Privacy notice

Information and customer relations

Epping Forest District Council is a data controller pursuant to the general data protection regulation (GDPR). This means that the council decides how your personal data is processed and for what purposes. The contact details for the council’s data protection officer are:

Data Protection Officer
Epping Forest District Council
Civic Offices
323 High Street
Epping CM16 4BZ

  • Name
  • Address
  • Email address

Your details are required in order to communicate housing and other matters to residents and tenants of Epping Forest District Council current and former properties.

The information that you have provided will be securely held by the council and will only be accessed by authorised persons with the appropriate access controls. The council will only use the information that you have provided for the purpose above and will not use it for any other purpose, unless you have given your consent, or this is otherwise required or permitted by law.

  • 6(1)(a) Consent. The data subject has given clear consent for the processing of their personal data for a specific purpose. The data subject has given explicit consent to the processing.

Special category data includes information about race; ethnic origin; politics; religion; trade union membership; genetics; biometrics (where used for ID purposes); health; sex life; or sexual orientation and where applicable the additional legal basis for doing so is:

  • N/A

Criminal offence data includes personal data relating to criminal convictions and offences, or related security measure and where applicable the additional legal basis for doing so is:

  • N/A

In order to fulfil the function outlined above your personal data will be shared with Mailchimp.

In order to fulfil the function outlined above your personal data will be transferred to the United States of America.

MailChimp is certified to both the EU-U.S. Privacy Shield and Swiss-U.S. Privacy Shield regimes, and lawfully transfers EU/EEA personal data to the U.S. pursuant to this certification. They also complete a SOC II Type 2 examination on an annual basis for the Trust Principal Criteria of Security, Processing Integrity, Confidentiality, and Availability.

The council will keep your personal information in line with our retention policy:

Under the General Data Protection Regulation (GDPR), you have various rights as an individual that you can exercise in relation to the information that the council holds about you. Information about these rights is available in our data protection policy.

If you are unhappy with the way in which your personal data is processed by Epping Forest District Council you should contact the Data Protection Officer in the first instance:

If you remain dissatisfied with the council’s processing of your personal data, you have the right to apply directly to the Information Commissioner for a decision. The Information Commissioner can be contacted at:

The ICO’s address:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF

More information