Skip to main content
Skip to main navigation
Skip to form
Back to Your PCC
Back to The PCC's office
Back to Inspections, stats and reports
Back to How your money is spent
Back to The PCC and You
Back to Victims and Witnesses
Your progress is currently at 16.66667%
You are on step 1
Fields marked with * are mandatory
To understand how we handle personal data, read our privacy notice.
This privacy notice explains how we, the Office of the Police and Crime Commissioner (OPCC) for Wiltshire and Swindon, obtain, hold, use and disclose information about you - your personal data – and the steps we take to ensure that it is protected. It also describes the rights you have with regard to how your personal data is handled by OPCC and includes how to contact the Information Commissioner should you have a concern with regard to how your personal data has been handled.
The use and disclosure of personal information is governed in the United Kingdom by the UK General Data Protection Regulation (‘UKGDPR’) and Data Protection Act 2018 (‘the Act’), collectively referred to as the Data Protection Legislation (‘the legislation’). The Police and Crime Commissioner for Wiltshire and Swindon is registered with the Information Commissioner as a ‘data controller’ for the purposes of the legislation. As such he is obliged to ensure that the OPCC for Wiltshire and Swindon handles all personal information in accordance with the legislation. The OPCC for Wiltshire and Swindon takes that responsibility very seriously and takes great care to ensure that personal information is handled appropriately in order to secure and maintain individuals’ trust and confidence.
The Police and Crime Commissioner, Philip Wilkinson, is the data controller for the OPCC, and has overall responsibility for the lawful processing of all personal data. You can contact the PCC at [email protected] or at the below address. Please address to the attention of the OPCC.
The Data Protection Officer, assists the PCC by providing advice and guidance on Data Protection legislation. They can be contacted by email: [email protected] or by writing to
Wiltshire Police HQ
The OPCC processes personal information for a variety of reasons which are not directly related to law enforcement but assist with the provision of services to support the administration of justice.
For example we process personal data for the following lawful purposes to;
In order to carry out the purposes described above, the OPCC may obtain, use and disclose personal information relating to a wide variety of individuals including but not limited to:
The type of personal information the OPCC hold will vary depending upon the reason you have had contact with us but it may include:
We will use the minimum amount of personal information necessary to fulfil a particular purpose. Your personal information may be held on a computer system, in a paper record such as in a physical file or an image but may also include other formats such as CCTV footage or an audio copy of an interview tape.
In order to carry out the purposes described above the OPCC may obtain personal information from a wide variety of sources, including the following:
The OPCC may also obtain personal information from other sources such as its own CCTV systems, other police forces, correspondence and our own databases.
In order to process personal information for the purposes described above, the OPCC may disclose personal information to a wide variety of recipients in any part of the world, including those from whom personal information is obtained (as listed above). This may include disclosures to other law enforcement agencies, partner agencies working on crime reduction initiatives, partners in the Criminal Justice arena, Victim Support, Health Services and to bodies or individuals working on our behalf such as IT contractors or survey organisations.
We may also disclose to other bodies or individuals where necessary to prevent harm to individuals.
Disclosures of personal information are made on a case-by-case basis, only relevant information, specific to the purpose and circumstances, will be disclosed and with necessary controls in place.
Some of the bodies or individuals to which we may disclose personal information are situated outside of the UK – some countries of which do not have laws that protect data protection rights as extensively as in the UK. If we do transfer personal information to such territories (outside of the UK), we will take proper steps to ensure that it is adequately protected as required by the Data Protection Legislation.
The OPCC will also disclose personal information to other bodies or individuals when required to do so by, or under, any act of legislation, by any rule of law, and by court order. This may include disclosures to the Child Support Agency, the National Fraud Initiative, the Home Office and to the Courts.
The OPCC may also disclose personal information on a discretionary basis for the purpose of, and in connection with, any legal proceedings or for obtaining legal advice.
The OPCC takes the security of all personal information under its control very seriously. The OPCC will comply with the relevant parts of the Data Protection and other applicable Legislation relating to security, and seek to comply with the College of Policing Authorised Professional Practice (Information Management).
The OPCC will ensure that information security risks are identified and mitigated in a proportionate and reasonable way, using a holistic suite of controls to protect against loss, compromise and misuse. This is measured using Information Risk Management Maturity Assessments (independently verified) addressing people, process, procedure, policy, training and technology (including accounting and audit) security requirements. Access to information is controlled and is limited to explicitly authorised and appropriately security cleared (Vetted) personnel and is provided for specific purposes only under need to know and use principles. Security and other attendant processes are subject to a process of continuous review.
The OPCC will retain personal data for as long as is necessary for the purpose that it was collected for.
Records that contain personal data are held in accordance with the Retention Schedule.
A significant area of change in the new Data Protection legislation relates to individuals’ rights. The Data Protection Act (2018) refreshes existing rights, by clarifying and extending them, and also introduces new rights for the individual.
How far you will be able to exercise each of these rights will be dependent on the reason for which the data was collected, and how it has / is being processed (used).
Right to be Informed - This places an obligation upon the OPCC to tell you how we obtain your personal information and describe how we will use, retain, store and who we may share it with.
This Privacy Notice has been written to explain how we will use your personal information and tell you what your rights are under the legislation.
Right of Access - This is commonly known as subject access and is the right which allows you access to your personal data and supplementary information, however it is subject to certain restrictions.
You can exercise your right of access by clicking on the following link and submitting your request.
Right to Request Rectification - You are entitled to have personal data rectified if it is shown to be inaccurate or incomplete.
Right to Erasure - The right to erasure is also more commonly known as ‘the right to be forgotten’. This right enables you to request the deletion or removal of personal data where there is no compelling reason (lawful basis) for its continued processing.
Right to Restriction - You have the right to request that the continued processing of your data is restricted or blocked where there is no compelling reason (lawful basis) for its continued processing.
Right to Data Portability- The right to data portability allows you to obtain and reuse your personal data for your own purposes across different services. There are limitations to how this right can be exercised in relation to data held by Wiltshire Police.
Right to Object - Individuals have the right to object to:
Rights Relating to Automated Decision Making - Automated individual decision making and profiling is a decision made by automated means without any human involvement. The OPCC do not conduct any automated individual decision making or profiling.
The Information Commissioner is the independent authority responsible within the UK for ensuring compliance with data protection legislation. If you have a concern about how the OPCC have used your personal information or you believe you have been adversely affected by our handling of your data you may wish to contact them using the information below:
By Phone: 0303 123 1113 (Their normal opening hours are Monday to Friday between 9am and 5pm)
By Email: [email protected]
By Post: Information Commissioners Office Wycliffe House Water Lane Wilmslow SK9 5AF
This privacy notice will be under regular review. This privacy notice was last updated on Thursday 9 September 2021.
If we plan to use your personal information for a new purpose we will update our privacy notice accordingly, and communicate any changes before we start the new processing activity.
Enter address manually