Request to light up a civic building or fly a flag privacy notice

Who is the data controller for the information I provide?

Liverpool City Council is the data controller for the information you provide to us.

Why we are collecting your data?

We collect this information so that we can:

  • assess your application
  • confirm your identity and that of the organisation you represent
  • send reports to Government departments

What is the legal basis for processing your information?

LCC will be processing personal data to assess requests to light up a civic building or fly a flag according to the following lawful basis:

  • Article 6 (1) (e) GDPR ‘processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.’
  • Article 9 (2) (b) GDPR provides MHCLG with the lawful basis for processing ‘special category (sensitive) data: ‘processing is necessary for the purposes of carrying out the obligations and exercising specific rights of the controller or of the data subject in the field of employment and social security and social protection law in so far as it is authorised by Union or Member State law or a collective agreement pursuant to the Member State law providing for appropriate safeguards for the fundamental rights and the interests of the data subject.’
  • Article 9(2)(g) GDPR “processing is necessary for reasons of substantial public interest, on the basis of Union or Member State law which shall be proportionate to the aim pursued, respect the essence of the right to data protection and provide suitable and specific measures to safeguard the fundamental rights and the interests of the data subject.”

The information we may collect

The categories of information being processed include:

  • organisation name and contact details
  • name and contact details of organisation representative

Do I have to provide this information and what will happen if I don’t?

If you are not able to provide some or all of the information we may not be able to assess your application to light up a civic building or fly a flag.

How will my information be stored?

Data is stored in a range of different places, including in the LCC IT systems including email systems.

LCC takes the security of your data seriously. We have internal policies and controls in place to try to ensure that your data is not lost, accidentally destroyed, misused or disclosed and is not accessed except by its employees in the performance of their duties.

Who will my information be shared with?

All organisations we pass your information to will have an information-sharing agreement with us to ensure they meet the standards of the GDPR and the Data Protection Act 2018, and will be covered by a legal bas allowing them to collect, use and share your personal information.

We may share your data with:

  • government departments, and other public bodies e.g. Department for Culture, Media and Sport (DCMS), Ministry for Housing, Communities and Local Government
  • other Liverpool City Council teams so they can carry out their statutory roles and support our service such as complaints, legal services

How long will you keep this information for?

Personal data will not be retained for longer than necessary in relation to the purposes for which they were collected. There is usually a legal reason for keeping your personal information for a set period of time – this ranges from months for some records to years for more sensitive records.

We securely destroy all information once we have used it and no longer need it.

Will this information be used to make automated decisions about me?


Will my data be transferred abroad and why?


What rights do I have when it comes to my data?

The law gives you a number of rights that relate to how your personal information is used by us. For further details see For further details see How to access your data.

Where can I get advice?

View our Help and advice page for more information.