Boost Business Lancashire

In order to comply with the UK General Data Protection Regulation (UK GDPR), where personal data relating to a data subject is collected, Lancashire County Council would like to provide you with the following details.

Identity and contact details of the data controller

  • Lancashire County Council, PO Box 78 County Hall, Fishergate, Preston, Lancashire, PR1 8XJ

Contact details of the data protection officer

  • Our Data Protection Officer is Paul Bond. You can contact him at DPO@lancashire.gov.uk or Lancashire County Council, PO Box 78 County Hall, Fishergate, Preston, Lancashire, PR1 8XJ

Purposes for processing

Boost comprises of a partnership between Lancashire County Council, Growth Lancashire, Community and Business Partners, Orvia, Winning Pitch and Enterprise4All supported by European Regional Development Fund (ERDF).

Boost Business Lancashire is led by Lancashire County Council and in order to comply with the UK General Data Protection Regulation (UK GDPR), where personal data relating to a data subject is collected, Lancashire County Council would like to provide you with the following details.

Boost’s mission is to serve both new and existing businesses to grow job opportunities and skills across the county.  Boost provides business support and economic development services.  Our team of business advisors offer impartial advice to help businesses realise their potential either through specialist in-house support or through our extensive network of public and private sector partners.

Category of personal data being processed

  1. Personal data (information relating to a living, identifiable individual)
  2. Special category personal data (racial, ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation)

Legal basis for processing personal data

The legal basis for processing your personal data, in accordance with the UK GDPR is:

  1. Consent: the individual has given clear consent for you to process their personal data for a specific purpose.

Legal basis for processing special categories of personal data

The legal basis for processing your special categories of personal data, in accordance with the UK GDPR is:

  1. The data subject has given explicit consent to the processing of this personal data.

Recipients of the data

Boost partners:

Blackburn with Darwen Council
Burnley Borough Council
Blackpool Borough Council
Chorley Council
Hyndburn Borough Council
Lancaster City Council
Pendle Borough Council
Preston City Council
Ribble Valley Borough Council
Rossendale Borough Council
South Ribble Borough Council
West Lancashire Borough Council
Wyre Council

European Structural Investment Fund (ESIF) partners:

Lancashire Skills Hub
University of Central Lancashire
Lancaster University
The Vedas Group
Edge Hill University
Innovation Agency
The Growth Company
Chamber of Commerce East Lancashire
Northern Automotive Alliance
NW Aerospace Alliance
University of Sheffield
People Plus

Information we share

Each Boost partner organisation will only share the necessary and relevant information required to provide your business with help, advice and relevant funding opportunities.

  • Company name
  • Company address
  • Company contact details
  • Company personnel contact details
  • Nature of business
  • Individual client name
  • Individual client contact details
  • Details of the client journey/hours spent
  • Ethnicity of business owner
  • Disability of business owner
  • Age of business owner
  • D.O.B
  • Gender
  • Employment status
  • Nature of business enquiry
  • Notes relating to business enquiry
  • Outcome of any grant fund awarded including amount
  • Outcome of any job creation including details of the job (ethnicity, gender)
  • Turnover
  • Gross Value Added (GVA)

This information is required to monitor external funding such as the European Regional Development Fund. Funding bodies require details of the clients that have been assisted by partners as evidence for claims.

Data relating to the client journey and the hours the client has spent working with the project is required to comply with the State Aid De Minimis regulations for monitoring that the client hasn’t been supported above the threshold of 200,000 Euros in any three year period. This legislation is enforced across all Government or European funded business support projects.

The benefits of information sharing includes giving all partners involved a clearer picture of the clients’ requirements and tracking which services the client has received. Failure to appropriately share information would result in clients having to repeat their requirements to various organisations within the partnership. This would lead to the partnership not being able to track the allocated funding and support that the client has received from other partners.

Any transfers to another country

We will always process as little personal data as is necessary to meet the purpose of the processing activity. We will inform you where your personal and sensitive data will be stored and of the additional safeguards that we have taken to ensure compliance with UK GDPR and data protection legislation which applies within the country where your personal and sensitive information is held, should this be outside of the UK.

Retention periods

The Boost Partner will only store information received from their involvement with you for as long as is legally required or in situations where there is no legal retention period they will follow established best practice. At the end of the retention period electronical data will be deleted and any physical files will be confidentially disposed of.

File Type Description  Security Retention Period
Email Emails held in Outlook that haven't been exported or moved elsewhere. Encrypted used when emailing personal data to partners. Retained in accordance with appropriate internal retention guidelines
Data record (fields as listed above under “What data will be shared”) Database records containing the fields required by funding provider ERDF Data held on a password protected system which is regular backed up ERDF records need to be retained until at least 31st December 2033.
Hard copy file Forms  and other paperwork regarding your support under the ERDF funded scheme Files are mainly stored securely in locked cabinets and due care and attention is taken to avoid unlawful or unauthorised disclosure while in use ERDF records need to be retained until at least 31st December 2033.

Your rights

You have certain rights under the UK General Data Protection Regulation (UK GDPR), these are the right:

  • to be informed via Privacy Notices such as this.
  • to withdraw your consent. If we are relying on your consent to process your data then you can remove this at any point.
  • of access to any personal information the council holds about yourself. To request a copy of this information you must make a subject access request in writing. You are entitled to receive a copy of your personal data within 1 calendar month of our receipt of your subject access request. If your request is complex then we can extend this period by a further two months, if we need to do this we will contact you. You can request a subject access request, either via a letter or an email to Information Governance Team, address below.
  • of rectification, we must correct inaccurate or incomplete data within one month.
  • to erasure. You have the right to have your personal data erased and to prevent processing unless we have a legal obligation to process your personal information.
  • to restrict processing. You have the right to suppress processing. We can retain just enough information about you to ensure that the restriction is respected in future.
  • to data portability. We can provide you with your personal data in a structured, commonly used, machine readable form when asked.
  • to object. You can object to your personal data being used for profiling, direct marketing or research purposes.
  • in relation to automated decision making and profiling, to reduce the risk that a potentially damaging decision is taken without human intervention.

If you want to exercise any of these rights then you can do so by contacting:

Information Governance Team
Lancashire County Council
PO Box 78
County Hall
Preston
PR1 8XJ 

Or email: dataprotection@lancashire.gov.uk

To ensure that we can deal with your request as efficiently as possible you will need to include your current name and address, proof of identity (a copy of your driving licence, passport or two different utility bills that display your name and address), as much detail as possible regarding your request so that we can identify any information we may hold about you, this may include your previous name and address, date of birth and what council service you were involved with.

Further information

If you would like more information concerning Boost and their work then please contact info@boostbusinesslancashire.co.uk

If you wish to raise a complaint on how we have handled your personal data, you can contact DPO@lancashire.gov.uk

If you are not satisfied with our response or believe we are processing your personal data not in accordance with the law you can complain to the Information Commissioner’s Office (ICO).