Privacy notices - Building regulations privacy notice

Updated: 30 April 2026

Contents

The type of personal information we collect

We currently collect and process the following information for clients, domestic clients, contractors and designers:

  • full name
  • address
  • phone number
  • email address

The personal data we process may also include the following sensitive personal data:

  • information relating to disabilities
  • information relating to competency (for example qualifications and registration to professional bodies)

How we get the personal information and why we have it

Most of the personal information we process is provided to us directly by clients, domestic clients, contractors and designers. It is usually for one of the following reasons:

  • to process your application or the service you need for building regulations compliance
  • to enable us to verify the competency of the designers and contractors in relation to the project
  • to enable us to be able to issue valid certificates or permits and communicate effectively with you about your application
  • if you are the owner of a building or structure that becomes dangerous we may collect your personal information so that we can resolve the issue in line with dangerous building and structure legislation

If you do not provide your name, address, telephone number and email address (if available) we are unable to legally process your building regulation application (The Building Regulations 2010 (as amended), Regulation 14 and Regulation 16).

We also receive personal information indirectly, from the following sources in the following scenarios:

  • if we receive a neighbour complaint, or complaint from a member of the public or organisation in relation to a matter of concern for our service and they provide us with data which relates to you

We use the information that you have given us in order to administer and discharge the functions required of us under the Building Act 1984, the Building Safety Act 2022 and the Building Regulations (as amended) 2010 to enforce:

  • the health, safety and welfare of people in and around buildings
  • the energy efficiency of those buildings

An example of this may include issuing you with statutory notices or contacting you to arrange inspections of your property during construction works or dangerous events.

How the law allows us to use your personal information

The Building Regulations 2010 (as amended), Regulation 13, Regulation 14 and Regulation 18, make it a requirement that any persons who undertakes building work at their premises applies for building control consent.

In submitting a Building Regulation application, you must provide your name, address, telephone number and email address (if available).

The council also has a statutory duty to protect members of the public from dangerous buildings or structures under the Building Act 1984, sections 77, 78 and 79. In doing so it may be necessary to get the name and address of the building or structure owner so that the dangerous condition of the structure or building can be abated or if the council has to exercise its enforcement powers in relation to the matter.

Lawful basis for processing

Under the Data Protection Act 2018 UK General Data Protection Regulation (UK GDPR), the lawful basis for processing is Article 6 UK GDPR:

  • (c) processing is necessary for compliance with a legal obligation to which we are subject
  • (e) we need it to perform a public task

Special category data

Special category data is being processed under Article 9 UK GDPR:

  • (g) processing is necessary for reasons of substantial public interest

Who we share your information with

Information held by the council may be shared with:

  • other council departments such as legal services
  • other relevant local authority building control teams within England or Wales, if your application has been submitted under a partner agent registered with the national LABC partnership scheme
  • other local or national enforcement agencies
  • investigative contractors and other third parties to prevent crime, protect the public form harm or fraud and protect public funds
  • statutory consultants such as Thames Water or the fire and rescue service

Making a request

You are not required to pay any charge for exercising your rights. If you make a request, we have 28 days to respond to you.

To make a request, contact us by:

Service adjustments

If you need service adjustments, contact us by: