Norfolk Fire & Rescue Service privacy notice

This document provides further information on how Norfolk Fire & Rescue Service (NFRS), a service provided by Norfolk County Council, uses your personal information.  By ‘use’ we mean the various ways it may be processed, including storing and sharing the information.

We also provide further details regarding who we are, how long we use your information for, your rights under the GDPR and how to exercise them on our website. Alternatively, you can ask us for a copy of this information.

We use personal information about members of the public, businesses and organisations to provide fire prevention, fire protection and emergency services to the communities that we serve.  We also collect and use personal information of our own staff.  This includes:

  • Firefighting, responding to road traffic accidents and other emergency situations
  • Carrying out home safety visits
  • Fire investigations at homes, business and public areas
  • Fire prevention awareness, advice and assistance
  • Business fire safety advice and inspections
  • Regulatory, licensing and enforcement actions for business fire safety
  • Improving community safety
  • Reducing arson
  • Checking the quality and effectiveness of our services
  • Maintaining our own records and accounts
  • To check our services meet legal duties, including for diversity and equality of opportunity
  • Supporting and managing our staff
  • CCTV on our buildings and vehicles for the prevention and detection of crime
  • Investigating complaints about our services.

The information we hold includes information you have provided to us.  We also receive information from:

  • You
  • Your family members, employer or representative
  • Your landlord
  • Other departments of Norfolk County Council – Trading Standards, Registration Services
  • Other public bodies such as the police, ambulance service, local councils and the NHS
  • Law enforcement agencies – in relation to our enforcement responsibilities
  • Charities and support services who you have given permission to share your information for fire safety reasons
  • Other organisations such as companies who you have given permission to share your information for security or key holding purposes

For example, NHS England, the Royal College of General Practitioners and fire and rescue services in England work together to share information to allow fire service staff to offer Home Safety Checks for people who have a higher risk of experiencing a house fire.  This is by sharing data that lets NFRS identify home address of people over 65 so we can offer home fire safety checks to households identified with a possible higher fire risk.  If you want more information about how NHS England use and share your information, please visit the NHS website.

The information we collect and use includes:

  • Name
  • Address
  • Date of birth
  • Contact details
  • NHS number
  • Racial or ethnic origin
  • Religious or philosophical beliefs
  • Sexual orientation
  • Health data including disabilities
  • Criminal convictions and offences
  • Gender
  • Relationships information
  • Religion
  • Language
  • Education and training details
  • Employment history and current employment
  • Financial position
  • Personal and social history 

We collect and use different kinds of information, including:

For taking 999 calls and responding to an emergency:

  • Name
  • Address
  • Contact details
  • Health data including disabilities
  • Gender
  • Relationships information
  • Language
  • Personal and social history

For advising on fire risks at home:

  • Name
  • Address
  • Contact details
  • Health data including disabilities
  • Gender
  • Relationships information
  • Language
  • Personal and social history

To identify community fire risks:

  • Name
  • Address
  • Contact details
  • Health data including disabilities
  • Gender
  • Relationships information
  • Language
  • Personal and social history

For business fire safety advice and enforcement action:

  • Name
  • Address
  • Contact details
  • Health data including disabilities
  • Gender
  • Relationships information
  • Language
  • Personal and social history
  • Licenses, certificates held

To check our services meet legal duties, including for diversity and equality of opportunity:

  • Name
  • Address
  • Date of birth/age
  • Contact details
  • Racial or ethnic origin
  • Religious or philosophical beliefs
  • Sexual orientation
  • Health data including disabilities
  • Gender
  • Relationships information
  • Language 

Special Category data is defined as information concerning your racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union activity, genetic data, biometric data, health, sex life and sexual orientation.  Only where it is relevant may we collect and use these types of data i.e. assessing your application.  In particular, information concerning your health, religion, ethnicity and sexual orientation will be relevant.

Information concerning any criminal convictions is afforded a similar special level of protection, and we may collect and use this information where it is relevant, subject to the same safeguards.

