Privacy notice : Human Resources

This notice explains when we collect personal data, what we use it for, who we share it with and your rights.

Who are we

Human Resources,
Town Hall, St Ives Road,
Maidenhead, SL6 1RF. 

The lawful basis for processing the information 

We rely on General Data Protection Regulation Articles 6(1)(b) – processing is necessary for the performance of a contract and 6(1)(e) – processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

All HR services operate within the following legislation and any subsequent amendments:

Human Resources

ACAS Arbitration Scheme (England and Wales) Order 2001.
ACAS Arbitration Scheme (Great Britain) Order 2004.
Access to Medical Reports Act 1988.
Acquired Rights Directive (2001/23/EC).
Agency Workers Regulations 2010.
Apprenticeships, Skills, Children and Learning Act 2009.
Asylum and Immigration Act 1996 and 1999.
Bribery Act 2010.
Care Standards Act 2000.
Childcare (Disqualification) Regulations 2009
Childcare (Amendment) Regulations 2018.
Collective Redundancies Directive (75/129/EC).
Collective Redundancies (Amendment) Regulations 2006.
Collective Redundancies and Transfer of Undertakings (Protection of Employment) (Amendment) Regulations 1995, 1999 and 2014.
Conduct of Employment Agencies and Employment Businesses Regulations 2003.
Criminal Justice and Court Services Act 2000.
Disability Discrimination Act 1995, 2005.
Education Act 2006.
Education and Skills Act 2008.
Employee Study and Training (Eligibility, Complaints and Remedies) Regulations 2010.
Employee Study and Training (Procedural Requirements) Regulations 2010. 
Employment Act 2002 and 2008.
Employment Equality (Age) Regulations 2006.
Employment Equality (Age) (Amendment No.2) Regulations 2006. 
Employment Equality (Religion or Belief) Regulations 2003. 
Employment Equality (Repeal of Retirement Age Provisions) Regulations 2011.
Employment Equality (Sex Discrimination) Regulations 2005.
Employment Equality (Sexual Orientation) Regulations 2003. 
Employment Relations Act 1999 and 2004.
Employment Relations Act 1999 (Blacklists) Regulations 2010
Employment Rights Act 1996.
Employment Rights Act 1996 (Application of Section 80B to Adoptions from Overseas) Regulations 2003.
Employment Rights (Miscellaneous Amendments) Regulations 2019 
Employment Rights (Employment Particulars and Paid Leave) (Amendment) Regulations 2019
Employment Tribunals Act 1996. 
Employment Tribunals (Constitution and Rules of Procedure) Regulations 2013. Employment Tribunals (Early Conciliation: Exemptions and Rules of Procedure) Regulations 2014.
Equality Act 2010.
Equality Act (Age Exceptions for Pension Schemes) Order 2010. 
Equality Act 2010 (Gender Pay Gap Information) Regulations 2017. 
Equality Act 2010 (Obtaining Information) Order 2010.
Equality Act 2010 (Specific Duties and Public Authorities) Regulations 2017.
Equality Act 2010 (Sex Equality Rule) (Exceptions) Regulations 2010.
Equal Opportunities and Equal Treatment Directive (2006/54/EC).
Equal Pay Act 1970. 
Equal Treatment Framework Directive (2000/78/EC).
Exclusivity Terms in Zero Hours Contracts (Redress) Regulations 2015. 
Finance Act 2009, 2011, 2013, 2016 and 2017.
Fixed-term Workers Directive (99/70/EC).
Fixed-Term Employees (Prevention of Less Favourable Treatment) Regulations 2002.
Flexible Working Regulations 2014.
Gender Recognition Act 2004.
Human Rights Act 1998.
Immigration Act 2014.
Immigration, Asylum and Nationality Act 2006.
Immigration (Restrictions on Employment) Order 2004 and 2007.
Information and Consultation Directive (2002/14/EC).
Information and Consultation of Employees Regulations 2004.
Local Government Transparency Code 2015
Maternity and Adoption Leave (Curtailment of Statutory Rights to Leave) Regulations 2014.
Maternity and Parental Leave etc. Regulations 1999. 
Maternity and Parental Leave (Amendment) Regulations 2001.
Maternity and Parental Leave etc. and the Paternity and Adoption Leave. (Amendment) Regulations 2006 and 2008.
The Maternity and Parental Leave etc. (Amendment) Regulations 2014.
National Minimum Wage Act 1998. 
National Minimum Wage (Amendment) Regulations 2016 and 2017.
National Minimum Wage (Enforcement Notices) Act 2003.
National Minimum Wage Regulations 2015.
Part-time Workers Directive (97/81/EC).
Part time workers (Prevention of Less Favourable Treatment) Regulations 2000.
Parental Leave Directive (2010/18/EC).
Paternity and Adoption Leave Regulations 2002.
Paternity and Adoption Leave (Adoption from Overseas) Regulations 2003.
Paternity and Adoption Leave (Amendment) Regulations 2004 and 2014.
Parental Bereavement Leave Regulations 2020
Statutory Parental Bereavement Pay Regulations 2020
Social Security (Paternity and Adoption) Amendment Regulations 2002 
Pensions Act 1995, 2004, 2007, 2011, 2014.
Pension Schemes Act 2015.
Occupational and Personal Pension Schemes (Consultation by Employers and Miscellaneous Amendment) Regulations 2006. 
Occupational and Personal Pension Schemes (Disclosure of Information) Regulations 2013. 
Police Act 1997 (Criminal Records) Regulations 2002.
Pregnant Workers Directive (92/85/EEC).
Protection of Children Act 1999.
Protection of Freedoms Act 2012.
Protection from Harassment Act 1997.
Public Interest Disclosure Act 1998.
Public Interest Disclosure (Compensation) Regulations 1999 (SI 1999/1548).
Public Interest Disclosure (Prescribed Persons) Order 2014 (SI 2014/2418).
Prescribed Persons (Reports on Disclosures of Information) Regulations 2017.
Race Relations Act 1976. 
Redundancy Payments (Continuity of Employment in Local Government etc) (Modification) Order 1999.
Regulation of Investigatory Powers Act 2000.
Rehabilitation of Offenders Act 1974.
Rehabilitation of Offenders Act 1974 (Exceptions) Order 1975.
Reserve Forces (Safeguard of Employment) Act 1985.
Right to Time Off for Study or Training Regulations 2001.
Safeguarding Vulnerable Groups Act 2006.
Sex Discrimination Act 1975. 
Sex Discrimination Act 1975 (Amendment) Regulations 2008.
Sex Discrimination (Gender Reassignment) Regulations 1999.
Sex Discrimination (Indirect Discrimination and Burden of Proof) Regulations 2001.
Shared Parental Leave Regulations 2014.
Statutory Shared Parental Pay (Administration) Regulations 2014.
Statutory Shared Parental Pay (General) Regulations 2014.
Shared Parental Leave and Paternity and Adoption Leave (Adoption from Overseas) Regulations 2014.
Statutory Shared Parental Pay (Parental Order Cases) Regulations 2014. 
Telecommunications (Lawful Business Practice) (Interception of Communications) Regulations 2000.
Temporary Agency Work Directive 2008.
Trade Union Act 2016.
Trade Union and Labour Relations (Consolidation) Act 1992. 
Transfer of Employment (Pension Protection) Regulations 2005. 
Transfer of Undertaking (Protection of Employment) Regulations 1981.
Unfair Contract Terms Act 1997.
Work and Families Act 2006.
Working Time Regulations 1998 and 1999.
Working Time (Amendment) Regulations 2002 and 2003.
Directive on Written Information 91/533/EC.
Employment of Women, Young Persons and Children Act 1920.
Young Workers' Directive (Council Directive 94/33/EC).


