Livestock Information service Privacy notice
DATE OF LAST REVIEW 16 FEBRUARY 2022
Introduction
The UK General Data Protection Regulation provides individuals (known as data subjects) with the ‘Right to be Informed’. This means organisations that collect, store and use (or ‘process’) your data, are legally required to provide information to which you are entitled to. Privacy notices are designed to give you greater control of your personal data, as well as encourage those processing your data to act transparently and ensure your data’s confidentiality integrity and availability.
At Livestock Information Ltd we take the privacy and security of your personal information very seriously. We commit to protect any personal information you share with us, or that we legitimately receive from a partner organisation. We will be transparent when we process your personal data and act in accordance with data protection legislation. We will never sell your personal information to third parties.
If you have provided Livestock Information Ltd with your personal data and have not received or been directed towards our privacy notice at the point of collection, please contact data.protection@livestockinformation.org.uk to enable the Data Protection Officer to rectify this.
Contents:
- Scope
- Who we are and how you can contact us
- What we use personal information for
- Our lawful bases for processing personal information
- Where we collect information about you from
- What personal information we collect
- Sharing of your personal information to third parties
- How we keep your personal information safe
- How we keep your information up to date
- How long we retain personal information
- Your choices and your rights
- Changes to this Privacy Notice
- Scope
This Privacy Policy only applies to Livestock Information Ltd’s processing activities, including its websites and user interfaces.
Where links are provided from our websites to third party websites or partnership websites, Livestock Information Ltd is not responsible for those websites and a link to them does not imply endorsement.
- Who we are and how you can contact us
Livestock Information Limited is a company limited by guarantee registered in England no 12111174.
Livestock Information Ltd is a subsidiary of The Agriculture and Horticulture Development Board (AHDB) and is 51% owned by AHDB, with Defra owning the remaining 49%.
Livestock Information Ltd is working collaboratively with industry and Government to develop a world-leading multi-species livestock information service for cattle, sheep, pigs, goats and deer to be implemented from late 2020. Defra will be funding the statutory elements of the Livestock Information Service, while AHDB will manage the creation of new value-adding products which will drive wider benefits for the meat and livestock sector. More effective collection and use of livestock information through multi-species livestock tracing can ensure greater resilience and responsiveness to disease and improved food safety. The ability to connect data across the UK livestock sector has the potential to produce on-farm and sector-wide productivity and efficiency improvements. You can find out more about us at https://ahdb.org.uk/LIP.
If you have a query about what we do you can contact us at info@livestockinformation.org.uk.
For data protection queries, please contact David Parkes, Data Protection Officer (DPO) data.protection@livestockinformation.org.uk.
The independent supervisory authority in the UK to uphold information rights is the Information Commissioner’s Office (ICO). Details on how to contact the ICO can be found at www.ico.org.uk/global/contact-us/.
Livestock Information Ltd is registered with the ICO’s fee payer’s database and can be searched via registration number ZA552692
- What we use personal information for
At Livestock Information Ltd we collect and use personal information for the purpose of delivering the Livestock Information Service (LIS) on behalf of Defra and AHDB.
Livestock Information Service
LIS consists of two elements: a statutory livestock traceability service on behalf of Defra, and industry-led value-add services with AHDB:
- The statutory element of LIS is livestock traceability which Defra is required to supply under statute, by operation of EU Regulation 1760/2000, EU Regulation 21/2004 and EU Directive 2008/71/EC.
- The value-add element of LIS will be further services AHDB or Defra commissions Livestock Information Ltd to deliver in order to provide additional services to users.
This service is currently in development. Further information on your privacy and rights in relation to LIS will be available in a specific Privacy Notice provided for the service.
In addition, we collect and use personal information we collect for the following business administration purposes:
Industry stakeholders
- To contact our stakeholders to inform about ways in which they can engage with and support the Livestock Information Service.
