This page explains how Cheshire Constabulary obtains, holds, uses and discloses information about people (their personal data). It explains the steps we take to ensure that it is protected, and also describes the rights individuals have in regard to the handling of their personal data by Cheshire Constabulary
The use and disclosure of personal data is governed in the United Kingdom by the Data Protection Act 2018 (the Act) and the General Data Protection Regulation (GDPR).
The Chief Constable of Cheshire Constabulary is a ‘data controller’ for the purposes of the Act. As such is obliged to ensure that Cheshire Constabulary handles all personal data in accordance with the Act.
Cheshire Constabulary obtains, holds, uses and discloses personal data for two broad purposes:
1. The Policing Purpose, which includes:
- The prevention and detection of crime
- Apprehension and prosecution of offenders
- Protecting life and property
- Preserving order
- Maintenance of law and order
- Rendering assistance to the public in accordance with force policies and procedures
- Any other duty or responsibility of the police arising from common or statute law.
2. The provision of services to support the Policing Purpose, which include:
- Staff administration, occupational health and welfare
- Management of public relations, journalism, advertising and media
- Management of finance
- Internal review, accounting and auditing
- Property management
- Insurance management
- Vehicle and transport management
- Payroll and benefits management
- Management of complaints
- Management of information technology systems
- Legal services
- Information provision
- Licensing and registration
- Pensioner administration
- Research, including surveys
- Performance management
- Sports and recreation
- System testing
- Health and safety management.
In order to carry out the purposes described in section 1 (above), Cheshire Constabulary may obtain, use and disclose (see section 7) personal data relating to a wide variety of individuals including the following:
- Staff including volunteers, agents, temporary and casual workers
- Complainants, correspondents and enquirers
- Relatives, guardians and associates of the individual concerned
- Advisers, consultants and other professional experts
- Offenders and suspected offenders
- Former and potential members of staff, pensioners and beneficiaries
- Any other individuals necessarily identified in the course of police enquiries and activity.
Cheshire Constabulary will only use appropriate personal data necessary to fulfil a particular purpose or purposes
In order to carry out the purposes described in section 1 (above) Cheshire Constabulary may obtain, use and disclose (see section 7) personal data relating to or consisting of the following:
- Personal details such as name, address and biographical details
- Family, lifestyle and social circumstances
- Education and training details
- Employment details
- Financial details
- Goods or services provided
- Racial or ethnic origin
- Political opinions
- Religious or other beliefs of a similar nature
- Trade union membership
- Physical or mental health conditions
- Sexual orientation
- Offences (including alleged offences)
- Criminal proceedings, outcomes and sentences
- Physical identifiers including DNA, fingerprints and other genetic samples and photographs
- Sound and visual images
- Licenses or permits held
- Criminal intelligence
- References to manual records or files
- Information relating to health and safety
- Complaint, incident and accident details.
Cheshire Constabulary will only use appropriate personal data necessary to fulfil a particular purpose or purposes.
In order to carry out the purposes described in section 1, Cheshire Constabulary may obtain personal data from a wide variety of sources, including:
- Other law enforcement agencies
- HM Revenue and Customs
- International law enforcement agencies and bodies
- Licensing authorities
- Legal representatives
- Prosecuting authorities
- Defence solicitors
- Security companies
- Partner agencies involved in crime and disorder strategies
- Private sector organisations working with the police in anti-crime strategies
- Voluntary sector organisations
- Approved organisations and people working with the police
- The Independent Police Complaints Commission
- Her Majesty’s Inspectorate of Constabulary
- The Police and Crime Commissioner
- Central government, governmental agencies and departments
- Emergency services
- Individuals themselves
- Relatives, guardians or other persons associated with the individual
- Current, past or prospective employers of the individual
- Healthcare, social and welfare advisers or practitioners
- Education, training establishments and examining bodies
- Business associates and other professional advisers
- Employees and agents of Cheshire Constabulary
- Suppliers, providers of goods or services
- Persons making an enquiry or complaint
- Financial organisations and advisers
- Credit reference agencies
- Survey and research organisations
- Trade, employer associations and professional bodies
- Local government
- Voluntary and charitable organisations
- Ombudsmen and regulatory authorities
- The media
- Data processors working on behalf of Cheshire Constabulary
- Cheshire Constabulary may also obtain personal data from other sources such as its own CCTV and other video recording systems such as Body Worn Video and Unmanned Aerial Vehicle, or correspondence.
Cheshire Constabulary will handle personal data in accordance with the Act. In particular we will ensure that personal data is used fairly and lawfully with appropriate justification. We will strive to ensure that any personal data used by us or on our behalf is of the highest quality in terms of accuracy, relevance and adequacy and is not excessive. We will strive to ensure that personal data is kept as up to date as required, is protected appropriately, and is reviewed, retained and securely destroyed when no longer required. We will respect individual's rights under the Act (see section 8 below).