Approved Mileage Allowance Payments (Rates) Regulations 2011.
Attachment of Earnings Act 1971.
Automatic Enrolment (Earnings Trigger and Qualifying Earnings Band) Order 2014 and 2017.
Child Maintenance and Other Payments Act 2008.
Child Support Act 1991.
Child Support (Collection and Enforcement) Regulations 1992.
Civil Procedure Rules.
Commissioners for Revenue and Customs Act 2005.
Council Tax (Administration and Enforcement) Regulations 1992.
Courts Act 2003.
Education (Student Loans) (Repayment) Regulations 2000. 
Employers' Duties (Implementation) Regulations 2010 (Auto enrolment).
Employers' Duties (Registration and Compliance) Regulations 2010.
Employment and Support Allowance Regulations 2008.
Income Tax (Earnings and Pensions) Act 2003.
Income Tax (Pay As You Earn) Regulations 2003.
Income Tax (Pay as you Earn) (Amendment) Regulations 2007. 
Income Tax (Qualifying Child Care) Regulations 2007 and 2008.
National Insurance Contributions Act 2008, 2011 and 2014.
Occupational and Personal Pension Schemes (Automatic Enrolment) Regulations 2010.
Pensions Act 2008, 2011.
Social Security Act 1989.
Social Security Administration Act 1992.
Social Security Contributions & Benefits Act 1992.
Social Security Contributions Regulations 2001.
Social Security (Incapacity for Work) Act 1994.
Social Security (Overpayments and Recovery) Regulations 2013.
Statutory Maternity Pay and Statutory Adoption Pay (Curtailment) Regulations 2014.
Maternity Allowance (Curtailment) Regulations 2014.
Statutory Maternity Pay (General) Regulations 1986.
Statutory Maternity Pay (Medical Evidence) Regulations 1987.
Statutory Paternity Pay and Statutory Adoption Pay (General) Regulations 2002. 
Statutory Paternity Pay and Statutory Adoption Pay (Weekly Rates) Regulations 2002. 
Statutory Paternity Pay and Statutory Adoption Pay (Administration) Regulations 2002. 
Statutory Paternity Pay (Adoption) and Statutory Adoption Pay (Adoptions from Overseas) (No.2) Regulations 2003. 
Statutory Paternity Pay and Statutory Adoption Pay (Parental Orders and Prospective Adopters) Regulations 2014. 
Statutory Sick Pay (General) Regulations 1982.

