Privacy Notice

We use data about you to provide you with services, communicate with you, to plan our services, and to personalise your experience. We will not share your details with third parties for marketing purposes unless you agree. Oxford City Council will never sell data to third-party marketing companies.

We collect personal data including your name, address, email address and phone number, as well as demographic information such as age and gender. Where relevant to the services we provide, we may also collect financial data such as income and savings, and health and care data where needed. Some data is collected automatically through cookies when you use our website.

We share your personal data with third-party organisations delivering services on our behalf, central government and its agencies, health and social care providers, and the police. Any sharing with delivery partners is governed by agreements that maintain your privacy to the same standard we hold ourselves to, and data shared is strictly limited to what is necessary for delivering services.

You have the right to request a copy of the data we hold about you (a Subject Access Request), to ask us to correct inaccurate data, and to request erasure of data we no longer need. If you have a concern, you can email dataprotection@oxford.gov.uk or contact the Corporate Governance Manager by post. You also have the right to complain to the Information Commissioner’s Office if you believe your data is not being handled properly.

Our website uses cookies, which are small files placed on your device. They cannot be used to identify you personally. We use them to measure how many people are using our services and to analyse anonymised data to improve how those services work. You can restrict or block cookies through your browser settings, though doing so may affect how parts of the website function.

We use a range of measures to protect your personal data from unauthorised access or disclosure, including physical security, encryption at rest and in transit, multi-factor authentication, and intrusion detection systems.

We operate a data retention and disposal scheme based on legal and operational requirements. Data is disposed of securely as soon as it is no longer needed for processing purposes.