Register a fishery, cropping water or aquaponic system: privacy notice
Published 11 November 2025
This privacy notice explains how the Centre for Environment, Fisheries and Aquaculture Science privacy notices (Cefas) will use your personal data when you register a fishery, cropping water or aquaponic system. If you have any queries about the content of this privacy notice, email: fhi@cefas.gov.uk
1. Who collects your personal data
Cefas is the controller for the personal data we collect:
Cefas Security Team Cefas
Pakefield Road
Lowestoft
Suffolk
NR33 0HT
If you need further information about how Cefas uses your personal data and your associated rights you can contact the Cefas Security team at cefassecurityteam@cefas.co.uk or by post.
The data protection manager for Cefas is responsible for checking that the Fish Health Inspectorate complies with legislation. You can contact them at cefassecurityteam@cefas.gov.uk.
2. What personal data we collect and how it is used
We collect your:
- name
- email address - to send confirmation of your registration
- phone number
- personal address
- address of the site you want to register if it’s different from your personal address
- club name
- position within the organisation
3. Lawful basis for processing your personal data
The lawful basis for processing your personal data is that it is necessary for the performance of a task carried out in the public interest under the Aquatic Animal Health (England and Wales) Regulations 2009.
4. Consent to process your personal data
The processing of your personal data is not based on consent. You cannot withdraw it.
5. Who we share your personal data with
We may share the personal data collected under this privacy notice with the Environment Agency and National Resources Wales. They have limited access to information which is relevant to their regulatory controls.
We respect your personal privacy when responding to access to information requests. We only share information when necessary to meet the statutory requirements of the Environmental Information Regulations 2004 and the Freedom of Information Act 2000.
6. How long we hold personal data
We will keep your personal data for as long as you are the official contact for your site registration. When a site relinquishes its registration, your details will be retained for an additional 7 years.
7. What happens if you do not provide the personal data
If you do not provide the personal data, you will not be able to register a fishery, cropping water or aquaponic system with the Fish Health Inspectorate.
8. Use of automated decision-making or profiling
The personal data you provide is not used for:
- automated decision making (making a decision by automated means without any human involvement)
- profiling (automated processing of personal data to evaluate certain things about an individual)
9. Transfer of your personal data outside of the UK
We will only transfer your personal data to another country that is deemed adequate for data protection purposes.
10. Your rights
Based on the lawful processing above, your individual rights are:
- the right to be informed
- the right of access
- the right to rectification
- the right to restrict processing
- the right to object
Find out about your individual rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018).
11. Complaints
You have the right to make a complaint to the Information Commissioner’s Office at any time.
12. Personal information charter
Our personal information charter explains more about your rights over your personal data.