Guidance

APHA international trade privacy notice

Updated 30 September 2024

Applies to England, Scotland and Wales

© Crown copyright 2024

This publication is licensed under the terms of the Open Government Licence v3.0 except where otherwise stated. To view this licence, visit nationalarchives.gov.uk/doc/open-government-licence/version/3 or write to the Information Policy Team, The National Archives, Kew, London TW9 4DU, or email: psi@nationalarchives.gov.uk.

Where we have identified any third party copyright information you will need to obtain permission from the copyright holders concerned.

This publication is available at https://www.gov.uk/government/publications/animal-and-plant-heath-agency-privacy-notices/apha-international-trade-privacy-notice

Your data is being collected by

The data controller is the Department for Environment, Food and Rural Affairs (Defra) for personal data that you give to APHA.

APHA is an Executive Agency of Defra. You can contact APHA’s Data Protection Manager by email at: data.protection@defra.gov.uk.

APHA also works with the Scottish Government and Welsh Government, who are joint controllers with APHA for any relevant personal data.

Any questions about how Defra and APHA are using your personal data and your associated rights should be sent APHA’s Data Protection Manager by email at: data.protection@defra.gov.uk.

The Data Protection Officer responsible for monitoring that Defra and APHA are meeting the requirements of the legislation can be contacted by email at: DefraGroupDataProtectionOfficer@defra.gov.uk.

What personal data is collected

We collect the following items of personal data:

  • your name, address and contact details
  • details of the live animals for which you are the owner and/or keeper
  • details of the products of animal origin or plants and plant products for which you are the importer and/or exporter
  • records of APHA visits and their results

How your data has been obtained

Your data may be provided to APHA by an agent acting on your behalf when applying for export certification or by a person responsible for an import consignment who is acting on your behalf as an importer.

Why APHA is using your data

APHA has a statutory requirement to collect personal data for the purpose of providing certification, licences, premises approvals and premises registrations for International Trade within the European Union (EU) and for imports from non-EU countries.

In addition, for CITES, personal data is collected to process applications under EU Council Regulation 338/97 and Commission regulation 865/2006 and under section 7 of the Wildlife and Countryside Act for Registration of Birds.

No statutory requirement exists for APHA to collect personal data to provide export certification for live animals and products of animal origin for non-EU trade. Personal data is collected whilst carrying out this duty to facilitate non-EU trade as personal details are required to be included within the export certification to meet the import requirements of the Competent Veterinary Authorities of non-EU countries.

Where required by law, data may be published on UK Government or EU websites.

More information about APHA can be found at gov.uk/apha.

Legal bases for processing include:

  • the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
  • for compliance to a legal obligation on the controller
  • the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering a contract
  • consent has been given to process data for one or more specified purposes

Collection of your data is a statutory requirement to enable APHA to issue certification, and licenses, and provide premises approvals and registrations for the facilitation of International Trade with the European Union and to enable APHA to issue licences to import from non-EU countries. It is not a statutory requirement for you to provide personal data for APHA to issue export certification for international trade to non-EU countries, however, this is a requirement of the Competent Authority of destination during the certification procedure of your export consignment, enabling your consignment to meet the import requirements of the destination Competent Authority.

Consequences of not providing the necessary data

For statutory and public interest purposes it is necessary to provide data as stated in the relevant legislation.

For a current list of legislation managing International Trade please visit www.legislation.gov.uk.

Who APHA shares your data with

Personal data may be made available to local authorities and other public bodies in the UK and EU to meet legal requirements.

We may share data with Defra and its agencies, Welsh Government, Scottish Government, Food Standards Agency, Food Standards Scotland, Public Health, and other organisations, and enforcement authorities.

We may have to release information (including personal data and commercial information) under the following legislation:

  • UK General Data Protection Regulation (UK GDPR)
  • Data Protection Act 2018
  • Freedom of Information Act 2000
  • Environmental Information Regulations 2004

We will not allow any unwarranted breach of confidentiality and we will not act in contravention of our obligations under UK data protection legislation.

Storing and using personal data outside the UK

A very small percentage of government records containing personal information are selected for permanent preservation at the National Archives. They are made available in accordance with the Freedom of Information Act 2000, as amended by the Data Protection Act 2018.

The data you provide will largely not be transferred outside of the EEA. On rare occasions, when it is lawful and complementary to our work carried out in the public interest, research data may be transferred securely outside of the EEA.

How long APHA holds personal data for

Retention periods are set by considering statutory, regulatory, legal, and security reasons, alongside historic value.

All information in APHA is held in accordance with our retention policy. If you would like more information contact enquiries@apha.gov.uk.

Your rights

Find out about your rights under data protection law.

Complaints

You have the right to lodge a complaint about the use of your personal data at any time with the Information Commissioner’s Office (ICO – the data protection supervisory authority).

APHA’s personal information charter

APHA’s personal information charter broadly sets out details of APHA’s processing of personal data.

Back to top