Seeking views on possible changes to public sector food and catering policy.

Closes 4 Sep 2022

Privacy notice and data protection

Confidentiality and data protection information

1. Who is collecting my data?
The data controller is the Department for Environment, Food and Rural Affairs (Defra). You can contact Defra’s Data Protection Officer at:


Data Protection Manager
Information Rights Team
Department for Environment, Food and Rural Affairs
Area 1E, Nobel House
17 Smith Square
London, SW1P 3JR.


Any questions about how we are using your personal data and your associated rights should be sent to the above contact.
2. What of my data is being collected and how is it used? What is the legal basis for the processing?
Your personal data (contact information) is collected and stored on our secure server to process the responses collected during this public consultation.

This consultation is being conducted in line with the Cabinet Office “Consultation Principles” which can be found at:

A summary of responses to this consultation will be published on the government website at: An annex to the consultation summary may list all organisations that responded but will not include personal names, addresses or other contact details.

Defra may publish the content of your response to this consultation to make it available to the public without your personal data, personal name and private contact details.

If you answer ‘Yes’ in response to the question asking if you would like anything in your response to be kept confidential, you are asked to state clearly what information you would like to be kept as confidential and explain your reasons for confidentiality. The reason for this is that information in responses to this consultation may be subject to release to the public or other parties in accordance with the access to information law (these are primarily the Environmental Information Regulations 2004 (EIRs), the Freedom of Information Act 2000 (FOIA) and the Data Protection Act 2018 (DPA)). We have obligations, mainly under the EIRs, FOIA and DPA, to disclose information to particular recipients or to the public in certain circumstances. In view of this, your explanation of your reasons for requesting confidentiality for all or part of your response would help us balance these obligations for disclosure against any obligation of confidentiality. If we receive a request for the information that you have provided in your response to this consultation, we will take full account of your reasons for requesting confidentiality of your response, but we cannot guarantee that confidentiality can be maintained in all circumstances.

If you answer ‘No’ in response to the question asking if you would like anything in your response to be kept confidential, we will be able to release the content of your response to the public, but we won’t make your personal name and private contact details publicly available.

The processing is necessary for the performance of a task in the public interest per Art 6 of the UK GDPR.
3. Who will my data be shared with?
Responses may be shared with other government departments. There may be occasions when Defra will share the information you provide including any personal data, with external analysts. This is for the purposes of consultation response analysis only. Where Defra shares your personal data with third parties, we will ensure that we have the right data sharing agreements in place to protect your data and to govern the relationship between Defra and the third party.
4. Can I opt out?
Yes, if you wish to opt out you can opt by emailing who will delete all your personal data. Alternatively, you can write to:

Consultation Coordinator
2nd Floor
Foss House
Kings Pool
1-2 Peasholme Green
5. What will happen if I opt out?
If you opt out, your personal data and response provided as part of this consultation will be deleted, and you will not be part of the consultation process.
6. Retention period or criteria used to determine the retention period
Your personal data will be kept by us for three years in line with our standard information retention policy.
7. Will my data be used for automated decision-making or profiling
The information you provide is not connected with individual decision making (making a decision solely by automated means without any human involvement) or profiling (automated processing of personal data to evaluate certain things about an individual).
8. Will my data be transferred outside of the EEA? If it will, how will it be protected?
The data you provide will not be transferred outside the European Economic Area.
9. What are my rights?
A list of your rights under the UK General Data Protection Regulation and the Data Protection Act 2018 (DPA 2018), is accessible at:
10. How do I complain?
You have the right to lodge a complaint with the ICO (supervisory authority) at any time. Should you wish to exercise that right full details are available at:
11. Where can I find more information?
For further information on how your personal data is processed, please See Defra’s Personal Information Charter for details on how we request and store personal information.
Would you like your response to be confidential?