Privacy Notice
This Privacy Notice is designed to help you understand how and why NYtech services operated by
North Yorkshire Council processes your personal data. This notice should be read in conjunction with
The Council has appointed Veritau to be its Data Protection Officer. Their contact details are:
Information Governance Office
Veritau
West Offices
Station Rise
York
YO1 6GA
infogov@northyorks.gov.uk // 01904 552848
Who are we?
North Yorkshire Council is a ‘Data Controller’ as defined by Article 4(7) of the UK General Data Protection Regulation (UK GDPR).
NYtech is a commercial trading arm of North Yorkshire Council. The NYtech platform advertises a range of digital forensic and other related services to the commercial and public sectors, these services can be purchased by contacting NYtech.
NYtech collects your personal information to facilitate the purchasing of the advertised services. The NYtech team directly provide the purchased services, with administration elements typically administered by a specific team within North Yorkshire Council or a third-party provider. Where the provider is acting as a data processor, privacy information for the provision of service will be supplied by the data controller/ organisation your account is associated with. Where the organisation is acting as a joint controller, privacy information can be found on the Council’s website.
What personal information do we collect?
In order to deliver our service, we need to collect the following personal data:
Names and Contact Details
Addresses
Job Title
Financial Information
At the outset, processing is limited to basic personal data. During forensic examination, additional processing may be necessary and may involve all types of personal, special category data and criminal conviction data present on the device, as dictated by the material discovered.
Why do we collect your personal information and what is our lawful basis for processing?
We collect your personal information for the following purposes:
To facilitate the delivery of the services purchased
To manage customer invoicing and payment for services purchased
To keep you up to date with any changes to the services you purchase
Where you have opted in to receive newsletters, we will also use your information to provide you with information and/or news, updates and resources from NYtech.
Where you have opted in to receive updates on training courses will use your information to send you information about training courses NYtech has on offer
To send out an annual communication to all users to ask them to check information in their account is up to date.
North Yorkshire Council relies on the following lawful basis to process your personal data:
The lawful basis that the Council relies on to process your personal data depends on the service you have chosen to purchase.
UK GDPR Article 6(1)(a)- the data subject has given consent to the processing of his or her personal data for one or more specific purposes
UK GDPR Article 6(1)(e) – processing is necessary for the performance of a task carried out in the public interest;
UK GDPR Article 6(1)(f)- processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party.
When processing special category data, the Council will rely on the following lawful basis:
Article 9(2)(f) Processing is necessary for the establishment, exercise or defence of legal claims or whenever courts are acting in their judicial capacity
UK GDPR Article 9(2)(g)-processing of your special category data is necessary for reasons of substantial public interest (with a basis in law), meeting Schedule 1, Part 2 of the Data Protection Act 2018 as below:
10. Preventing or detecting unlawful acts
11. Protecting the public
18. Safeguarding of children and individuals at risk
When processing Criminal Conviction Data, the council will rely on the following Article 10, Schedule 1 condition:
11. Preventing or detecting unlawful acts
18. Safeguarding of children and individuals at risk
35. Administration of accounts used in commission of indecency offences involving children
Who do we obtain your information from?
We collect information from:
consumers
individuals
witnesses and victims
businesses
internal and external partners and agencies
enforcement agencies
Who do we share this information with?
In order to enable the delivery of services purchased, your information will be shared with our service providers via the SLA online site. Depending on the service(s) purchased information may be shared with a specific team within North Yorkshire Council who administer the service or a third-party partner such as Veritau.
How long do we keep your information for?
Information will be held on our SLA Online system. Your information will be deleted if your account has been inactive for three years or if we are notified of a change by the organisation you are associated with which affects your account status.
Other relevant transparency Information
For more information about how we use your data, including your privacy rights and the complaints process, please see our Corporate Privacy Notice.
Ref: 001
Version: 01
Date of Publication: 26/5/2026