Skip to main content

UK Shared Prosperity Fund Privacy Notice

Privacy notice relating to the processing of personal data by Rhondda Cynon Taf County Borough Council Lead Authority for the purpose of the UK Shared Prosperity Fund.


This privacy notice is intended to provide information about how Rhondda Cynon Taf County Borough Council (referred to as ‘RCTCBC’, ‘Council’, ‘Local Authority’, ‘we’) will use (or ‘process’) personal data about individuals for the purpose of being the lead authority for South East Wales Allocation of the UK Shared Prosperity Fund (UKSPF).

Whilst we have tried to make this privacy notice as clear and concise as possible, the categories of personal data we process may vary depending on monitoring guidance from UK Government.

This notice should be read in conjunction with;

  • The Council’s corporate privacy notice
  • UK Shared Prosperity Fund - GOV.UK (

The Data Controller

The Council is the data controller for the personal data processed for the purposes of the UK Shared Prosperity Fund.

The Council is registered with the Information Commissioner’s Office (ICO) as a controller under reference Z47870100.

Queries relating to this privacy notice

If you have any questions or queries relating to this privacy notice, please contact the [Regeneration Service]:

By email:

By telephone: 01443 281122

In writing: Regeneration Service, Sardis Road, Pontypridd CF37 1DU

Who we are what we do

The UK shared prosperity fund is a central pillar of the UK Government’s Levelling up agenda and provides funding for local investment until March 2025.  The fund aims to provide pride in place and increase life chances by investing in communities and place, supporting local business, people, and skills.

RCTCBC is the designated lead authority for the UKSPF in South East Wales and will receive the area’s funding allocation and undertake strategic management of the fund on behalf of the 10 local authorities within South East Wales.

As a lead authority we will enter into a formal memorandum of understanding with UK Government, receive and distribute the area’s funding allocation to local authority partners and undertake regular financial and performance monitoring and reporting requirements of the fund. 

Whose personal data we process

We may process personal data relating to the following as a lead authority for the UKSPF

  • Beneficiaries of the fund. (Individual/Business/Staff)

The categories of personal data we process

We may process the following categories of personal data as a Lead Authority for the UKSPF.


  • Contact information, including name, address, telephone numbers and email address.
  • Identifying details, including date of birth, national insurance number and payroll number.
  • Payroll financial data.
  • Individual personal circumstances including employment experience and educational attainment.


  • Companies House registration number
  • Employees Name, telephone number and email address
  • Payroll Financial Data
  • Bank account details

Why we process the personal data

We process the personal data as a Lead Authority for the UKSPF. This may include but is not limited to the following activities;

  • Process grant payments to South East Wales Local Authorities.
  • Complete monitoring checks to ensure the funding allocated has been spent in accordance with the UKSPF funding agreement.
  • Verify project outputs and outcomes.
  • Provide summary reports to Department of Levelling up and Housing and Communities (DLUHC)
  • Provide data to 3rd party partners, who have been commissioned by DLUHC to complete evaluations of the UKSPF.

Our lawful basis for processing the personal data

Under the General Data Protection Regulation (GDPR), our lawful basis for processing the personal data to is;

  • Public Task - Article 6 (e) – processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

The primary legislation, regulations and guidance that supports this includes, but is not limited to;

  • Localism Act 2011
  • Housing Grants, Construction & Regeneration Act 1996
  • Well Being of Future Generations (Wales) Act 2015

Who or where we get the personal data from

We may receive the personal data from the following categories of individuals or organisations;

  • Local Authorities in South East Wales who have been allocated UKSPF funding.

Who we share personal data with

We may share the personal data with the following key organisations to fulfil the Councils obligations as lead auhtority for the UKSPF.

When sharing the personal data, we only share the minimum amount necessary in relation to the purpose.



Local Government

  • Department for Levelling Up, Housing and Communities

Monitoring and Evaluation purposes

Other Council departments:

  • Finance

To issue UKSPF grant payments.

Evaluation Partners.

  • BMG Research


Requirement as a lead authority to share data with evaluation partners commissioned through DLUHC

How long we retain the personal data

We retain the personal data contained within UKSPF Investment Plan records for:

Length of time


Personal data will be held for up to 7 years from the point Investment Plans are approved. This is anticipated to be January 2030.

Requirement set out by the Department for Levelling Up, Housing and Communities. 

In keeping with the General Data Protection Regulation storage limitation principle, records are periodically reviewed. Not all personal data is retained. Only personal data that is relevant to the record is retained for the entire retention period Information that has no long term or evidential value is routinely destroyed in the normal course of business. 

Your data protection rights

The General Data Protection Regulation (GDPR) gives individuals important rights, including the right of access to the personal data that the Council holds about you.

Click here for further information on your information rights and how to exercise them. 

Your right to make a data protection complaint to the Council

You have the right to complain to the Council if you believe we have not handled your personal data responsibly and in line with good practice.

You can do this by contacting the Regeneration Service directly via one of the following communication methods. Most concerns can be resolved relatively quickly through a simple phone call or email;

  • Email :
  • Telephone : 01443 281122
  • In writing : Regeneration Service, Sardis Road, Pontypridd CF37 1DU

Alternatively, you can raise a formal complaint via the Council’s Customer Feedback Scheme using the following link (Make a comment, compliment or complaint online) or you can contact the Council’s Data Protection Officer at

Your right to make a data protection complaint to the ICO

You also have the right to complain to the ICO if you are unhappy with how we have used your data. However, we encourage you to contact us first and provide us with an opportunity to look into your concern and put things right.

The ICO can be contacted:           

  • Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
  • Helpline number: 0303 123 1113
  • Website: