Who are we and what do we do?
Middlesbrough Council Bereavement services have a statutory duty to provide advice on all aspects of burial, cremation and memorials.
What type of personal data do we collect and how do we collect it?
To provide Bereavement Services to you we may need to process your personal information which could include name, address, next of kin, doctor, payment details
We collect personal information primarily from relatives of deceased individuals.
How the Law allows us to use your personal data
We process your personal data on a number of lawful basis including where you have given your consent, to meet our legal obligations, or to allow us to deliver a ‘public task’ based on our legal powers. The laws that require or allow us to process personal data for Bereavement services include:
- Burial Act 1857
- Crematorium Act 1952
- Local Authorities Crematories Order 1977
- Registration of Burials Act 1864
What is your personal data used for?
We use your personal data to provide the following services:
- Cremation, burial and memorial applications;
- Exhumation records;
- Transfer of exclusive rights of burial;
- Online condolence messages;
- Records of Payments; and
- General correspondence between yourselves and the council on matter relating to the bereavement service
Will your personal data be shared?
We share information where we have a business need or the law requires us to do so with third parties including Ministry of Justice, funeral directors, coroner, Secretary of State, police, and medical referees.
How do we keep your personal data secure?
We use the following measures to ensure that your personal data is secure: data protection and security policies, information security incident reporting, data and device encryption, system and data access controls, user accounts and passwords, physical and environmental security, staff vetting practices, staff training and awareness, data back-ups, ICT network penetration testing, and business continuity and disaster recovery plans.
How long will we keep your personal data?
We only keep your data for as long as the Law requires it and this is set out in our ‘records management retention schedules’. We may keep reports and other documents for longer but will always ensure that your identity is anonymised.
Is your personal data processed overseas?
We do not send your personal information outside of the European Economic Area to be processed.
We will never use your information for direct marketing purposes.
What are your information rights?
Your Information Rights are set out in law and, subject to some exceptions, you have the:
- Right to rectification – to ask for information to be corrected
- Right to erasure – to have your personal data deleted
- Right to object – to how you data is used
- Right to restriction – to request limits on how your data is used
- Right to portability – to request that we move your data to another organisation
You also have the right to request a copy of the personal information that the Council holds about you (subject access request) by visiting the data protection webpage.
Making a complaint
If you have any concerns about the way we are collecting or using your personal data, you should raise your concern with us in the first instance or directly to the Information Commissioner's Office. Visit the website of the Information Commissioner's Office.
If you would like to discuss anything in this privacy notice or your information rights, please contact:
The Data Protection Officer
PO Box 500, Middlesbrough, TS1 9FT
Phone: 01642 245432