Privacy Notice - Trading Standards

What this privacy notice is for

Our core data protection obligations and commitments are set out in the council’s primary privacy notice at  

This notice provides additional privacy information for:

  • Members of the public
  • Businesses/other organisations
  • Professional persons/bodies
  • Updating our privacy notices

We may update or revise our privacy notices at any time so please refer to the version published on our website for the most up-to-date details.

What we use your information for

We collect or obtain your personal information for the following purpose(s):

  • To monitor and ensure compliance with statutory requirements.
  • To investigate and enforce trading standards and related legislation
  • Provide updates on changes to legislation and other relevant information
  • To improve service performance.
  • To provide advice to businesses
  • Submission of statistical return (statutory or otherwise)
  • Intelligence dissemination

What categories of personal information we use

Personal information can be anything that identifies and relates to a living person. This can include information that when linked with other information, allows a person to be uniquely identified. For example, this could be your name and contact details.

The law treats some types of personal information as ‘special’ because the information requires more protection due to its sensitivity. This information consists of:

  • Racial or ethnic origin
  • Sexuality and sexual life
  • Religious or philosophical beliefs
  • Trade union membership
  • Political opinions
  • Genetic and bio-metric data
  • Physical or mental health
  • Criminal convictions and offences

In order to carry out these purposes we collect and obtain the following personal information shown in the following table:

Category of personal data

Special/ Sensitive

Personal/Business Details (e.g. name, address and contact details)


Demographic (financial information)


Criminal convictions and offences


Legal basis for processing

The legal basis for processing and or sharing your personal information under the UK GDPR is:

  • Public Task: the processing is necessary for us to perform duties under legislation or government regulations

Information sharing/recipients

We may share personal information about you with the following organisations/types of organisations:

  • Fire Service
  • Other departments of the Council
  • Providers of goods and services
  • Other Local Authorities
  • Police
  • HMRC
  • Central Government Departments and Executive Agencies
  • Third sector organisations or groups – RSPCA / Trade associations / Brand protection companies etc. 

As well as information collected directly from you, we also obtain or receive information from:

  • Other parts of Oldham Council
  • Central & Local Government
  • Other Local Authorities
  • Our partner organisations and other public bodies
  • Third party organisations and trade associations
  • Citizens Advice
  • Members of the public
  • Police
  • Fire Service

Data Transfers beyond European Economic Area

We do not transfer any of your personal information outside the European Economic Area (‘EEA’).

Automated Decisions

All the decisions we make about you involve human intervention.

Our Guide to Exercising Your Rights outlines the procedure to ask us for an automated decision to be reviewed by an appropriate officer. This can be found at

How long we keep your data

We will only keep your personal information for as long as the law specifies or where the law does not specify this, for the length of time determined by our business requirements.

Currently this is the current year plus six years thereafter.

Where can I get advice?

More information on how to seek advice in order to exercise your rights, raise a concern or complain about the handling of your personal information by the council can be found in the council’s privacy notice which can be found at