For the Local Government Pension Scheme

The Local Government (Discretionary Payments) Regulations 1996.
The Local Government (Early termination) (Discretionary Compensation) (England and Wales) Regulations 2006.
The Local Government Pension Scheme (Amendment) Regulations 2015.
The Local Government Pension Scheme (Miscellaneous Amendments) Regulations 2014.
The Local Government Pension Scheme (Transitional Provisions, Savings and Amendment) Regulations 2014.
The Local Government Pension Scheme Regulations 2013 (as amended).
The Local Government and other Officers' Superannuation Act 1922.
The Local Government Superannuation Act 1937.
The Local Government Superannuation Act 1953.
The Local Government Superannuation Regulations 1974.
The Local Government Superannuation Regulations 1986.
The Local Government Pension Scheme Regulations 1995.
The Local Government Pension Scheme Regulations 1997.
The Local Government Pension Scheme Transitional Provisions Regulations 1997 (as amended).
The Local Government Pension Scheme (Benefits, Membership and Contributions) Regulations 2007.
The Local Government Pension Scheme (Administration) Regulations 2008.
The Local Government Pension Scheme (Transitional Provisions) Regulations 2008.

For the NHS Pension Scheme

NHS Pension Scheme Regulations 1995 and 2015.
NHS Pension Scheme Amendment Regulations, 2011, 2012, 2013, 2014, 2015, 2016 and 2017.

For the Teachers’ Pension Scheme

Teachers’ Pension Regulations 2010 and 2014.
Teachers’ Pension Regulations (Miscellaneous Amendments) 2011.
Teachers’ Pension Regulations (Amendments) 2012, 2013, 2014.
Teachers’ Pension Regulations (Amendments) (no 2) 2012.

Health and Safety

Health & Safety at Work Act 1974.
Management of Health and Safety at Work Regulations 1999.
Reporting of Injuries, Diseases and Dangerous Occurrences Regulations 2013.
Safety Representatives and Safety Committees Regulations 1977. 
Workplace (Health, Safety and Welfare) Regulations 1992.
Control of Substances Hazardous to Health Regulations 1999.
Health and Safety Information for Employees Regulations 1989.
Health and Safety (First Aid at Work) Regulations 1981.

How do we collect information from you 

Data is collected via:

Human Resources

Job application forms submitted online, by email, post.
HR forms submitted by new and current employees and managers – online and email.
HR forms submitted by schools – online and email.
Agency – pro-forma containing worker information via 3rd party online system or email form for off-framework agencies.
Data gained during the processing of DBS applications – online and hard copy.
Information gained during the management of employment processes – emails, letters, notes of interviews and meetings, reports - hard copy and electronic.
Occupational health referrals – online form.
Information supplied as part of miscellaneous internal HR processes such as performance management, disciplinary, grievances, wellbeing/health, whistleblowing etc.
Personal data is supplied by the employees via an online system supplied by third parties delivering various employee benefits.
Verbally from employees to confirm identity when calling HR with personal queries.

