LUIS Privacy Notice

Livestock Information Ltd – Ear Tag Allocation System (LUIS) Privacy Notice

date of last review January 2024

Introduction

The UK General Data Protection Regulation provides individuals (known as data subjects) with the ‘Right to be Informed’. This means organisations that collect, store and use (or ‘process’) your data, are legally required to provide information to which you are entitled to.

Privacy notices are designed to give you greater control of your personal data, as well as encourage those processing your data to act transparently and ensure your data’s confidentiality integrity and availability.

At Livestock Information Ltd we take the privacy and security of your personal information very seriously.

We commit to protect any personal information you share with us, or that we legitimately receive from a partner organisation.

We will be transparent when we process your personal data and act in accordance with data protection legislation.

We will never sell your personal information to third parties.

If you have provided Livestock Information Ltd with your personal data and have not received or been directed towards our privacy notice at the point of collection, please contact data.protection@livestockinformation.org.uk to enable the Data Protection Officer to rectify this.

LI Ltd is working collaboratively with industry and Government to develop a world-leading multi-species livestock information service for cattle, sheep, pigs, goats, and deer. In time, the Livestock Information Service aims to become an important national tool that enables industry and government to:

Better control chronic endemic livestock diseases
Terminate exotic disease outbreaks quickly and effectively.
Drive positive changes in productivity and sustainability.
Develop a competitive trade advantage by building trade partner and consumer confidence in the provenance of British meat and livestock products.

You can find out more about us at: www.livestockinformation.org.uk

This Privacy Notice applies to LI Ltd processing of personal data related to the Ear Tag Allocation System, for which LI Ltd is a data ‘processor’, receiving instruction from Defra (The Department for Environment, Food and Rural Affairs) who complete the role of a data ‘controller’ for this activity.

2. Data we collect

“Personal Information” is information that identifies you as an individual or relates to an identifiable individual. The following data fields are collected for the Ear Tag Allocation System and are shared with LI Ltd:

Ear tag manufacturer contact details, including business email addresses identifying employees.
Flock / herd identifiers, linking livestock and their keeper(s).
Keeper contact details.
County Parish Holding (CPH) numbers.
LUIS website users,
- your IP address, operating system, web browser type and version are collected. This is to ensure the proper functioning and security of our website.

3. How we obtain your data

We obtain personal data from DEFRA to validate ear tag orders
We obtain personal data from ear tag manufactures to process ear tag orders

4. Our Lawful basis

Public Task

As an arms-length body of Defra processing personal information is necessary in the exercise of the official authority of Defra to supply livestock traceability under statute, by operation of the following regulations and laws.

UK Laws

Retained EU Laws (REUL)

EU Regulation 1760/2000 (Bovine) Traceability Regulation (As amended)
EC Regulation 1082/2003 (Bovine) identification and registration of bovine animals
EC Regulation 21/2004 (Ovine, Caprine) identification and registration

5. How we use your data

Livestock Information Ltd collect and use personal information for the purpose of delivering the Livestock Information Service (LIS).

The statutory element of LIS is livestock traceability which Defra is required to supply under statute, by operation of EU Regulation 1760/2000, EU Regulation 21/2004, and EU Directive 2008/71/EC.

Animal identification through tagging is a vital element of the LIS and the Ear Tag Allocation System is a component of this process by validating tag numbers, following requests from the ear tag manufacturers.
To do this, some of your personal information will be shared with LI Ltd, including who you are and what type of tag you are ordering.

For https://luis.livestockinformation.org.uk/ website users, we collect your personal data to ensure the proper functioning and security of our website. For information on cookies, see our website cookie notice.

6.Who we share your data with

As part of the Livestock Information Service, we may share your data for regulatory and animal health purposes with:

The Animal & Plant Health Agency (APHA)
Agriculture and Horticulture Development Board (AHDB)
Food Standards Agency (FSA),
The Rural Payments Agency (RPA),
The Department for Environment, Food and Rural Affairs (DEFRA) or its equivalents in the Devolved Administrations or their appointed agents.
Universities and institutions conducting research on animal diseases, monitor outbreaks, and develop strategies for prevention and control.
Trading Standards
Ear Tag Manufactures

We will never sell your personal information to third parties or release your personal information to any company outside of the Livestock Information Ltd for their mailing or marketing purposes.

Where required, we will share personal data to respond to requests from courts or law enforcement agencies.

7. Data retention

We retain your personal information for no longer than necessary for the purpose it was obtained unless a longer retention period is required or permitted by law.

In the event we have no lawful basis for processing your personal data, it will be securely disposed of.
Animal tag numbers will be retained indefinitely to prevent reissue and will only be used for tag performance statistics.

