18 June 2024
Welcome to The English Sports Council ("Sport England's") Planning Information System’s privacy statement.
Important information about us
Sport England has a specific role in the planning system, acting as a statutory consultee on planning applications for development affecting or prejudicing the use of playing fields and as a non-statutory consultee on certain other planning applications that may have implications on sport. Sport England also provides strategic planning responses and support to local planning authorities through the development plan process. The team also respond to a variety of planning enquiries from a range of stakeholders. We use an internal Planning Information System (PIMS) to manage the administration of this consulting role.
Purpose of this privacy statement
Our PIMs processes personal data; therefore Sport England is obliged to ensure your privacy is protected and to process your personal data in accordance with applicable privacy laws, including the UK General Data Protection Regulation (UK GDPR) and the UK Data Protection Act 2018.
We will only collect and use your personal data in accordance with this privacy statement.
Please read this privacy statement carefully. We recommend that you maintain a copy of it for your future reference.
Controller
Sport England is the data controller and responsible for the compliant processing of your personal data when you interact with us. Unless otherwise noted, the terms "Sport England", "we", "us" or "our" on this page refer to the English Sports Council.
Lawful basis
Under data protection law we must rely on a lawful basis for the processing of your personal data. Different types of personal data require different legal bases; for your personal data the lawful basis is public task.
Contact details
We have an appointed Data Protection Officer (DPO) who is responsible for overseeing questions in relation to this privacy statement. If you have any questions about this privacy statement, including any requests to exercise your data privacy rights, please contact the DPO using the details set out below.
Full name of legal entity: The English Sports Council
Email address: [email protected]
Postal address: SportPark, 1st Floor, 3 Oakwood Drive, Loughborough, Leicestershire, LE11 3QF
Processor(s)
Where we engage or use other parties who may process your personal data provided under use of the Site, those parties must be identified as data processors and you must be provided with information relating to them.
- Arcus Global Limited is our authorised data processor, and they are contracted by us to provide the PIMS database development and management services. Their privacy notice can be found here.
- Arcus Global Limited utilise Amazon Web Services, Microsoft, Google, Salesforce and Conga platforms as sub-processors for this service.
The personal data that we collect from you
Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
We collect, use, and store different kinds of personal data about you, which we have grouped together as follows:
Identity data
- first name
- last name
- job title
- gender prefix
- role and organisation name
Contact data
- email address
- telephone number
- address provided
- email correspondence which may include additional personal data
What we do with your information
Sport England and our processor and sub-processors, who host the PIMS, collect, store and process your personal data for the following reasons:
- to carry out our duties as a statutory consultee for planning matters;
- for our internal record-keeping requirements, including collection of anonymised details about visitors to the Site to compile aggregate statistics or produce internal reports;
- for analysis, testing, monitoring, risk management and administrative purposes;
- to respond to any queries, concerns, complaints or communication you make to us; and
- to comply with the requests of any legal authority or regulatory entity.
Except as set out in this privacy statement, or unless permitted by applicable law, we will not disclose, sell, distribute, rent or lease your personal data to third parties unless we have your permission or are required to do so to comply with applicable law or an order of a governmental or law enforcement body.
International transfers of data
The Site is hosted on Arcus Global Limited Online within the UK. Arcus Global Limited utilise Amazon Web Services, Microsoft, Google, Salesforce and Conga platforms as sub-processors for this service. There is not any restricted transfer of personal data.
Security
We are committed to ensuring that your personal data is secure. To minimise the risk that there is unauthorised access to or disclosure of your personal data, we have put in place appropriate physical, electronic and managerial procedures to safeguard and secure it (such as internet standard encryption technology to encode personal data that you send to us when conducting a transaction through the Site).
In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
Data retention
We will retain your personal data according to the terms of our File Retention Schedule, which can be made available on request. We retain different types of information for the following periods:
- For pre-application advice, four years from the point of initial consultation, or if a planning application subsequently submitted and permission granted, four years from the decision date.
- For planning applications, four years since the date of the planning decision, unless relevant discharges of conditions which Sport England should be consulted on are outstanding.
- Complaints - 6 years
- Litigation 6-12 years
Your legal rights
You have rights under data protection laws in relation to your personal data.
You have the right to:
- Request access to your personal data (commonly known as a "data subject access request"). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
- Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
- Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
- Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which overrides your rights and freedoms.
- Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios:
- If you want us to establish the data's accuracy.
- Where our use of the data is unlawful, but you do not want us to erase it.
- Where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims.
- You have objected to our use of your data, but we need to verify whether we have overriding legitimate grounds to use it.
- Request the transfer of your personal data to you or to a third party. We will provide you, or a third party you have chosen, with your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided with your consent for us to use or where we used the information to carry out a contract with you.
You may exercise your rights over the personal data that we hold about you by contacting us using the details provided above.
No fee usually required
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.
What we may need from you
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
Time limit to respond
We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
Complaints
You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK regulator for data protection issues as detailed below. We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.
If you're in any way dissatisfied with the way we have handled your personal data, Sport England provides a Complaints Procedure.
In addition, regardless of whether you make a complaint under our Procedure you're entitled to lodge a complaint about our data handling practices with the Information Commissioner by writing to:
The Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
www.ico.org.uk
Changes to the privacy policy and our duty to inform you of changes
We may change and update this privacy statement from time to time and we recommend that you revisit this page regularly to keep informed on the current privacy statement and ensure that you are happy with any changes.