Cheshire Constabulary takes the security of all personal data under our control very seriously. We comply with the relevant parts of the Act relating to security, and comply with the Association of Chief Police Officers’ Community Security Policy and relevant parts of the ISO27001 Information Security Standard.
We will ensure that appropriate policy, training, technical and procedural measures are in place, including audit and inspection, to protect our manual and electronic information systems from data loss and misuse. We will only permit access to them when there is a legitimate reason to do so, and then under strict guidelines as to what the personal data can be used for. These procedures are continuously managed and enhanced to ensure up-to-date security.
Cheshire Constabulary may disclose personal data to a wide variety of recipients in any part of the world, including those from whom personal data is obtained (see Section 4). This may include disclosures to other law enforcement agencies, partner agencies working on crime reduction initiatives, partners in the Criminal Justice arena, Victim Support, and to bodies or individuals working on our behalf such as IT contractors or survey organisations. We may also disclose to other bodies or individuals where necessary to prevent harm.
Disclosures of personal data will be made on a case-by-case basis, using the appropriate data for the purpose and circumstances, and with the necessary controls in place.
Some of the bodies or individuals to which we may disclose personal data are situated outside of the European Union. Some of which do not have laws that protect data protection rights as extensively as in the United Kingdom. If we do transfer personal data to such territories, we will take the proper steps to ensure that the data remains adequately protected as required by the Act.
Cheshire Constabulary will disclose personal data to other bodies or individuals when required to do so by, or under, any act of legislation, by any rule of law, and by court order. This may include disclosures to the Child Support Agency, the National Fraud Initiative, the Home Office and to the Courts.
Cheshire Constabulary may also disclose personal data on a discretionary basis for the purpose of, and in connection with, any legal proceedings or for obtaining legal advice.
Individuals have various rights enshrined in the Act;
- Subject Access - A copy of your personal data
- Erasure or Restriction
- Automated Decision Making and Profiling
- Lodge a complaint with the ICO
- Withdraw consent
Further detail can be found by selecting the above rights or by visiting the Data Protection page.
Cheshire Constabulary only keeps personal information as long as is necessary for the particular purpose or purposes for which it is held.
The NPCC Review Retention and Disposal Schedule 2017 provides the minimum standards for the retention and disposal most of police records. Other records containing personal information relating to intelligence, custody, crime, firearms, child abuse investigations, domestic violence will be retained in accordance with the Management of Police Information 2006. Records held by the Professional Standards Department (PSD) are held in accordance with the PSD Retention Schedule.
Personal information which is placed on the Police National Computer is retained, reviewed and deleted in accordance with the agreed national retention period which is subject to period change.
Cheshire Constabulary may monitor, record and retain telephone calls, texts, emails and other electronic communications to and from the force in order to deter, prevent and detect inappropriate or criminal activity, to ensure security, and to assist the purposes described in section 1.
Cheshire Constabulary does not place a pre-recorded ‘fair processing notice’ on telephone lines that may receive emergency calls (including misdirected ones) because of the associated risk of harm that may be cause by the delay in response to the call.
Cheshire Constabulary takes great care to ensure that personal data is used appropriately to protect individuals and secure and maintain individuals’ trust and confidence in the force.
Any individual with concerns over the way Cheshire Constabulary handles their personal data may contact our Data Protection Officer. Details of how to get in contact are listed below:
The Data Protection Officer, Cheshire Constabulary HQ, Clemonds Hey, Oakmere Road, Winsford, CW7 2UA
Telephone: 01606 362384
Email: [email protected]
- 'Personal Data' is a term used in the Data Protection Act 2018 and General Data Protection Regulation (GDPR). In practical terms it means information handled by Cheshire Constabulary that relates to identifiable living individuals. It can include intentions and expressions of opinion about the individual. The information can be held electronically or as part of paper records, and can include CCTV footage and photographs. For ease of readers this document refers to the handling, use, holding etc of personal data. The term ‘processes’ effectively covers any usage of personal data.
- This page is designed to help satisfy the ‘transparency’ requirements as required by the Data Protection Act 2018 and General Data Protection Regulation (GDPR) and may be regarded as a generic over-arching ‘Privacy Notice’ for the Cheshire Constabulary. Additional more specific Privacy Notices may appear in other circumstances such as on forms, force policies, email footers, or CCTV signage.
- Cheshire Constabulary and the Police and Crime Commissioner for Cheshire use a range of methods, including face-to-face interviews, telephone and postal surveys, both to identify community priorities and to establish public satisfaction levels so our performance and effectiveness can be evaluated and improved. Depending on the purpose of the survey, the questionnaires may be targeted at members of the public chosen randomly according to accepted statistical principles, or specifically at victims or witnesses of crime or other incidents. Cheshire Constabulary, like many police forces, uses a private company to undertake some surveys on our behalf with strict controls to protect the personal data of those involved.