Privacy and data protection

Overview

To deliver our services we need to collect, store, use, share and dispose of personal information. This is known as data processing.

When we collect personal data, we must tell you why we need it, and what we will do with it. This information is called a privacy notice.

This privacy notice explains how we process your personal information as a Council. More specific information will also be provided by Council services when you use them. If this privacy notice changes in any way, we will place an updated version on this page. By regularly reviewing this page you will ensure that you are always aware of what information we collect, how we use it and under what circumstances, if any, we share it with others.

In processing personal information, The City of Edinburgh Council must comply with the EU General Data Protection Regulation and the Data Protection Act 2018. We refer to this as data protection legislation.

Register of privacy notices 

Data controller

Data controllers are the organisations or individuals that determine how your personal information will be processed. By law, data controllers must pay a fee to register with the UK Information Commissioner  who is the data protection regulator within the UK.

The City of Edinburgh Council data controller registration number: Z5545409.