Skip to content Skip to search
My Norwich

Procurement privacy notices

Purchase Cards for Business Use Privacy Notice

About us

Norwich City Council is the data controller for purchase cards for business use and we have a legal obligation to process your personal information. You may contact our data protection and information security officer by emailing  or by calling 0344 980 3333.

What will we do with your data?

We use it to process your purchase card application and to carry out administrative functions. We intend to keep your data for seven years after the end of the financial year in which your purchase card was last used as stated in our Retention Schedule available on our website (management of the approvals process for purchase, including investigations).

What are your rights?

You have the right to request access to your personal information to:

  • ask for errors to be corrected
  • restrict how your information is used
  • object to how it is processed
  • request that your data is deleted.

You also have the right to lodge a complaint with the Information Commissioner's Office if you are not happy with how your data is processed.

What are the consequences of you not providing data?

The council will be unable to provide you with a purchase card for business use.

How will we share your data?

Information provided for purchase cards for business use is shared internally with the business relationship and procurement team; audit and externally with our purchase card provider, Royal Bank of Scotland PLC and the RBS Group in order that they may carry out their statutory duties. Apart from where previously stated, we do not pass your details to third parties unless we are lawfully able to do so for the prevention and detection of crime and fraud, or for the collection of taxes.