Privacy notice – English National Concessionary Travel Scheme


This privacy notice covers applications and change notifications for the English National Concessionary Travel Scheme (ENCTS), which includes older person’s and disabled person’s bus passes.

East Sussex County Council takes data protection seriously. Please be assured that your information will be used appropriately in line with data protection legislation, will be stored securely and will not be processed unless the requirements for fair and lawful processing can be met.

What information is being used?

  • Name
  • Address
  • Date of birth
  • Gender
  • Telephone number (optional)
  • Email address (optional)
  • Photograph
  • National Insurance number (optional)
  • Proof of age (older person applications only)
  • Proof of disability (disabled applications only)
  • Location data (anonymous, unless in the circumstances set out in the legal basis)
  • Financial data

How will your information be used?

It will be used to determine eligibility for the scheme and enable East Sussex County Council (the Council) to provide a concessionary bus pass for use on local bus services throughout East Sussex and England.

We aim to maintain high standards, adopt best practice for our record keeping and regularly check and report on how we are doing. Your information is never sold for direct marketing purposes.

Our staff are trained to handle your information correctly and protect your confidentiality and privacy.

Your information is not processed outside of the European Economic Area.

How long will your information be kept for?

Please see the Records Retention and Disposal Schedule for the Council.

Sharing your information

Your details will be shared with our partner organisation, Euclid, who produce, and issue passes on the Council’s behalf.

The Council has a duty to protect the public funds it administers. To prevent and assist in the detection of fraud, the information you provide on any forms may be shared with other public bodies responsible for auditing or administering public funds, including checks on credit reference agencies and taking part in the National Audit Office’s National Fraud Initiative.

The County Council will share information regarding the times and locations that passes have been used in the event that the police are carrying out safeguarding investigations relating to persons they believe to be vulnerable.

Any sharing of personal data is always done:

  • on case-by-case basis
  • using the minimum personal data necessary
  • with the appropriate security controls in place
  • in line with legislation.

Information is only shared with those agencies and bodies who have a "need to know" or where you have consented to the sharing of your personal data to such persons.

We may use the information we hold about you to assist in the detection and prevention of crime or fraud. We may also share this information with other bodies that inspect and manage public funds.

Use of third party organisations

East Sussex County Council may share your information with trusted external organisations to process your data on our behalf.

Your details will be processed by the Council’s partner organisation, Euclid, who are under contract to produce, and issue passes on the Council’s behalf.

Any organisation commissioned by the Council will be under contractual obligation to comply with data protection legislation.

Your rights

Under data protection legislation, you have the right:

  • to be informed why, where and how we use your information
  • to ask for access to your information
  • to ask for your information to be corrected if it is inaccurate or incomplete
  • to ask for your information to be deleted or removed where there is no need for us to continue processing it
  • to ask us to restrict the use of your information
  • to ask us to copy or transfer your information from one IT system to another in a safe and secure way, without impacting the quality of the information
  • to object to how your information is used
  • to challenge any decisions made without human intervention (automated decision making)

Please visit data subject rights for further details.

How to find out more or complain

Should you have any further queries on the uses of your information, please speak directly to our service:

Transport Hub
Tel: 01273 335075

To complain about the use of your information, please contact our Customer Services Team or our Data Protection Officer.

Further information on making a complaint.

You can also contact the ICO for further information or to make a complaint:

Information Commissioner's Office
Wycliffe House
Water Lane
Cheshire SK9 5AF

Phone: 0303 123 1113 (local rate) or 01625 545 745 if you prefer to use a national rate number.

Email ICO

Report a concern on the ICO website