Details
- Name of service - National Trading Standards Scams Team
- Directorate - Customer and Communities
- Date of issue - 14 January 2020
- Date of current version - 2 November 2023
- Review date - 2 November 2025
Notice
The reasons why we use your personal data
This privacy notice applies to the functions of the National Trading Standards (NTS) Scams Team. The NTS Scams Team is hosted by Surrey County Council (SCC) and helps tackle mass marketing scams and disrupts the operations of perpetrators behind mail scams. It works in partnership with agencies across the country to identify and support victims of mass marketing fraud. The team provides guidance, best practice and establishes a centre of excellence to assist local authorities in supporting local victims and taking local enforcement action.
What processing of personal data is undertaken by the team
Your personal data is collated in order to carry out our functions in relation to law enforcement on one or more of the following bases:
- You have given your consent to the processing of your data for a law enforcement purpose which has been communicated to you; or
- The processing is necessary for the performance of a task carried out for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, including the safeguarding against and the prevention of threats to public security.
What information do we collect?
Name, address, contact details, health details, date of birth or age, financial details, family details such as names of relatives, lifestyle and social circumstances details and conviction data.
How we are allowed to use your personal data
SCC is a competent authority processing personal data for law enforcement purposes as set out in part 3 of the Data Protection Act 2018 (DPA18).
Our legal basis for processing law enforcement data is that it is necessary for the performance of functions contained in:
- Consumer Rights Act 2015
- Consumer Protection from unfair Trading Regulations 2008
- Enterprise Act 2002
Consent
In some circumstance SCC may obtain your consent. If consent is required to process your personal data, we will explain to you what we are asking you to agree to and why. If we have consent to use your personal data, you have the right to remove it at any time. If you want to remove your consent, please contact us at the following email address: scamsteamadmin@surreycc.gov.uk and we will deal with your request.
Your Rights
It is important to note that subject access rights and the rights to rectification, erasure and restriction do not apply to the processing of 'relevant personal data' in the course of a criminal investigation or criminal proceedings.
Who we share your personal data with
Local Authority Trading Standards services, law enforcement agencies and data processors who act on our behalf, and Cifas.
Automated decision making (when computers make any decisions about you)
We do not use automated decision making
Personal data being sent or processed outside of the UK and EU
SCC uses third party suppliers to manage documents, some of which operate outside of the UK. In respect of all of these suppliers, SCC takes steps to ensure data security.
All of the third-party suppliers used by the NTS Scams Team are either based in the EEA or the USA or a territory in respect of which a declaration of adequacy has been made by the EU Commission. In the event that we should use a supplier not falling within these categories, we shall only use the supplier if appropriate safeguards are in place.
In the case of suppliers based in the EEA and Gibraltar, SCC relies on the DPA18 adequacy decisions. In the case of suppliers based in the USA, SCC relies on the UK-US Data Bridge Regulations. In the case of any suppliers the NTS Scams Team may use which are based in Andorra, Argentina, Canada, the Faroe Islands, Guernsey, Israel, the Isle of Man, Jersey, New Zealand, Switzerland, or Uruguay, SCC relies on declarations of adequacy made by the EU Commission.
SCC also works with international law-enforcement partners some of which are based outside of the UK.
We may lawfully share data for law enforcement purposes with EEA states, Switzerland and Gibraltar, based on adequacy decisions in the DPA18.
We may lawfully share data for law enforcement purposes with other international law enforcement partners under sections 75 and 76 of the DPA18, which provides safeguards for data subjects and oversight by the Information Commissioners Office.
Retention of data
Data will be retained for six years plus current year. After this date data is then anonymised from the NTS Scams Team's systems.
Other information
For further information on our privacy notices, please see information and privacy.
