The use and disclosure of personal data is governed in the United Kingdom by the Data Protection Act 2018 (the Act). In order to effectively deliver our services North Wales Fire and Rescue Service (NWFRS) may need to process your personal data.

The Welsh Government, along with the three fire and rescue services of Wales have a strategy which sets out a vision for delivering intervention activities for children and young people.  The purpose is to encourage safe, healthy lifestyles and make a positive contribution to the wellbeing of the individual. One such intervention is the Phoenix project.  This is aimed at reducing anti-social behaviour and fire related issues.

Why do we need to process your information?

We have obligations under the Fire and Rescue Service Act 2004 which include the promotion of fire safety through provision of information and advice and safeguarding. In order to meet these requirements we offer the Phoenix Project to young persons.  In order to deliver our project and to record it’s impact and success we need to process personal data.

What types of personal data do we process?

In order to deliver our service we will collect the following information regarding the young person: name, address, image, date of birth, gender, ethnicity and any medical condition or disability.  We will also process data regarding any behavioural or special educational needs.  As part of the programme individuals may be transported in NWFRS vehicles, if this is the case then CCTV images may be captured.  As participants are under the age of 18 we will also process the name and contact details of any parent/guardian(s).

Where do we get the personal data we process?

Information may be provided by you, members of your family or other referring agencies.

What is our lawful basis for processing personal data?

Our lawful basis for processing your data for this purpose is found in the UK GDPR Article 6(1)(c) Necessary for compliance with a legal obligation to which we are subject. This is because we are required to provide fire safety advice. Any special category data we capture is also processed under Article 9 2(g) substantial public interest on the basis of the Fire and Rescue Services Act 2004.

What security measures do we use when processing your personal data?

We take our data processing responsibilities seriously and only record the minimal amount of information necessary for the required purpose.  Where you information is captured in writing it will be held until it is transferred to our computer system before being securely destroyed.  Information held on our computer systems is secured with multiple layers.

What disclosures do we make of your personal data?

We may share the data we hold with other agencies that we believe are most appropriate to assist you based upon our assessment.  This may include the local authority departments who can provide services to assist individuals. We may also share information with North Wales Police where we feel it is necessary for them to provide support or assistance regarding crime, anti-social behaviour, vulnerability or safeguarding.  We may also share information with educational or health services.

In most cases we are unlikely to share your personal information and you will be made aware of a referral if we do, unless it is not in your best interests to do so when considering yours or others safety.

How long do we retain your personal data?

Any paper records collected will securely destroyed within 30 days of the course completion date.  Information that has been transferred to our computer system will remain as a record of an individuals attendance on the course.  This information will be kept for 7 years from the completion of the course.  Any vehicle CCTV images will be kept for a much shorter time and may be overwritten within 24 hours.  CCTV footage would only be stored for a longer period if it were to form part of an investigation.

What are your rights over your personal data we process, and how can you exercise them?

Your rights are explained fully in our general privacy notice which you can find here

How can I raise a concern about the use of my personal data?

You can contact our Data Protection Officer if you have any questions or concerns about how we process your personal data.

Post:

Data Protection Officer
North Wales Fire and Rescue Service HQ
Ffordd Salesbury
St Asaph Business Park
St Asaph
Denbighshire
LL 17 0JJ

Email: dpo@northwalesfire.gov.wales

If you remain unsatisfied you have the right to contact the Information Commissioner

Information Commissioner

The Information Commissioner is responsible for ensuring we meet our obligations and can be contacted in the following ways:

By post:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Online at: Information Commissioner's Office

Date of last update

We last updated this privacy notice on 13th February 2025. We keep this privacy policy under regular review and update it if any of the information in it changes.