Contact APHA privacy notice
Updated 11 November 2025
Applies to England, Scotland and Wales
This privacy notice explains how we use and process your personal data when using the Contact APHA service.
If you have any queries about the content of this privacy notice, email enquiries@apha.gov.uk.
Who collects your personal data
Department for Environment, Food and Rural Affairs (Defra) is the controller for the personal data we collect.
Defra is also the controller for the personal data processed when acting through the Animal and Plant Health Agency.
If you need further information about how we use your personal data and your associated rights, you can contact the Defra data protection manager at data.protection@defra.gov.uk.
The Defra data protection officer is responsible for checking that we comply with legislation. You can contact them at DefraGroupDataProtectionOfficer@defra.gov.uk.
APHA also works closely with the Scottish and Welsh Governments. We are joint controllers for any relevant personal data:
What personal data we collect and how it is used
We collect your:
- email address - we use this to respond to your enquiry
- views and opinions, if you provide feedback
Lawful basis for processing your personal data
The lawful basis for processing your personal data is consent.
Consent to process your personal data
The processing of your personal data is based on consent. To withdraw consent, email enquiries@apha.gov.uk.
How long we hold personal data
We will keep your personal data for no longer than 3 years.
What happens if you do not provide the personal data
If you do not provide the personal data we will not be able to respond to your enquiry.
Use of automated decision-making or profiling
The personal data you provide is not used for:
- automated decision making (making a decision by automated means without any human involvement)
- profiling (automated processing of personal data to evaluate certain things about an individual)
Transfer of your personal data outside of the UK
We will only transfer your personal data to another country that is deemed adequate for data protection purposes.
Your rights
Based on the lawful processing above, your individual rights for consent are:
- the right to be informed
- the right of access
- the right to rectification
- the right to erasure
- the right to restrict processing
- the right to data portability
- rights in relation to automated decision making and profiling
Find more information about your individual rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018).
Complaints
You have the right to make a complaint to the Information Commissioner’s Office at any time.
Personal information charter
Our personal information charter explains more about your rights over your personal data.