Page | 4
Who we are:
North Ayrshire Council is a local authority established under the Local Government etc. (Scotland) Act 1994. Its head
office is located at Cunninghame House, Friars Croft, Irvine, KA12 8EE, and you can contact our Data Protection Officer
by post at this address, by email at: firstname.lastname@example.org, and by telephone on 01294 310000.
Why do we need your personal information and what do we do with it?
You are giving us your personal information to allow us to determine whether your business is eligible to receive funding
from the Coronavirus Support Fund, and to administer that funding to your business. We also use your information to
verify your identity where required, contact you by post, email or telephone and to maintain our records. This local
authority is administering the Scottish Government Coronavirus Business Support Fund.
Legal basis for using your information:
You can find more details about this local authority are available on our website at www.north-ayrshire.gov.uk.
Processing your personal information is necessary for the performance of a contract with you (or to take steps to enter
into a contract with you). If you do not provide us with the information we have asked for then we will not be able to
provide this service to you.
Who do we share your information with?
We are legally obliged to safeguard public funds so we are required to verify and check your details internally for fraud
prevention. We may share this information with other public bodies (and also receive information from these other
bodies) for fraud checking purposes. We are also legally obliged to share certain data with other public bodies, such as
HMRC and will do so where the law requires this. We will also generally comply with requests for specific information
from other regulatory and law enforcement bodies where this is necessary and appropriate. Your information is also
analysed internally to help us improve our services. This data sharing is in accordance with our Information Use and
with our Records Management Plan approved in terms of the Public Records (Scotland) Act 2011.
Your information will be shared with the Scottish Government for the purposes of determining your application and
How long do we keep your information for?
We only keep your personal information for the minimum period amount of time necessary. Sometimes this time period
is set out in the law, but in most cases it is based on the business need. We maintain a records retention and disposal
schedule which sets out how long we hold different types of information for. You can view this on our website at
[WEBSITE] or you can request a hard copy from the contact address stated above.
Your rights under data protection law:
• access to your information – you have the right to request a copy of the personal information that we hold
• correcting your information – we want to make sure that your personal information is accurate, complete and
up to date. Therefore you may ask us to correct any personal information about you that you believe does not
meet these standards.
• Deletion of your information – you have the right to ask us to delete personal information about you where:
I. you think that we no longer need to hold the information for the purposes for which it was originally
II. you have a genuine objection to our use of your personal information – see Objecting to how we may use
your information below
III. our use of your personal information is contrary to law or our other legal obligations.
Objecting to how we may use your information – You have the right at any time to tell us to stop using your personal
information for direct marketing purposes.
Restricting how we may use your information – in some cases, you may ask us to restrict how we use your personal
information. This right might apply, for example, where we are checking the accuracy of personal information that we
hold about you or we are assessing the objection you have made to our use of your information. This right might also
apply if we no longer have a basis for using your personal information but you don't want us to delete the data. Where
this right is realistically applied will mean that we may only use the relevant personal information with your consent,
for legal claims or where there are other public interest grounds to do so.