enforcement notices
  • vehicle ownership checks via the DVLA
  • images of you if the enforcement officer has activated their body worn video camera
  • your credit/debit card details if you have paid for a service by card
  • contact we’ve had with you, such as any correspondence

The information collected and held will vary dependent on the service used. In each case, we will only collect and keep your information to the extent it is proportionate for us to do so, and only for as long as necessary.

Special category data

On limited occasions we may come into possession of special category data.

Special category data is personal data that needs more protection because its use can potentially present risks to an individual’s fundamental rights and freedoms. Examples of this include personal data concerning health.

To process this data, Article 9 of the GDPR will apply:

  • Article 9 (f) Processing is necessary for the establishment, exercise or defence of legal claims or whenever courts are acting in their judicial capacity.
  • Article 9 (g) Processing is necessary for reasons of public interest.

Failure to provide accurate and complete information when requested may prevent us from providing you with the agreed service.

Who we may share your information with

In some circumstances, it will be necessary to share your information with other departments within the Council and/or external third parties, these are:

  • Police & Fire Authorities
  • Enforcement Agencies, to recover debt if a PCN is not paid
  • Judicial agencies such as the courts
  • Other Local Authorities
  • Members of the Norfolk Parking Partnership (see below)
  • Government Departments such as DVLA.
  • Contractors providing services on behalf of the Council

To the extent that it is able to do so, the Council will prohibit any such third party organisation from using that data for any other purpose, and will require them to comply with all requirements of data protection legislation and government security standards.

From the 7 November 2011 we’ve been working as part of the Norfolk Parking Partnership (NPP), alongside Norfolk County Council. This is to aid consistency in the delivery of parking services in the county. The NPP’s policy and approach to challenges can be found on the Norfolk County Council website.

As the lead authority for the Norfolk Parking Partnership, we process parking information for the following organisations;

  • North Norfolk District Council
  • South Norfolk District Council
  • Norwich City Council
  • Great Yarmouth Borough Council
  • Breckland Council
  • Broadland District Council
  • Norwich City Council

Accessing the information we hold about you

You have the right to ask for all the information we have about you. This is called a Subject Access Request (SAR). You can find out more and make an application on the Councils’ website.

If you wish to see more information about the way in which the Council uses your data, you can access our Corporate Privacy Policy and our Data Protection Policy.

You can also find out more on the ICO website.

How long we keep information about you

After we deliver a service to you, we have to keep your information as a business record of what was delivered. The type of service will determine how long we have to keep it.

We will only keep your personal information for as long as the law specifies or where the law does not specify this, for the length of time determined by our business requirements.

See our corporate retention policy and schedules to see how long we keep records for different services.

More information

See our corporate data protection policy for more information on your rights and for ICO contact details.

If you have a concern about how we are using your information, we would ask you to contact us in the first instance at