Hampshire and the Solent Combined County Authority policy

1. Introduction

Hampshire and the Solent Combined County Authority is committed to protecting your personal data and respecting your privacy. This Privacy Notice explains how we collect, use, store, and protect your information in accordance with the UK GDPR, Data Protection Act 2018, and Information Commissioners Office best practice.

2. Who We Are

Hampshire and the Solent Combined County Authority
Address: Civic Centre, Southampton, SO14 7LY

If you have questions about this notice or your data, contact our Information Governance Lead / DPO at: hscca@hantsandsolent-ca.gov.uk

3. What Personal Data We Collect

We may collect:
• Contact details (name, address, email, phone number)
• Identification details (Date Of Birth, ID numbers if required)
• Employment or financial information (where relevant)
• Website usage data (cookies, analytics)
• Special category data (only where necessary and with safeguards)

4. How We Collect Your Data

We collect data:
• Directly from you (forms, emails, phone calls, website submissions)
• Automatically via our website (cookies, analytics tools)
• From third parties (referrals, service providers, partners)

5. Why We Use Your Data

We process your data for:
• Providing services or fulfilling contracts
• Managing your relationship with us
• Legal or regulatory compliance
• Improving our services
• Marketing (only with consent or legitimate interest)

6. Lawful Bases for Processing

We rely on:
• Consent
• Contractual necessity
• Legal obligation
• Legitimate interests
• Vital interests (rare)

7. Sharing Your Data

We may share your data with:
• Service providers acting on our behalf
• Regulatory bodies
• Professional advisers
• Third parties where legally required

We ensure all third parties meet ICO ( Information Commissioners Office) expectations for data protection.

8. International Transfers

If data is transferred outside the UK, we ensure:
• Adequacy regulations apply, or
• Appropriate safeguards (e.g., International Data Transfer Agreement, Standard Contractual Clauses)

9. How Long We Keep Your Data

We retain data only as long as necessary, following our Data Retention Schedule.

10. Your Rights

You have the right to:
• Access your data
• Correct inaccuracies
• Request deletion
• Restrict processing
• Object to processing
• Data portability
• Withdraw consent

Requests are handled within one month.

11. How We Protect Your Data

We use:
• Encryption
• Access controls
• Staff training
• Secure storage and disposal
• Regular audits

12. Complaints

If you are unhappy with how we handle your data, contact us first via our information governance lead HSCCA@hantsandesolent-ca.gov.uk. You also have the right to complain to the Information Commissioners Office.