Privacy notice for Direct Debits

Who is responsible for your information?

We, Waverley Borough Council, are the data controllers for the personal information we collect to process direct debits.

Some council services use a third party processor to manage your direct debit. They act as a data processor on our behalf. This means that we determine the means and purpose for the processing of you data, and have controls in place to protect your information.

Purpose of processing your personal data

We need to process your personal information to setup a direct debit for you, to monitor ongoing payments, and to cancel the direct debit as necessary.

Categories of personal data and lawful basis

To provide this service, we may need to process some or all of the following categories of personal information:

• contact details
• bank details (including account number and sort code)
• your payment history.

Under data protection legislation, this processing is permitted because it forms part of the performance of a contract.

Who we share your personal data with

Bacs Payment Schemes Limited manages the direct debit payment scheme and we pass your applications to them. 

Bacs, in conjunction with your bank, will process your direct debit mandate.

Bacs is the data controller for your information once we, or a third party processor, transfer your information to them. You can find more information about how Bacs handle your information and the direct debit scheme on Bacs direct debit privacy notice.

How we collect your data

We collect:

• information you give us
• confirmation and reports about your direct debit payments, which we receive either directly from Bacs or from a third party processor.

More information

For further information about how we process your personal data, your data rights, how to access your data, or how to contact our Data Protection Officer, please see our main privacy notice.