Guidance

The Convention on International Trade in Endangered Species of Wild Fauna and Flora (CITES) - UK voluntary Pernambuco (Paubrasilia echinata) stockpile registration privacy notice

Published 7 August 2025

© Crown copyright 2025

This publication is licensed under the terms of the Open Government Licence v3.0 except where otherwise stated. To view this licence, visit nationalarchives.gov.uk/doc/open-government-licence/version/3 or write to the Information Policy Team, The National Archives, Kew, London TW9 4DU, or email: psi@nationalarchives.gov.uk.

Where we have identified any third party copyright information you will need to obtain permission from the copyright holders concerned.

This publication is available at https://www.gov.uk/government/publications/the-convention-on-international-trade-in-endangered-species-of-wild-fauna-and-flora-cites-uk-voluntary-pernambuco-paubrasilia-echinata-stockpile/the-convention-on-international-trade-in-endangered-species-of-wild-fauna-and-flora-cites-uk-voluntary-pernambuco-paubrasilia-echinata-stockpile

This privacy notice explains how your personal data will be used in the voluntary Pernambuco stockpile registration system. If you have any queries about the content of this privacy notice, email CITES.UKMA@defra.gov.uk.

Who collects your personal data

Department for Environment, Food and Rural Affairs (Defra) is the controller for the personal data we collect:

Department for Environment, Food and Rural Affairs
Seacole Building
2 Marsham Street
London
SW1P 4DF

CITES (the Convention on International Trade in Endangered Species of Wild Fauna and Flora) is an international agreement between governments. Its aim is to ensure that international trade in specimens of wild animals and plants does not threaten the survival of the species.

Defra with APHA (Animal and Plant Health Agency) – an executive agency of Defra, are the CITES UK Management Authority (UKMA) and are responsible for implementing CITES in the UK.

This includes:

  • issuing permits and certificates for bringing CITES-listed species into or out of the UK
  • working with other countries and the CITES Secretariat to regulate trade in endangered species across borders

If you need further information about how Defra uses your personal data and your associated rights you can contact the Defra data protection manager at data.protection@defra.gov.uk or at the above address.

The data protection officer for Defra is responsible for checking that Defra complies with legislation. You can contact them at DefraGroupDataProtectionOfficer@defra.gov.uk or at the above address.

What personal data we collect and how it is used

We collect your:

  • name
  • contact details
  • address where the Pernambuco stockpile is held
  • details of the Pernambuco stockpile for which you are the owner, the keeper or both
  • details of how you acquired the Pernambuco stockpile for which you are the owner, the keeper or both
  • details of your planned use of the Pernambuco stockpile for which you are the owner, the keeper or both

We will use your personal data to help track the origin and sustainability of Pernambuco wood stockpiles in the UK. This supports efforts to improve monitoring, enforcement, and promote responsible and sustainable trade practices.

Lawful basis for processing your personal data

The lawful basis for processing your personal data is based on consent.

The processing of your personal data is based on consent. You can withdraw consent at any time by emailing CITES.UKMA@defra.gov.uk.

Who we share your personal data with

We may share the personal data collected under this privacy notice with:

  • CITES UKMA Scientific Authority for plants, the Royal Botanic Gardens Kew – this is so they can assist Defra in assessing the sustainability and monitor the rate of consumption of Pernambuco wood in the UK
  • the licensing authority for CITES in the UK, APHA – we may share data to support applications for CITES permits and compliance action

We respect your personal privacy when responding to access to information requests. We only share information when necessary to meet the statutory requirements of the Environmental Information Regulations 2004 and the Freedom of Information Act 2000.

How long we hold personal data

We will keep your personal data for 7 years or until you contact us to delete it as you are no longer the owner or keeper of a Pernambuco stockpile.

What happens if you do not provide the personal data

If you do not provide the personal data, this may impact the robustness of the register to provide information on the sustainability and traceability of Pernambuco in the UK and we will not be able to email you about the register or invite you to take part in customer research.

Use of automated decision-making or profiling

The personal data you provide is not used for:

  • automated decision making (making a decision by automated means without any human involvement)
  • profiling (automated processing of personal data to evaluate certain things about an individual)

Transfer of your personal data outside of the UK

We will only transfer your personal data to another country that is deemed adequate for data protection purposes.

Your rights

Based on the lawful processing above, your individual rights are:

For more information about your individual rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018).

Complaints

You have the right to make a complaint to the Information Commissioner’s Office at any time.

Personal information charter

Our personal information charter explains more about your rights over your personal data.

Back to top