Disabled Parking Badges Privacy Notice

This Privacy Notice sets out how Powys County Council collects, uses and shares your personal information for the purposes of delivering the Disabled Blue Badge service.

Who are we and how are we contacted?

Powys County Hall

Spa Road East
Llandrindod Wells
Powys
LD1 5LG

Email: bluebadges@powys.gov.uk

Phone: 01597 827466 / 0345 6027036

Data Protection Officer (DPO):

The DPO for PCC and Powys Schools can be contacted via email at information.compliance@powys.gov.uk.

What personal information do we process about you?

As part of the Disabled Blue Badge Service, we will process the following information about you:

• Contact detail such as name, address, telephone number, property, Driver's licence and email addresses.
• Identifying details, including date of birth and national insurance number.
• Financial information, including Benefits received, Higher rate mobility allowance, Personal Independence payments
• Family information including ages, dependents, marital status.
• Information about the subject matter's health and medical details.
• Photographic ID
• Armed forces details
• Supporting letter from a Macmillan nurse
• Medical records

The purposes for which we process your personal information:

• Planning, preparing, and delivering Disabled Blue Badge services to support your independence and safety. This will include processing application forms, decision making on qualifying, reviewing services provided to ensure they meet high standards.
• Conducting research to evaluate and improve service quality, effectiveness, and impact.
• Investigating complaints or incidents.
• Helping you access our services via telephone, email, or our website.
• Storing your information within a secured computer system
• In conjunction with this our Library service can also help with capturing the details and assisting in the collection of information/documentation that is forwarded to our department to start the process.
• Once the Information is received it can fall under various categories e.g.: Automatic Qualifier, (e.g., DLA - Higher rate) or checked against our social care records for evidence from a professional or referred to the GP service.
• We do this to ensure we gather all the relevant data required to process your application and ensure you receive the best service possible
• Personal data isn't being used outside of the European Economic Area (EEA).
• Automated decision-making (including profiling) isn't being used.

Who might we share your personal information with?

Whilst information gathered during a call/processing action may be shared with other Council services or external organisations to assist in the resolution of the subject matter's enquiry, it will remain confidential and will only be shared with the following, where reasons for sharing is appropriate or where the law requires us to do so:

• Other Council services who work with the Contact Centre, with the intention to assist in resolving a dispute or complaint. e.g., Social Care, enforcement,
• The Police, to assist in the resolution of a criminal matter.
• Other organisations involved in the care of the subject matter (i.e., Social Services/Health care professionals, GP's etc.) 
• Other Councils to check records.
• Welsh Government (WG)
• National Fraud Initiative Audit Office in line with Powys County Council SWAP Internal Audit Services and our Income and Awards service.

Where might we collect your personal data, if it isn't provided by you?

• Information provided by a family member or another member of the public (e.g., Queries/concern)
• Information provided by an elected Councillor on behalf of their constituent.
• Information provided by other Council officers/services that liaise with the Contact Centre in the interests of its customers, or the Council itself e.g., Enforcement, social care, Fraud, Income and Awards
• Information provided by other organisations (e.g., Emergency Services, health board, other council's, DWP (Searchlight service) regarding an individual.

The Legal Basis (What allows us to process your personal data):

We will process your personal information in line with the UK General Data Protection Regulation (GDPR), which requires us to indicate which legal basis it is relying on in order to process your personal data.

To support the processing of your personal data, we are relying on our obligations to perform a public task in the wider public interest when you apply or agree to have a Disabled Badge.

For the processing of special category (sensitive) personal information, we rely on the following conditions:

• Reasons of substantial public interest
• Health or social care
• Public health

How long will we retain your personal information for?

Hard Copy Application forms are inputted and then destroyed after 3 months from the receipted date. Retention periods are 4 years for all electronically stored Information Once this period of retention has expired, records will be deleted and no longer retrievable.

Further Information:

For further information about how we process your personal data, the rights you are entitled to exercise such as the right of access, and the commissioner's contact details, please visit our overarching privacy notice here: Data Protection and Privacy

This Privacy Notice was updated: May 2025