For ordinary personal data (any data which is not Special Category data), we have legal grounds to process this information because it is necessary for the fulfilment of our legal obligation/public task under:

  • The Fire and Rescue Services Act 2004
  • The Regulatory Reform (Fire Safety) Order 2005
  • The Manufacture and Storage of Explosives Regulations 2005
  • The Petroleum (Consolidation) Act 2014
  • The Dangerous Substances and Explosive Atmospheres Regulations 2002

For special category data, we have legal grounds to process this information where it is in the necessary for reasons in the substantial public interest.  This will include where it is necessary to carry out any of our statutory functions.  The law includes safeguards to protect the use of your special category data and any information concerning criminal convictions.

All the reasons we use your personal data meet at least one of the following legal reasons:

  • To carry out the duties of a Fire and Rescue Service under The Fire and Rescue Services Act 2004 and The Regulatory Reform (Fire Safety) Order 2005
  • To meet the requirements of the Health and safety at Work Act 1974
  • To carry out enforcement action as a statutory authority under the Environment and Safety Information Act 1988 and and The Regulatory Reform (Fire Safety) Order 2005
  • To carry out duties as a licensing authority under The Manufacture and Storage of Explosives Regulations 2005, The Petroleum (Consolidation) Act 2014 and The Dangerous Substances and Explosive Atmospheres Regulations 2002
  • To work with other public organisations such as the police, ambulance service and local councils for public safety
  • For the investigation, detection and prevention of crime or if we are required to do so by law
  • For staff recruitment, employment or social security reasons
  • To protect someone from danger from themselves or others.  This could be danger to you, people around you, our staff or staff in other services like the Police or Ambulance Service.
  • Explicit consent for activities that help us in carrying out our public power of improving general community safety

We may share your personal information with:

  • Other departments of Norfolk County Council – Trading Standards
  • Other blue light emergency services – police and ambulance so we can respond to incidents, coastguard
  • Public utilities, for example to cut off a power supply in an emergency
  • Local councils, if we have serious concerns about your wider safety that a local council can help with
  • Other local authority – Broads Authority
  • Welfare organisations, if you agree to your information being shared, including Community safety volunteers and voluntary organisations and charities
  • Other government department –  Home Office for anonymised information about our activities used for national fire statistics, HMRC, Environment Agency
  • The National Fire Chief’s Council
  • The Health and Safety Executive
  • Other law enforcement agencies – courts, prosecuting authorities, solicitors, probation
  • Insurance companies and loss adjusters where they are authorised to act on your behalf following an incident at your property
  • Voluntary organisations and charities – RSPCA 

Information will only be shared when it’s strictly necessary, to help us meet a legal duty, you agree, or it’s fair to share under another data protection reason.  You may have the right to refuse.

We share information without your specific consent as it is reasonable and necessary to do so to fulfil our public tasks or it is otherwise in the substantial public interest to do so.  The law imposes safeguards to protect your privacy in these circumstances.

Additionally, subject to contractual and other legal safeguards, we will share your information with organisations commissioned to provide services to you and others.

Finally, we may also share your information across different departments of the County Council, where it is necessary for our public tasks or functions to do so.

For example, NHS England, the Royal College of General Practitioners and fire and rescue services in England work together to share information to allow fire service staff to offer Home Safety Checks for people who have a higher risk of experiencing a house fire.  This is by sharing data that lets NFRS identify the home address of people over 65 so we can offer home fire safety checks to households identified with a possible higher fire risk. If you want more information about how NHS England use and share your information visit the NHS website.

Where appropriate, we may seek your specific consent to use your information in certain ways.

The information is stored electronically, on Service’s records management systems, known as Fortek Vision, CFRMIS and IRS.  Additionally, information is securely stored in other mediums, including email accounts and in paper files.  We do not process your information outside of the European Economic Area.

We do not make automated decisions about you.

This privacy notice was updated in May 2018

Was this webpage helpful?