Guidance

Cefas privacy notice: Fish Health Inspectorate

Updated 19 March 2026

© Crown copyright 2026

This publication is licensed under the terms of the Open Government Licence v3.0 except where otherwise stated. To view this licence, visit nationalarchives.gov.uk/doc/open-government-licence/version/3 or write to the Information Policy Team, The National Archives, Kew, London TW9 4DU, or email: psi@nationalarchives.gov.uk.

Where we have identified any third party copyright information you will need to obtain permission from the copyright holders concerned.

This publication is available at https://www.gov.uk/government/publications/centre-for-environment-fisheries-and-aquaculture-science-privacy-notices/cefas-privacy-notice-fish-health-inspectorate

This privacy notice explains how the Centre for Environment, Fisheries and Aquaculture Science (Cefas) will use your personal data when you submit a form to the Fish Health Inspectorate (FHI). If you have any queries about the content of this privacy notice, email fhi@cefas.gov.uk.

1. Who collects your personal data

Cefas is the controller for the personal data we collect:

Senior Information Risk Owner
Pakefield Road
Lowestoft
Suffolk
NR33 0HT

If you need further information about how Cefas uses your personal data and your associated rights you can contact the Cefas Security team at cefassecurityteam@cefas.gov.uk or by post.

The data protection manager for Cefas is responsible for checking the FHI complies with legislation. You can contact them at cefassecurityteam@cefas.gov.uk.

2. What personal data we collect and how it is used

Personal data we may collect from you when you submit a form includes your:

  • name
  • email address
  • phone number
  • home address
  • business address or the address of a site you want to register, if it’s different from your personal address
  • site contact name and phone number, if it’s not you
  • club name
  • position within an organisation
  • FHI registration or authorisation number

3. Lawful basis for processing your personal data

The lawful basis for processing your personal data is that it is necessary for the performance of a task carried out in the public interest under the Aquatic Animal Health (England and Wales) Regulations 2009.

The processing of your personal data is not based on consent. You cannot withdraw it.

5. Who we share your personal data with

We may share the personal data collected under this privacy notice with the Environment Agency and National Resources Wales.  They have limited access to information which is relevant to their regulatory controls. We may also share information for the detection or prevention of crime.

We respect your personal privacy when responding to access to information requests. We only share information when necessary to meet the statutory requirements of the Environmental Information Regulations 2004 and the Freedom of Information Act 2000.

6. How long we hold personal data

We will keep your personal data for as long as you are the official contact for your site registration. When a site relinquishes its registration, your details will be retained for an additional 7 years.

7. What happens if you do not provide the personal data

If you do not provide the personal data, you will not be able to submit the form, which may prevent you from carrying out the required task.

8. Use of automated decision-making or profiling

The personal data you provide is not used for:

  • automated decision making (making a decision by automated means without any human involvement)
  • profiling (automated processing of personal data to evaluate certain things about an individual)

9. Transfer of your personal data outside of the UK

We will only transfer your personal data to another country that is deemed adequate for data protection purposes.

10. Your rights

Based on the lawful processing above, your individual rights are:

Find out about your individual rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018).

11. Complaints

You have the right to make a complaint to the Information Commissioner’s Office at any time.

12. Personal information charter

Our personal information charter explains more about your rights over your personal data.

Back to top