Energy Bills Support Scheme (EBSS) Alternative Funding privacy statement

This notice meets the requirements of

The notice explains how we will process and use personal data collected for EBSS Alternative Funding scheme. This scheme comes under Articles 13 and 14 of the UK GDPR.

Applications to EBSS Alternative Funding are for households who:

did not receive the original Energy Bill Support Scheme payment automatically
those without their own electricity supply
those without a direct relationship with the electricity supplier

Applications for EBSS are made direct to The Department for Business, Energy and Industrial Strategy (BEIS). BEIS will make the first application assessments and we will:

complete application checks
make payments
inform BEIS of the outcome of each application

BEIS and local authorities are the independent data controllers for your data. This privacy notice only relates to how we use your data for this service. It does not cover BEIS and how they use your data. You should read BEIS privacy notice (opens new window) to understand how they use your data.

What personal data will be processed?

your name, where you live, date of birth, postcode and address, including when using the address lookup function
your email and phone number when you have provided them
bank account details to help us identify you and to process payment
questions or feedback you leave, including your email address if you contact us
evidence of power of attorney or other legal evidence to act on the applicant's behalf

What is the purpose?

to support around 1% of households that will not receive £400 automatically through EBSS.
to conduct financial checks on payments. This includes:
- assurance and the prevention
- investigation
- detection or prosecution of criminal offences including fraud

Why is my personal data collected?

to carry out counter fraud checks
to reduce the risk of fraud and payment errors
to verify your identity
to confirm your entitlement to energy bill support
to make and manage your payments
to send notifications about your application

Legal basis of processing

The lawful basis we rely on for processing the information is Article 6 of the UK GDPR:

your consent
we have a legal obligation
we need it to perform a public task

Special category data is being processed under Article 9 UK GDPR:

your consent
processing is necessary for reasons of substantial public interest
processing is necessary for provision of health or social care treatment

Will my data be shared with any partner organisations?

We'll share the following data with EBIS:

your name, address, date of birth, postcode and address
bank account details
documents you upload as proof of address
details of any contact you have with us about the EBSS
Council Tax account details. Primarily, but not limited to:
- liable person
- period of liability
- address of liability
- discounts or exemptions and bank details held on your council tax account

This is to:

confirm your identity
process payment
prevent, detect and investigate fraud and errors

We've a data sharing agreement with EBIS so that we can deliver this scheme. Our data sharing agreement covers:

administration
delivery
reporting
monitoring
evaluation
fraud prevention

This may also include an assessment of your liability for council tax. This is on the property you have stated as your sole and main residence on the application.

We'll share your data with other government bodies if we are required to do so by law. For example, by court order, or to prevent fraud or other crime.

How long will we keep it for?

We'll only keep your personal data for as long as required to support service:

delivery
evaluation
scrutiny

These data will be securely deleted no later than seven years after collection. This is in line with our department policy.

My rights

You have the right to:

information about how your personal data are processed
request a copy of that personal data
request that any inaccuracies in your personal data are rectified without delay
request that any incomplete personal data are completed. Including by means of a supplementary statement
request that your personal data are erased. If there is no longer a justification for them to used
request that the processing of your personal data is restricted. This is in certain circumstances (for example, where accuracy is contested)
object to the processing of your personal data. For example where it is processed for direct marketing purposes
object to the processing of your personal data. This includes the right to object automated processing

How will my data be stored?

We will securely store your application on:

case management systems as required
revenues, benefits and finance systems

Any information transferred from central government will have retention period of up to seven years after closure of the scheme.

Further information

If you've any questions about your data, privacy or the way the Council uses personal information, contact our data protection team.

If you believe we're not processing your data lawfully you can complain to the Information Commissioner's Office.

Changes to this policy

We may change this privacy policy. In that case, the 'last updated' date at the bottom of this page will also change. Any changes to this privacy policy will apply to you and your data immediately.

We'll take reasonable steps to let you know if these changes affect how we process your personal data.

Last updated: 22 February 2023