Privacy notice

This privacy notice explains how personal data is managed when you apply for access to the Dangerous Dogs Index.

If you have any queries about the content of this privacy notice, please email dogsindex@defra.gov.uk.

Section 1 of the Dangerous Dogs Act 1991 prohibits the owning, keeping, breeding, gifting and sale of five types of dog:

  • Pit Bull Terrier
  • Dogo Argentino
  • Fila Brasileiro
  • Japanese Tosa
  • XL Bully

The Dangerous Dogs Index (the Index), is operated by Defra as the regulator for the purposes of issuing exemption certificates.

Enforcement agencies investigate breaches or potential breaches of law and undertake compliance checks for enforcement purposes.

The Index is a register of exempted prohibited dogs. Defra processes applications from police officers to allow them access to the Index.

This access is to aid investigations concerning breaches or potential breaches of law, compliance checks and for enforcement purposes.

Who collects your personal data

The Department for Environment, Food and Rural Affairs (Defra) is the controller for the personal data we collect:

Department for Environment, Food and Rural Affairs
Seacole Building
2 Marsham Street
London
SW1P 4DF

If you need further information about how Defra uses your personal data and your associated rights you can contact the Defra data protection manager at data.protection@defra.gov.uk or at the above address.

The data protection officer for Defra is responsible for checking that Defra complies with legislation. You can contact them at DefraGroupDataProtectionOfficer@defra.gov.uk or at the above address.

Defra processes applications from individuals in Scotland and Wales on behalf of the Scottish and Welsh governments. We are joint controllers for any relevant personal data.

What personal data we collect and how it is used

We collect the following information when you apply for access to the Index:

  • name
  • contact details
  • organisation
  • role or job title
  • email address

We will use your personal data for the following purposes:

  • processing your application
  • assessing your eligibility
  • issuing of credentials to access the Index
  • your use of the Index

Lawful basis for processing your personal data

The lawful basis for processing your personal data is for the performance of a task carried out in the public interest which is laid down by law in the legislation. This legislation set out Defra’s general purposes as the designated agency to discharge these functions. The task is the operation of the Dangerous Dogs Index for England, Wales and Scotland.

The Secure Access Licence page lists the legislation that gives the lawful basis for processing your personal data.

Consent to process your personal data

The processing of your personal data is not based on consent. You cannot withdraw it.

Who we share your personal data with

We do not share the personal data collected under this privacy notice with other organisations.

How long we hold personal data

We will keep your personal data for whichever is the longer period of up to 7 years or for as long as you have access to the Index.

What happens if you do not provide the personal data

If you do not provide the personal data, then you will not be able to access the Index.

Use of automated decision-making or profiling

The personal data you provide is not used for:

  • automated decision making (making a decision by automated means without any human involvement)
  • profiling (automated processing of personal data to evaluate certain things about an individual)

Transfer of your personal data outside of the UK

We will only transfer your personal data to another country that is deemed adequate for data protection purposes.

Your rights

Based on the lawful processing above, your individual rights are:

  • the right to be informed
  • the right of access
  • the right to rectification
  • the right to restrict processing
  • rights in relation to automated decision making and profiling

More information about your individual rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018), can be found on the Information Commissioner’s Office website.

Complaints

You have the right to make a complaint to the Information Commissioner’s Office at any time.

Personal information charter

Defra’s personal information charter explains more about your rights over your personal data.