Covid-19 business grants privacy notice

The purpose for this processing

To record and process the information necessary to assess a businesses’ eligibility for, and payment of, business grant schemes that have been introduced by Government in response to the impact of the COVID-19 pandemic.

Legal basis for this processing

Article 6 (e)

Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

What data we collect about you (fields)?


Business address

Email address

Telephone number

Bank account details 

Business Rates account number

Business Identifier Number (Charitable Commission Registration Number, Companies House number, Company number, Your Self-Assessment Unique Taxpayer Reference number)

VAT registration number

Business type

Number of employees

Size of business

Information on trading

Information on income/loss

Bank statements/lease agreements/mortgage agreements

SIC Code

Other forms of evidence as required

How long do we keep your personal data?

Your information will be kept for 6 years in accordance with the Council’s Retention Schedule

However, you do have the right to contact us and ask for your information to be removed where there is no legal obligation or statutory requirement for it to be kept. You can exercise this right by contacting

Who do we share it with?

The Department for Business, Energy and Industrial Strategy

National Fraud Initiative

The Cabinet Office


Her Majesty’s Revenues and Customs

Northgate Software Services

Enforcement Agents

Ministry of Housing, Communities and Local Government

Valuation Office Agency

Essex County Council

Section 56 of the Digital Economy Act 2017 enables public authorities to share information in order to take action in connection with fraud against a public authority. This type of information sharing helps us to improve our ability to identify and reduce the risk of fraud against the public sector and recover public sector funds.

Where we get it from?

The data subject themselves

Accountants representing the data subject

Persons authorised by the data subject to liaise on their behalf

If automated decision making applies to this processing

No automated decision making applies to this process.

Last updated on: 20/01/2022 - 17:51