Privacy Notice
How we use your personal data
This privacy notice explains how Stour Environmental Credits Ltd (“SEC”, “we”, “us” or “our”) collects, uses and protects your personal data.
We are committed to protecting your privacy and ensuring that your personal data is handled in accordance with applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who we are
Stour Environmental Credits Ltd (SEC) is a company established to support environmental outcomes within the Stour catchment area, including:
- the provision and administration of nutrient mitigation and nutrient credit trading, and
- the delivery and installation of septic tank upgrades and associated environmental improvement measures.
For the purposes of data protection legislation, SEC is the Data Controller of the personal data described in this notice.
SEC is a not-for-profit organisation formed through a collaboration of Ashford Borough Council and Canterbury City Council.
The personal information we collect
Depending on your relationship with us and the services you access, we may collect and process the following types of personal information:
Information you provide to us directly
This may include:
- Name, address and contact details (such as email address and telephone number)
- Property details and location information
- Land ownership or occupancy details
- Information provided in application forms, enquiries, contracts or correspondence
- Financial or payment-related information (where relevant to credit transactions or works)
- Information provided in relation to septic tank assessments, installations or upgrades
Why we use your information
We use your personal data where necessary to:
- administer and manage nutrient mitigation and nutrient credit trading schemes
- assess eligibility for, arrange and manage septic tank upgrade works
- communicate with landowners, developers, buyers and contractors
- enter into and manage contracts and legal agreements
- process payments and maintain financial records
- comply with environmental, planning and regulatory requirements
- respond to enquiries, complaints or legal matters
- maintain accurate records and audit trails
- operate and improve our website and services
Lawful bases for processing
Under UK GDPR, we must identify a lawful basis for using your personal data. Depending on the circumstances, our processing is carried out on one or more of the following bases:
- Contract – where processing is necessary for the performance of a contract with you, or to take steps at your request before entering into a contract
- Legal obligation – where processing is required to comply with environmental, planning, financial or regulatory obligations
- Legitimate interests – where processing is necessary for our legitimate interests in operating nutrient mitigation schemes and environmental projects, provided these interests are not overridden by your rights and freedoms
- Consent – where you have given clear consent for specific processing activities (which you may withdraw at any time) such as in signing up to newsletters or updates we may provide.
- Public task – where processing is necessary for the performance of a task carried out in the public interest, including the delivery, administration and monitoring of nutrient neutrality and nutrient mitigation measures that support lawful development, environmental protection and the achievement of statutory environmental objectives.
How we get your information
We may obtain personal data from:
- you directly
- agents acting on your behalf
- local planning authorities or public bodies
- environmental consultants and technical advisers
- contractors involved in site works or installations
- publicly available sources (such as Land Registry records)
Who we share your information with
We may share your personal data, where necessary and lawful, with:
- local authorities and statutory bodies
- environmental regulators
- professional advisers (such as legal or financial advisers)
- contractors and suppliers involved in septic tank upgrades or other environmental works
- auditors and insurers
All third parties are required to handle your data securely and only for specified purposes.
Data retention
We keep your personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, financial and regulatory requirements. Retention periods vary depending on the nature of the information and the service provided.
Your data protection rights
You have the following rights under data protection law:
- the right to be informed
- the right of access to your personal data
- the right to rectification of inaccurate data
- the right to erasure (in certain circumstances)
- the right to restrict processing
- the right to data portability
- the right to object to processing
- rights in relation to automated decision‑making and profiling (where applicable)
To exercise your rights, please contact us using the details below.
Complaints
If you are unhappy with how we have handled your personal data, you have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection.
Contact details
If you have any questions about this privacy notice or how we use your personal data, please contact:
Stour Environmental Credits Ltd
c/o Ashford Borough Council
International House
Dover Place
Ashford
Kent
TN23 1 HU
E-mail: admin@stourenvironmentalcredits.co.uk
