Dudley Council
Dudley Skyline

Trading Standards Service Privacy Notice - Public Health

Dudley Metropolitan Borough Council (MBC) Environmental Health & Trading Standards (EHTS)

We are committed to protecting your personal data and ensuring that it is processed fairly and lawfully. Information you provide to us will be processed in accordance with the General Data Protection Regulation (GDPR), the Data Protection Act 2018 (DPA 2018) and subsequent legislation. For the purposes of Data Protection, Dudley MBC is the Data Controller.

Who we are and what we do

We are the Trading Standards team, part of Dudley Metropolitan Borough Council’s Environmental Health and Trading Standards service. We are part of the Health and Wellbeing Service delivered within the People Directorate.

Trading Standards role is to enforce various consumer protection legislation with the purpose of protecting residents, ensuring fair trading amongst businesses and preventing and detecting crime. We also offer a civil advice service and may contact traders on behalf of consumers in an attempt to resolve a dispute. To enable us to perform our duties, intelligence and data will be collected, stored and processed about individuals and businesses. Information will be collected from complaints, inspections, investigations and service requests.

For more information about our services please see the Dudley Council website.

What type of personal information do we collect and how do we collect it?

If you are a business, when you request advice from us or we contact you in relation to a trading standards matter, we collect the following information from you:

  • Your name
  • Business name
  • Business address
  • Telephone number(s)
  • E-mail address

If you are a business applying to join the vetted traders scheme “Fix A Home” we collect the following additional information from you:

  • Proof of satisfactory trading history of at least 12 months
  • Details of public liability insurance
  • Details of registration or membership of professional trade bodies/associations
  • Details of 3 references

If you are a consumer making a complaint or seeking advice about a trading standards matter we collect the following information from you:

  • Your name
  • Address
  • Telephone number
  • E-mail address (if applicable).
  • Details of the issue including copies of any correspondence with the trader and any trade bodies/associations

We collect information from you in the following ways:

  • Paper forms
  • Online forms and emails
  • Telephone conversations
  • Face to face meetings

We also receive information from other agencies, for example from:

  • Citizens Advice Consumer Services (CACS), a government funded service receiving all first line consumer complaints and enquiries. If you live in the Dudley borough or the issue relates to a Dudley based business, CACS notify us of the matter including your details.
  • Other regulators and enforcers, e.g. HMRC, Health & Safety Executive, Home Office Immigration, National Trading Standards
  • The Police, where a matter which comes to the police’s attention may breach trading standards legislation
  • Other local authorities including trading standards services where there is a relevance to the Dudley borough
  • Trade and/or sector associations
  • Judicial agencies including courts and Crown Prosecution Service in relation to criminal convictions
  • National Trading Standards Scams team, hosted by Surrey County Council which provides information on scam victims to local authorities. There is a separate Privacy Notice is relation to the work of the Dudley Trading Standards Scams Unit.

Legal basis for processing

Our legal basis for data processing comes from Articles 6, 9  & 10 of GDPR.

Legal obligation- Article 6 (1) (c) - processing is necessary for compliance with a legal obligation to which the controller is subject.

Public task-Article 6 (1) (e) – processing is necessary for us to perform a task carried out in the public interest or for our official functions. Information relating to criminal offences (including the suspected and alleged commission of offences) comes under Law Enforcement Directive EU2016/680 and is enshrined in UK law in Part 3 of the Data Protection Act 2018. The Council is a competent authority for processing of criminal offence and criminal penalty data as it has statutory functions for law enforcement purposes, i.e. enforcement of trading standards legislation. Article 10 of the GDPR requires that Member States provide safeguards for the rights and freedoms of data subjects in national law to authorise the processing of personal data relating to criminal convictions and offences. DPA 2018 therefore requires data controllers to have a policy document in place for processing of data relating to criminal offences. The Council has a Corporate Policy IGPOLO18 Law Enforcement Data Protection Policy.

Legislation enforced by the service includes (this is not an exhaustive list):

  • Consumer Rights Act 2015
  • Consumer Protection from Unfair Trading Regulations 2008
  • Trade Marks Act 1994
  • Consumer Protection Act 1987
  • Agriculture Act 1970
  • Fraud Act 2006
  • Proceeds of Crime Act 2002
  • Weights & Measures Act 1985
  • Road Traffic Act 1988
  • Children & Young Persons Act 1933
  • General Product Safety Regulations 2005
  • Criminal Justice Act 1988
  • Anti-social Behaviour, Crime & Policing Act 2014
  • Trade in Tobacco & Related Products Regulations 2016
  • Standardised Packaging of Tobacco Regulations 2015

What is your personal information used for?

The information we collect is used for the following purposes:

  • To monitor and ensure compliance with statutory requirements
  • To investigate and enforce trading standards legislation
  • To provide updates on the progress of investigations, complaints and enquiries
  • To offer advice and guidance to businesses and members of the public.

Sharing your personal information

If you are a member of the Fix A Home scheme or apply to become a member, we will share details of your application with Age UK Dudley, our partner in administrating the scheme. We will also make checks of the details provided by you in your application to ensure that you are able to meet the requirements of the Fix A Home Code of Practice.

Your details published in the Fix A Home brochure, available in hard copy and online, to enable consumers to contact your business will be checked and agreed with you for accuracy before publishing.

We may share information with our partner agency, Citizens Advice Consumer Services (CACS), who deal with all first line consumer complaints and enquiries.

We may share personal information about you with the following organisations
under prescribed circumstances, for example the prevention and detection of crime or for tax collection purposes:

  • The Police
  • Other regulators and enforcers, e.g. HMRC, Health & Safety Executive, Home Office Immigration, National Trading Standards
  • Trade and/or sector associations
  • Judicial agencies including courts and Crown Prosecution Service
  • Other Dudley MBC departments/services, for example, planning, building control, licensing, adult safeguarding, revenues and benefits.
  • Other local authorities

If you are convicted of a trading standards offence, following a criminal investigation by Dudley Trading Standards, your name and any business name and the trading address will be published on the Council’s prosecution register. If the trading address is a domestic property, the full address is not published. We take into account the provisions of the Rehabilitation of Offenders Act 1974 and only publish prosecutions of individuals for the period during which the sentence in not spent. Otherwise, prosecutions are published for a period of 3 years.

Keeping your personal information secure

We are committed to protecting personal data and have data policies and procedures in place to ensure that it is safeguarded. Contact information is held securely on the database service used. All staff undertake regular training in data protection and managing personal information.

Amount of time we hold your information

Information is kept in accordance with our retention policy. After we deliver a service to you, we keep your information as a business record of what was delivered. The retention period is 7 years.

Personal information processed outside the European Economic Community (EU)

We do not process your personal information outside the EU unless you specifically request us to do so.


At no time will your information be passed to organisations external to us or our partners for marketing or sales purposes or for any commercial use without your prior express consent.

What are your rights?

Your rights are detailed in the Council’s Corporate Privacy Notice

Should you wish to raise any concerns about how we have processed your personal data you can contact the data protection officer, email

You also have the right to contact the Information Commissioner.
If you would like a copy of this information in a different format, please email