- To contact industry organisations to collaborate and work in partnership on projects and to keep them informed on progress with projects and innovations which affect the industry.
- We may use the information you give us along with details about the publications you order or download, your attendance at events and the products and services you use, as well as data from other appropriate third parties, to help us make our information, services and communications more relevant for you.
- To identify usage trends on our websites and social media channels in order to enhance, improve or modify our websites and to facilitate your participation in interactive features you may choose to use on our websites and social media, also to personalise your user experience by presenting content tailored to you.
- We produce aggregated and anonymised reports to enable Government and the livestock industry to make better trading and business planning decisions.
- In essential circumstances, for product testing where we cannot recreate real life scenarios using dummy or anonymised data. Data protection impact assessments (DPIAs) will be mandated for this processing activity. Any risks highlighted will be mitigated against and managed with the relevant Information Asset Owner. Testing with live data will only occur where LI Ltd is acting under its delegated statutory remit (public task) and will not be done for value-add or non-essential activities. Test environments will be cleansed of data following this phase.
Suppliers and customers
- For business purposes to administer our pre-contract and contractual supplier/customer obligations.
Livestock Information Ltd employees and potential employees
- An employee specific privacy notice is available internally.
- For recruitment purposes prior to entering into an employment contract.
- During employment for normal employment contract purposes including the provision of contracted pay and benefits, and to meet the requirement of tax and employment laws.
- For health and safety, holiday, sickness and absence records.
- To keep employees informed about what is going on in the organisation.
- Our Lawful bases for processing personal information
‘Public Task’ – as an arms-length body of Defra processing personal information is necessary in the exercise of the official authority of Defra to supply livestock traceability under statute, by operation of EU Regulation 1760/2000, EU Regulation 21/2004 and EU Directive 2008/71/EC.
‘Contract’ – where we have contractual relationships with suppliers, customers and employees processing is necessary to administer the pre-contract and contractual obligations for the performance of a contract
‘Legitimate Interest’ – where we use personal information in ways they would reasonably expect to keep them informed and to run the business
‘Legal Obligation’ – we process and share some information because it is necessary to comply with laws and regulations to do with running an organisation and employing staff, such as health & safety legislation, tax laws, human rights and employment laws, etc.
‘Vital Interest’ – we process some sensitive information on health and disability provided to us by employees to enable us to respond in the most appropriate way in the event of a medical emergency. This would only be used in the event their consent cannot be provided.
‘Consent’ – the provision of information to stakeholders, which may include direct marketing, will be done when the data subject has explicitly consented to the processing of his or her personal data for one or more specific purposes. Consent will also be used for the main subject of photography and recording (video and audio). Re-consent will be sought every three years, where necessary. Where re-consent cannot be gathered, your personal data will be disposed of securely unless a legal obligation prevents us from doing so.
- Where we collect information about you from
We collect personal information in the following ways:
When you give it to us directly
You may give us your personal information when you register to use the Livestock Information Service, provide feedback or sign up on- or off-line to receive information, when you participate in competitions or when you register to participate in benchmarking or other services we provide, or when you apply to work for Livestock Information Ltd, when you complete your employee contract pack or when you join one of our committees, panels or boards.
From third party organisations and governments
Your information may have been shared with us by third parties. These third parties may be other public sector organisations such as the Rural Payments Agency, The Animal and Plant Health Agency and the Food Standards Agency, where information has been shared to help enable Livestock Information Ltd to fulfil our statutory functions. We may get data from third party organisations to whom you may have provided permission through your privacy settings or the responses you have given them. We will be passed personal information on potential employees or temporary staff by employment agencies.
To ensure cross border shares, for instance where animal moves are reported from a Devolved Administration into England, we share and process data controlled by the respective government.
When it is available publicly
We may supplement the information you provide with data from the public domain, such as Companies House and other public databases.
From social media
We use social media to communicate with stakeholders and depending on your settings for social media and messaging services like Facebook and Twitter, you might give us permission to access information from those accounts or services.