If you would like further information on our specific retention periods, please contact us using the details provided below.

8. How we keep your information safe

We ensure that there are appropriate and proportionate controls in place to protect your personal information in the following ways.

We use encryption, where appropriate, and we store data within Livestock Information Ltd.’s secure network and cloud environment.
We limit and control who has access to the personal information we hold through administrative, technical, and physical access controls.
Where we use third party suppliers or partners to process personal data, we put a contract in place that sets out our expectations and requirements, especially regarding how they manage and securely transfer the personal information and fully comply with all applicable data protection legislation.
Livestock Information Ltd.’s own systems and storage are within the UK and EEA. Some of our suppliers or partners process personal information on our behalf outside the EEA, where a recognised data security protocol and safeguards are in place between the UK and that country.
I Limited employ a data protection officer monitoring compliance with GDPR, upholding data subject rights and monitoring processing activity.

9. Your rights

By law you have certain rights over your personal data that we hold about you and these are summarised below.

Some of the rights are complex and not all the detail is included in our summaries, you should therefore read the relevant guidance on the Information Commissioner’s Office website:https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/.
To enquire about exercising any of these rights please contact the Data Protection Officer using the details below “How to contact us”.
We may need to verify your identity before implementing your request, for instance through photographic ID.
Not all rights under the UK GDPR are absolute and your request may be denied where there are grounds such as an exemption under the Data Protection Act 2018.

Right to Access (or Right to Know):

Data Subjects have the right to request access to their personal data held by an organisation. This includes information about how and why their data is being processed.
You (the data subject) have the right to ask for a copy of the personal information held about you – known as a Data Subject Access Request (DSAR).
We are required to respond within one month, with extensions to that deadline only being applicable in extraordinary circumstances.
There is no charge to deal with your request and you can make a subject access request verbally or in writing.
Anyone exercising the ‘right of access’ on your behalf must have your explicit consent to do so. Processing related to your ‘right of access’ is a statutory requirement under the UK GDPR and the Data Protection Act 2018.

Right to Rectification:

Individuals can request corrections or updates to inaccurate or incomplete personal data.

Right to Erasure (or right to be Forgotten):

Individuals have the right to request the deletion of their personal data under certain circumstances, such as when the data is no longer necessary for the purpose for which it was collected.
Please note that the personal information we hold for ‘public task’ purposes is not eligible for erasure.
Personal information obtained through consent is eligible and each request we receive will be treated on a case-by-case basis. It should be noted that we will retain enough information to ensure the individual is not contacted again.
On occasion, some data may also have to be retained for legal record-keeping purposes and we will always inform you when this is the case.

Right to Restriction of Processing:

Individuals can request a temporary halt to the processing of their data, usually when they contest the accuracy of the information or when the processing is unlawful.

Right to Data Portability:

Individuals can request their personal data in a structured, commonly used, and machine-readable format, and have the right to transmit it to another controller.

Right to Object:

Individuals can object to the processing of their personal data based on legitimate interests or for direct marketing purposes.

Rights related to Automated Decision Making and Profiling:

Individuals have safeguards against solely automated decisions, including profiling, that have legal or significant effects on them.
No automated decision-making or profiling is being completed by Livestock Information Ltd at this time. This privacy notice will be amended immediately should this change.

Right to Withdraw Consent:

Where processing is based on consent, individuals have the right to withdraw that consent at any time.
Livestock Information Ltd uses consent for the delivery of information to stakeholders and for participation in photography and recording. Your consent will be stored, and re-consent will be sought only where the processing is still deemed necessary and lawful.

Right to be Informed:

Individuals have the right to be informed about how their data is collected, used, and processed. This right encompasses the obligation of organizations to provide clear and concise privacy notices.

Right to Lodge a Complaint:

Individuals have the right to lodge a complaint with a supervisory authority if they believe their data protection rights have been violated.
Please contact the Data Protection Officer in the first instance. If you’re not satisfied and wish to complain the independent supervisory authority in the UK is the Information Commissioner’s Office (ICO) information can be found at ico.org.uk/global/contact-us/

10. How to contact us

General queries info@livestockinformation.org.uk

Data Protection queries data.protection@livestockinformation.org.uk

You can write to us at the following address:

FAO LI Data Protection Officer

Livestock Information Ltd

Seacole Building

2 Marsham Street

London

SW1P 4DF

We may change this Privacy Notice from time to time. The effective date of this Privacy Notice, given at the beginning, indicates the last time this Notice was revised.

If we make any significant changes in the way we treat your personal information we will communicate this to you.

Document Approval

Version	4.0
Last Updated By	Danny Meaney, Data Protection Officer
Last Updated date	January 2024
Effective From	January 2024
Next Review Date	February 2025