Privacy notice

These are the standards you can expect from the Environment Agency when we collect, hold or use your personal information when you use the flood map for planning service.

We do this in line with data protection law, including the General Data Protection Regulation (GDPR) and the Data Protection Act (DPA) 2018.

We are a data controller – this means we determine how and why your personal data is processed.

You can learn more from our personal information charter which provides information on:

  • how to contact us
  • our Data Protection Officer contact details
  • your rights
  • how you can contact the regulator, including how to complain

Which data we collect

When you use our GOV.UK service, we place small files called cookies onto your computer to collect information about how you use it. You can find out more about cookies and how to manage them.

When you submit feedback through our GOV.UK service, we collect:

  • your email address if you include it
  • your Internet Protocol (IP) address, and details of which version of which web browser you use

We are lawfully allowed to process your personal data because you consent to us doing so. You have the right to withdraw this consent at any time by contacting us.

When you request flood risk assessment data we collect:

  • your name
  • your email address

The lawful basis we rely on to process this personal data is legal obligation - the processing of personal data is necessary for compliance with making a request for information under the Environmental Information Regulations.

Why we collect your data

We collect data to:

  • improve the service by monitoring how it’s used and analysing feedback
  • respond to any feedback you provide, if you ask us to
  • provide you with flood risk assessment data if you have requested it

We will not share or disclose your personal data to any party outside the Environment Agency without your consent unless we are lawfully able to do so.

How long we retain your data

After 36 months we delete all personal data created by making requests for flood risk assessment data.

After 24 months we delete all personal data from feedback if you provided it.

We may retain anonymous feedback for longer than this.

Keeping your data secure

We have procedures and security features in place to keep your data secure once we receive it. It’s stored on secure servers in the European Economic Area (EEA).

Any data you send is at your own risk

Sending information over the internet is generally not completely secure, and we can’t guarantee the security of your data while it’s in transit.

Your rights

You have rights under the General Data Protection Regulation (GDPR), including the right to access your data and the right to complain to the Information Commissioner’s Office.

You have the right to withdraw consent. You can contact us to do this.

You can find out more about your rights in our personal information charter.

Links to other websites

GOV.UK contains links to other websites. This privacy policy only applies to GOV.UK and doesn’t cover other government services and transactions that we link to. These services, such as GOV.UK Verify, have their own terms, conditions and privacy policies.

If you go to another website directly from this one, read its privacy policy to find out what it does with your information.

Following a link to GOV.UK from another website

If you come to GOV.UK from another website, we may receive information from the other website. We don’t use this data. You should read the privacy policy of the website you came from to find out more about this.