When you use our websites or apps
Like most websites, ours use ‘cookies’ to help us make our websites, and your user experience, better. Cookies mean that a website will remember you. They are small text files that sites transfer to your computer/tablet/smartphone and make interacting with a website faster and easier. There are more details in our Cookie Policy here
We will also track the Internet Protocol (IP) address used to connect your computer to the Internet; computer connection information such as browser type and version; and time zone setting, browser plug-in types and versions; operating system; download history, which we sometimes aggregate with similar information from other contacts to improve the navigation and services we provide. During some visits we may use software tools such as JavaScript to measure and collect session information, including page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page.
- What personal information we collect
“Personal Information” is information that identifies you as an individual or relates to an identifiable individual. Personal Information we may collect through service registration, event booking and feedback forms, sign-up forms, surveys, websites, competitions, public databases and third parties includes:
- Your title, first name, surname, business name, postal address and postcode, email address, telephone and mobile numbers
- Your social media handles
- Supplier bank details
- Your holdings
- Information regarding your dealings with us including details of your attendance at events and engagement with our programmes
- Your feedback on our services including video and audio recordings. Your explicit consent will be sought for these recordings.
- Any preference you have in relation to our publications and services
- Any information you may voluntarily submit to us by completing any paper or web-based form or job application
- Details of your visits to and usage of our websites
- Details of whether you have opened our emails, clicked on a link or watched our videos
- Membership of panels, committees, bodies and organisations
- We may also request date of birth and demographic information.
- As an employee we collect and process information to enable us to fulfil our contract with you and to meet legislative requirements – this includes your home address and contact details, bank account information, CV and references, driving licence and passport details, some medical information where appropriate, date of birth, sex, ethnicity, pay, sickness, next of kin. Additional safeguards will be put into place to protect ‘special category’ data.
- Sharing of your personal information to third parties
Livestock Information Ltd will never sell your personal information to third parties and we will not release your personal information to any company outside of the Livestock Information Ltd for their mailing or marketing purposes. Any sharing of your personal data will require a lawful basis to do so.
We may disclose your personal information to third parties for the following reasons:
- As part of the Livestock Information Service, for regulatory and animal health purposes, we will share your information with the Animal & Plant Health Agency (APHA), Food Standards Agency (FSA), The Rural Payments Agency (RPA), the Department for Environment, Food and Rural Affairs (Defra) or its equivalents in the Devolved Administrations or their appointed agents.
- As part of our service delivery, we may share your data with reputable third-parties to:
- Help deliver stakeholder events, for example to facilitate online registration. If it is a joint event and delegate contact information is to be made available to the other organisation you will be asked to consent to the proposed uses at the time you register for that event.
- Deliver employee services and benefits such as pensions, life insurance, occupational health scheme, vehicle leasing and insurance.
- Contribute to industry and academic research where LI Ltd sees a clear benefit to you, our stakeholders.
- Respond to requests from courts or law enforcement agencies.
- Where we appoint reputable data processors to complete processing activities on our behalf. This will only occur where we believe the activity is within our stakeholder’s interest and provides tangible benefits, such as improved product functionality or a higher quality of service delivery.
Livestock Information Ltd requires all such third parties to treat your personal data as confidential and asks for appropriate safeguards to be introduced to protect it.
- How we keep your personal information safe
We ensure that there are appropriate and proportionate controls in place to protect your personal information. For example, we use encryption, where appropriate, and we store data within Livestock Information Ltd’s secure network and cloud environment. We also limit and control who has access to the personal information we hold through administrative, technical and physical access controls.
Where we use third party suppliers or partners to process personal data we put a contract in place that sets out our expectations and requirements, especially regarding how they manage and securely transfer the personal information and fully comply with all applicable data protection legislation.