Covid-19 vaccination status for designated posts required to visit care homes.


Personal data is supplied by the individual employee via on line forms, emails, paper documents including bank account details,P45’s, pensions history, union membership.
Personal data is supplied via third parties electronically and/or hard copy  – pension providers, AVC provider, HMRC, HM Courts and Tribunal Service, Contributions Agency, the council’s employee benefits providers including Sodexo and NHS Fleet Solutions, trade unions - GMB and Unison.
iTrent HR system- absences, overtime, expenses/mileage claims.
HMRC notifications are uploaded directly into the HR system.

Health and Safety

Online accident / incident report forms.
Emailed forms sent by schools and internal council services.

Learning and Development
Learning and development software system. 

Email –

iHasco :
Skillsoft :

What type of information is collected from you 

Human Resources

Personal details including names, addresses, email addresses, date of birth, qualifications, examinations, career history, skills, experience etc.
Emergency contacts.
Equalities data – the nine protected characteristics - age, sex, race, disability, gender reassignment, pregnancy/maternity, marriage/civil partnership, religion/belief and sexual orientation.
Criminal convictions and cautions.
Information regarding employment processes and procedures such as discipline, grievance, capability, ill health. 
Sickness absence dates and reasons.
Health and absence information.


Date of marriage, NI number, personal bank account number, tax code, AVC payment value, salary sacrifice benefit value, value of official deductions including union subscriptions, court order payments, jury service payments etc.
Monthly variable data including overtime hours, standby claims, mileage and other expenses.
Maternity and other family related absence dates.

Health and Safety

Full name, personal address, telephone number, date of birth, gender.
Details of accident / incident and resulting injuries.
Details of First aid treatment given.

Learning and Development

Full name.
Email address.

How we use the information you have provided 

Human Resources

Application forms – to assess applicants for shortlisting and appointment and to determine suitability for employment at the outset and ongoing.
Contact details - to communicate with employees.
Employment records – respond to queries, record employment history.
Pay data – to enable processing of salary and other payments.
Pensions – for enrolment.
To manage employees through the employee lifecycle such as joining, probation, employment history, job transfers, processes such as capability, disciplinary, absence management, restructuring, salary changes, retirement, termination, transfer to other organisations etc.
Equalities data – used to create a profile of the organisation.
To assess the employees’ application for specific benefits e.g. childcare vouchers.
To confirm identity.
Workforce monitoring and statistical analysis, including statutory workforce returns.
Performance management.
Publication of information on the council’s website to comply with the Local Government Transparency Code 2015.


All associated payroll processing including payments for various absences.
Pension scheme contribution and entitlements administration.
Managing all calculations and processing of statutory and voluntary deductions from pay.

Health and Safety

Accident Investigation and reports.

Learning and Development

For the individual’s record of learning.
To analyse attendance and future course planning.


For administering the HR information system, validating data, reporting, development of functionality and testing new releases.


We may also share your information with our auditors, Deloitte for the purpose of conducting an annual audit of our accounts.

Who has access to the information about you 

Human Resources

HR Business Partner team, HR People Services for all HR processes before and during and after employment and for data validation, issue resolution and statistical purposes.

HR People Services, HR Business Partner team and Payroll team for assessment, administration and overall management of pay and benefit schemes. 

Authorised managers and senior staff of relevant service area or as part of investigations linked to various HR processes.


Payroll team in order to legally and accurately process payroll.

Health and Safety

Health and Safety Advisors to allow for investigation of accidents, complete reports and benchmarking against other councils.

Learning and Development

Learning and Development team to retain record of learning and manage learning events.

iTrent Systems team

iTrent Systems team has access to all systems and data.

All Human Resources teams

Agency workers/consultants appointed to work within HR in order to undertake relevant HR service related activities.


Access to the HR system for information about their employees.

