- London Borough of Croydon (LBC) is a data controller registered with the Information Commissioner’s Office. We comply with the General Data Protection Regulation (GDPR) 2018 and the Data Protection Act 2018.
- Your data is securely stored within the European Union (EU). However where there will be transfer of data outside of the EU, LBC will adhere to strict security protocols and regulations to protect data.
- LBC will require your consent in order you to use My Account. When you register you will be asked to confirm your consent by e-mailing us. You can withdraw consent any time by e-mailing us at email@example.com
- Your data will only be retained and used for as long as is necessary. Where data is no longer required, it will be destroyed in line with the relevant destruction, retention and disposal policies and processes available within the Council
- LBC will take all reasonable measures to ensure that any data you provide will be protected against loss, misuse or hijack.
- By agreeing to register and request a service using My Account this is considered as consent and forms a legally binding agreement between the customer and LBC.
- You agree to LBC periodically contacting them to update about services being provided and to also verify information provided and to ensure that this information remains up to date. This agreement can be amended via the “Settings” page in the My Profile section of My Account.
How to register for my online account
You can register at www.croydon.gov.uk/myaccount .
Simply provide your details in the online form and confirm you have read and accepted the Council’s Corporate Privacy Notice at www.croydon.gov.uk/privacy.
Upon successful completion of the registration you will receive a confirmation e-mail. Usually, the confirmation e-mail should be in your inbox immediately, but remember to check your spam or clutter folder if you can’t find it.
Using your personal information
The Council will require your explicit consent to set-up and use our My Account services. As we will be relying on your permission to process your personal information, you have a right to withdraw your consent at any time. We will always make it clear where we need your permission to undertake specific processing activities. Confirmation of your consent will be provided by e-mail as part of our registration process.
If you wish to withdraw your consent, please contact us by e-mailing firstname.lastname@example.org or by completing our secure online form http://secure.croydon.gov.uk/eforms/ufsmain?formid=EXT_SC_CUSTOMER_CONTACT&ebz=2_1526895808023&ebd=0&ebp=10&ebz=2_1526895808023 or by calling us on 020 8726 6000. This will only affect the way we use personal information when our reason for doing so is that we require your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. If this is the case, we will tell you. See our Corporate Privacy Notice for more information on withdrawing consent.
Why the Council collects and stores personal data
For some of our services, we need to collect personal data so we can get in touch, or provide the service. For example, we can’t collect your rubbish if we don't know your address. We always try to make sure the information we collect is correct and isn't an invasion of your privacy.
We may pass your personal data onto the people who provide the service. These providers are obliged to keep your details securely, and use them only to fulfil your request. Once your request has been dealt with or the case has been closed, we will ensure your data is securely disposed of. If we wish to pass your sensitive personal data onto a third party, we will only do so once we have obtained your consent, unless we are legally required to do so.
Any personal information you give us – sent in online via e-forms, the app or through other means – is held securely and will be used only for Council purposes. We will use information collected for your My Account primarily for that purpose; however, in some cases, we may use the information for other purposes as may be permitted by the law. Please see our Corporate Privacy Notice at www.croydon.gov.uk/privacy for more information.
Using your information via My Account helps us to:
- deliver services that can be tailored to your needs;
- confirm your identity to provide some services;
- inform you of other relevant services and benefits and ask your opinion about our services;
- update your central customer record.
We will not share your information with third parties for commercial or marketing purposes.
We may share your personal information with other agencies (e.g. law enforcement agencies) where the law requires us to or where it is appropriate to support our duty to protect public funds and/or detect and prevent fraud or other criminal activity.
The GDPR 2018 and the Data Protection Act 2018 give you a number of rights to control what personal information is used by us and how it is used by us. For more information about how we use your personal data and your individual privacy rights, please see the Council’s Corporate Privacy Notice at www.croydon.gov.uk/privacy.
The information we hold about you is confidential. Any records we hold about you can only be seen by authorised staff and others with a right to know, including you.
By using My Account you agree to:
- To keep your username and password secure.
- Not to share your username or password with anyone else.
- To change your password at regular intervals.
- To tell us if any of the information we hold about you or the address at which you pay Council Tax is incorrect or incomplete.
- Croydon Council is not liable for any loss suffered by you as a result of you sharing or losing your username or password.
- If you suspect your account has been compromised, you should close it immediately and apply for a new one.
- Although we take steps to ensure our websites and links are virus-free, you are advised to ensure that you have adequate anti-virus protection on your computer.
- Access to the service may sometimes be unavailable due to maintenance, and can also be affected by your service provider, your network connection, and your computer. If you experience connection difficulties you should retry accessing the service.
- Payments made through the Council’s online payment service will normally be credited to your account up to two business days after they are made. Please bear this in mind, and also check you are paying the right amount.
- Any deliberate attempt to gain access to information you are not authorised to see may contravene the Computer Misuse Act 1990 and/or the GDPR and Data Protection Act 2018, and may incur criminal penalties.
- Accounts that contravene these terms and conditions may be closed without notice.
- We check and close inactive accounts routinely. We will inform you before your account is closed.
- If you close your account, we will endeavour to remove your personal information from our systems subject to our retention process.
Using your My Account details on other Council sites (My Account Single Sign On)
- The Council may enable you to use you username and password for other online services provided by the Council. When this occurs, only your name and e-mail address is shared with the authorised website.
- Your name and address may be saved by the authorised site, and may be displayed by the site, or used to pre-populate form fields on the site.
- Websites which make use of My Account Single Sign On are:
- The Council may use online services outside of the EU in order to prepare, send and analyse usage of e-mail newsletters.
- Where this occurs, the Council will adhere to strict security protocols and regulations to protect data and maintain compliance with the General Data Protection Regulation, and relevant guidance from the ICO.
How the Council uses social media
- The Council may monitor public social media accounts relevant to the Council or its work within the borough, which may involve saving messages that were posted publicly, or sent privately addressed to an account managed by the Council.
- If the Council is contacted publicly or privately through social media it may respond via the same social media platform. It may also share information sent by social media, including private messages, with necessary staff and partner organisations in order to provide the requested information or service.
Requesting access to your personal data
Under GDPR and the Data Protection Act 2018, you have the right to request access to information that we hold about you. To make a request for your personal information, please contact the Council’s Information Management Team at SAR@croydon.gov.uk.
If you have any questions or concerns about the way we collect, store or use your personal information, please contact in the first instance email@example.com.
Additional information what personal information we collect about you, how and why we use it, who we disclose it to, and how we protect it can also be found on the Council’s Corporate Privacy Notice at www.croydon.gov.uk/privacy.
For independent advice about data protection issues, contact the Information Commissioner’s Office (ICO) at www.ico.org.uk.
We reserve the right to amend this Privacy Notice at any time and will keep it under review. If we do make any changes, we will post the current version to our website at this address.