Livestock Information Ltd’s own systems and storage are within the UK and EEA. Some of our suppliers or partners process personal information on our behalf outside the EEA, where a recognised data security protocol and safeguards are in place between the UK and that country..
- How we keep your information up to date
We use information you provide to us through your various interactions with Livestock Information Ltd to keep the personal information we hold about you up to date.
If you tell us about errors in your data that was shared with us by another organisation, we will inform them and work with them to correct the data. This is in line with your right to rectification.
We use sources such information provided to us by other organisations as described in section 5 to maintain and improve the information we hold.
- How long we retain personal information
We will retain your personal information for no longer than necessary for the purpose it was obtained unless a longer retention period is required or permitted by law. In the event we have no lawful basis for processing your personal data, it will be securely disposed of.
It is our intention to publish our personal information retention schedule as soon as possible. Should you wish to discuss the retention of your personal data prior to the retention schedule being published, please contact data.protection@livestockinformation.org.uk
- Your choices and your rights
By law you have certain rights over your personal data that we hold about you and these are summarised below. Some of the rights are complex and not all the detail is included in our summaries, you should therefore read the relevant guidance on the Information Commissioner’s Office website: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/.
To enquire about exercising any of these rights please contact the Data Protection Officer using the details given in section 2. We may need to verify your identity before implementing your request, for instance through photographic ID. Not all rights under the UK GDPR are absolute and your request may be denied where there is grounds such as an exemption under the Data Protection Act 2018.
Access: You (the data subject) have the right to ask for a copy of the personal information held about you – known as a Data Subject Access Request (DSAR). We are required to respond within one month, with extensions to that deadline only being applicable in extraordinary circumstances. There is no charge to deal with your request and you can make a subject access request verbally or in writing. Anyone exercising your ‘right of access’ on your behalf must have your explicit consent to do so. Processing related to your ‘right of access’ is a statutory requirement under the UK GDPR and the Data Protection Act 2018.
Rectification: You have the right to ask us to correct any errors in the personal information held about you.
Objection: You have the right to make an objection (based on your specific situation) to how we are processing or profiling your personal information. The right to object is particularly important if we are processing your information under the conditions of a ‘public task’, or ‘legitimate interests’. This is because these conditions must be based on not overriding your rights and freedoms against our purposes for using your personal information. If we are using your personal information on these grounds and you wish to object, please contact data.protection@livestockinformation.org.uk.
Erasure: Please note that the personal information we hold for ‘public task’ purposes is not eligible for erasure. Personal information obtained through consent is eligible and each request we receive will be treated on a case-by-case basis. It should be noted that we will retain enough information to ensure the individual is not contacted again. On occasion, some data may also have to be retained for legal record-keeping purposes and we will always inform you when this is the case.
Withdraw consent: Where processing is based on your consent, then that consent can be withdrawn at any time. Livestock Information Ltd uses consent for the delivery of information to stakeholders and for participation in photography and recording. Your consent will be stored and re-consent will be sought only where the processing is still deemed necessary and lawful.
Automated decision-making or profiling in regards to your personal data: No automated decision-making or profiling is being completed by Livestock Information Ltd at this time. This privacy notice will be amended immediately should this change.
Make a complaint: You also have the right to lodge a complaint with the UK’s independent supervisory authority for upholding information rights – the Information Commissioner’s Office (ICO). Details on how to contact the ICO can be found at www.ico.org.uk/global/contact-us/. The ICO recommends you contact Livestock Information Ltd to discuss your concerns prior to opening a case with the ICO.
- Changes to this Privacy Notice
We may change this Privacy Notice from time to time. The effective date of this Privacy Notice, given at the beginning, indicates the last time this Notice was revised. If we make any significant changes in the way we treat your personal information we will communicate this to you.
Document Approval
| Version | 8 |
| Last Updated By | David Parkes, Data Protection Officer |
| Last Updated Date | 16 February 2022 |
| Effective From | 16 February 2022 |
| Next Review Date | 16 July 2022 |