Fraud and compliance
This privacy notice explains how we process your personal data when you interact with us and information about your rights under data protection legislation.
We reserve the right to update this privacy notice. Changes apply as soon as they are published. We recommend that you visit this page regularly to find out about any updates that may have been made.
Page updated: 10 April 2024
Contact us
We are Maidstone Borough Council of Maidstone House, King Street, Maidstone, Kent, ME15 6JQ. We are the “data controller”. This means that we are responsible for deciding how we hold and use your personal data.
You can find us in the Information Commissioner’s register of organisations who have paid the data controller fee. Our reference number is Z4752882.
If you have any questions about this privacy notice or if you would like to exercise your rights, please contact the Data Protection Officer:
Maidstone Borough CouncilMaidstone
Kent
ME15 6JQ
Phone: 01622 602000
Email: dataprotectionofficer@maidstone.gov.uk
Your rights
You have rights under data protection legislation. Full details of these rights can be found on our data protection page.
We normally have to comply when you tell us that you want to exercise your rights. There are some legal exemptions. These will be explained if an exemption applies to your request.
There is no charge for you to exercise your rights. We may refuse your request or make a reasonable charge if your request is manifestly unfounded or excessive.
Before we deal with your request we may ask you for proof of your identity. After receiving your proof we will process your request as soon as possible. We will respond within one calendar month in most cases.
How to complain
If you are not happy with how we are processing your personal data, you can complain to us using the contact details above. If you are still unhappy after contacting us, you can contact the relevant competent supervisory authority - the Information Commissioner’s Office (ICO). You can contact the ICO:
Information Commissioner’s OfficeWycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Phone: 0303 123 1113
Website: Information Commissioner's Office (ICO)
Your obligations
It is important that you tell us if your personal data changes while you are using our services. This will mean that the data we hold about you is kept up to date and accurate.
Fraud and compliance services
Types of personal data we collect
- names
- addresses
- phone numbers
- e-mail addresses
- martial status
- vehicle registration
- Non-Domestic Rates (NNDR)
- benefits including housing benefits.
- financial information this includes credit checks.
- court proceedings
- employment
- date of birth
- National Insurance
- landlord and agent details
- electoral registration details
- we may use our Facebook page MBC Fraud and Compliance to assist in investigations
- we use data matching from Department of Work and Pensions
- we also use data matching from the Cabinet Office as part of the National Fraud Initiative
Where applicable and necessary to the investigation we also hold the following types of special category data:
- medical details including health information where it pertains to an exemption/discount or benefit and details of your doctor(s)
- disability details where it pertains to an exemption and/or discount or benefit
- racial or ethnic origin
Why we have your personal data and how we get it
We use your personal data to:
- conduct investigations into the application of housing benefits
- conduct investigations into the application of exemptions and discounts for Council Tax
- conduct investigations into the application of exemptions and discounts for small business rates and non-domestic rates
- identify if fraud has taken place and where necessary report this to the relevant authority/enforcement agencies
- undertake data matching to validate the information provided against records held by the Department of Work and Pensions and Cabinet Office
- undertake data matching against the electoral register
- check information available on Facebook via our MBC Fraud and Compliance page to assist in investigations
- initiate court proceedings arising from our investigations where necessary
- retain a record so we can audit, and quality assure our services, and to inform decision-making about our services
- plan and manage our services and to meet the requirements of external regulators
- to keep visitors and staff safe and secure, we use CCTV at our premises
We also use cookies and other analytic technologies to give you a better experience on our website and to improve the relevance of online advertising you see. For more information, please see our cookie notice.
Keeping your personal data
- data sent via e-mail will be kept for 7 years from the date received
- data arising from evidence and investigations will be kept for 6 years plus 1 year from the end of the service being provided to you
- CCTV footage will be kept for 30 days
Our lawful basis
Our lawful basis to process your personal data is both legal obligation and in the public interest. Our lawful basis for processing special category data is substantial public interest. Dependent on the investigation, our lawful basis is in accordance with the following legislation:
- Local Government Finance Act 1992 as amended
- Council Tax Administration and Enforcement Regulations 1992
- Local Government Finance Act 1988 as amended
- Non-Domestic Rates Regulations
- Non-Domestic Rates Act 2023
- Local Audit and Accountability Act 2014
Our lawful basis to capture CCTV images of members of the public is public interest.
Sharing your personal data
Your personal data will only be shared with other organisations when necessary and it will always be shared securely. We will only share your personal data if the law lets us, and we always aim to share the minimal data as is necessary.
We share your personal data with:
- Kent Intelligence Network
- other local authorities
- Central Government, including Cabinet Office and Department of Work and Pensions
- police
- housing associations
- credit agencies
- Destin
- Intec
- National Anti-Fraud Network – NAFN
- Locta
- Retriever
- Electoral Registration Officer
We may also share personal data with anti-fraud and law enforcement agencies for the prevention and detection of crime.
Storing your personal data
The council stores your personal data in the UK. We do not transfer your personal data to any other countries including countries in the EU and EEA (European Economic Area).
Third parties may transfer your personal data outside the UK. Please refer to their privacy notices for more details.