Financial transactions
This notice provides details of what information we collect from you, what we do with it, and who it might be shared with when the Council's Creditors Team needs to make a payment to you.
Why do we collect this information?
The information is being collected for the following purposes:
- The administration and payment of goods and services purchased by the Council.
- The administration and payment of expenses by the Council.
- To submit the tax return specifically for CIS (Construction Industry Scheme) purposes.
- To ensure the correct deduction of tax under IR35.
The legal basis for each purpose is set out below:
| Legal basis | Purpose |
|---|---|
| Consent | |
| Performance of a contract | 1, 2 |
| Legal obligation | 3, 4 |
| Vital interests | |
| Task carried out in the public interest | |
| Legitimate interests |
The main statutory provisions are found in the Local Government Finance Act 1992. We must also act in accordance with the Council's Financial Regulations.
What information do we collect about you?
We collect:
- Your name.
- Your business details.
- Your personal or business address (old and new).
- Your bank details.
- Relevant dates i.e. when a service was received or goods delivered.
- CIS (Construction Industry Scheme) Information.
- National Insurance Number and Tax Code (IR35).
We are responsible for payment of goods and services via a range of means ie invoicing, interfaces, emergency vouchers, weekly vouchers etc.
We hold a range of information collated for the purposes of deducting tax under IR35 rules.
We also collate a range of information for the purposes of reporting our tax return specifically under the Construction Industry Scheme.
We keep copies of your communications with us and our responses. With your consent we may also hold your bank details, email address and telephone number depending on how you choose to pay and communicate with us.
Where we collect information about you from
The main sources of personal data are:
- Yourself
- The Council's own records
- Another local authority
Who might we share your information with?
The Council has a duty to protect public and business information. Details are checked within the Council for the prevention of fraud and verification purposes. Information will only be shared with other public bodies where the Council is required or permitted to do so by law. Potential recipients include:
- HM Revenues and Customs (HMRC)
- Other Council Departments
- External Audit
- Cheque Software Provider
- Your Bank
- People making information requests (eg FOI)
The Council uses a Creditors System to administer and process all payments, including the production of cheques. All information is stored on a secure server.
Do you use any automated processes to make decisions about me?
We do not use profiling or automated decision-making processes. Some processes are semi-automated (such as the Creditors System) but a human decision maker will always be involved before any decision is reached in relation to you.
Will we send your information outwith the UK?
We do not transfer your information out with the UK. If it becomes necessary to do so, we would ensure that the appropriate safeguards are in place.
How long do we keep hold of your information?
We keep your information as long as required by law or by our business requirements. We have a Business Classification Scheme in place which sets out the types of records we hold, and how long we hold them - you can access the relevant part of the scheme below:
Do I have to provide my personal data to you?
Yes. Individuals have a statutory obligation to provide the information referred to above (the main categories of data used) to allow for payment of goods and services to be made and for the tax return to HMRC or penalties via HMRC to be made/imposed.
Published November 2025.