Who we may share your information with  

Human Resources 

3rd party occupational health services provider

Organisations providing services for pre-employment checks:

Disclosure & Barring Service.
Atlantic Data
Thames Valley Police – safeguarding issues/criminal activity
Teaching Regulation Agency - part of statutory pre-employment checks before and during employment. And during inspections to demonstrate compliance with employment practices and referrals where there is concern about professional conduct. performance. 
3rd party organisations in any TUPE transfer process - personal data will need to transfer to new employer.
Pension providers - Berkshire Pension Fund (BPF) for the Local Government Pension Scheme (LGPS)
Teachers Pensions Scheme
NHS pension
i-Connect – software for transferring LGPS data to the BPF

Regulatory bodies  
Department for Education
Care Quality Commission
Health and Care Professionals Council

All internal service areas including schools/relevant managers - where information relates to their employees. AfC Bursar support as part of the Traded Services administration process in relation to the delivery of HR and Payroll services to schools.
3rd party employee benefits service provider

Giveall2Charity – Give as you earn scheme provider
Recognised Trade Unions - to meet statutory consultation requirements related to organisational change/TUPE processes (previously Voice)


3rd party provider of on line job application system, JGP

3rd party provider – supplier of temporary agency workers, PSR 
Public Sector Resourcing

3rd party eye test voucher provider – Specsavers

Various 3rd parties requesting references or continuous service date confirmation etc

Royal Borough’s internal and external audit service - to ensure compliance with internal controls and external regulations.

For Employment Tribunal cases – commissioned Counsel.


Pension providers – LGPS administered by Berkshire Pension Fund, TPS, NHS- see above, Prudential – AVC provider , AVC Wise - 3rd party for administration of contributions and payment of pension benefits. I-Connect – third party software provider for data transfer to the Berkshire Pension Fund.

For processing of payroll deductions:

Department Works Pension (DWP).
HM Courts and Tribunal Service - for processing deductions.

Various 3rd parties requesting earnings confirmation for mortgages, loans etc

Royal Borough's internal and external audit service - to ensure compliance with internal controls and external regulations.
National Fraud Initiative (NFI) – sharing of data between public bodies in order to detect fraud.
Royal Borough's Finance service - for financial processing/budget management.
Trade Unions - check off information for union members, see above.

Health and Safety

Health and Safety Executive - where it is a requirement under RIDDOR Regulations
Line Managers including schools- accident details will be shared and discussed with the employee’s line manager or supervisor.
Council’s Insurance Manager and insurers - to manage litigation and comply with insurance conditions.

Learning and Development

3rd party provider of the learning and development software system to enable management of learning records:
iHasco :

Individually commissioned 3rd party training providers. 

ITrent systems team

Royal Borough ICT service desk - as necessary as part of HR help desk function.

Royal Borough schools - the organisation collects data for and on behalf of schools as the employer which may be required by the individual schools for the purposes of reporting and budget monitoring at a school level.
Royal Borough Finance service - for the purpose of pay modelling and budgeting.
Office of National Statistics - to satisfy the requirements of statutory returns. This is mostly anonymised but may include individual details
3rd party HR system software provider - are given access to our database for; helpdesk call resolution, issue resolution, system development consultancy and reporting
3rd party software used by Payroll – iConnect, Learning and Development iHasco.
National Fraud Initiative - in order to identify cross organisational fraud. Covers areas such as multiple employments, those in receipt of pension and salary, those in receipt of benefits and salary etc

How long we store your information

Human Resources

Unsuccessful job applicants – six months.
Employment records – seven* years after termination of employment (6 tax years plus current tax year) in electronic document management system, plus word, and PDF documents on secure network.
Employee pay and benefits records – seven* years after termination of employment in word, excel and PDF documents on secure network.


All payroll related records – seven* years after termination of employment. Electronically within Payroll system, excel/word documents on secure network.
Associated pension records - 10 years after change. Electronically within Payroll system, excel/word documents on secure network.
Overtime and other monthly claims from schools - seven years after termination of employment. 

Health and Safety

Accident records including RIDDOR– three* years or where a child, until age 21. COSHH – 40 years.


 The archived file will be stored for eight years

Learning and Development

Record of learning seven# years after course completed or person leaves organisation on the management of learning records software system.

iTrent Systems team

Emails to help desk - personal information. Until the Call is resolved + plus 12 month for monitoring of issues. Outlook email / shared inbox and Excel Spreadsheet on secure network.
Phone calls to help desk – personal. Until the Call is resolved + plus 12 months for monitoring of issues. Excel Spreadsheet on secure network.

* For those working with children, 25 years.
# For those working with children 40 years.

Does your service utilise automate decision making? – No.