Skip to content

GDPR Compliance Statement

Last Updated: 25th November 2025

Our Commitment to Data Protection

Real Care Deal is committed to processing data in accordance with its responsibilities under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Because this website is a partnership project, we want to be clear about who is responsible for your data.

1. Data Controller

The Data Controller determines the purposes and means of processing personal data. For all information submitted through this website:

  • The Data Controller is: Norfolk County Council
  • Registration Number: Z534327X (Information Commissioner’s Office)
  • Address: County Hall, Martineau Lane, Norwich, NR1 2DH

2. Lawful Basis for Processing

Under Article 6 of the UK GDPR, we must have a valid lawful basis for processing your personal data. We rely on the following:

  • Consent (Article 6(1)(a)): When you voluntarily complete a “Contact Us” or “Make a Pledge” form, you are giving us clear, affirmative consent to forward that information to Norfolk County Council. You may withdraw this consent at any time by contacting us, though this will not affect the lawfulness of processing based on consent before its withdrawal.
  • Legitimate Interests (Article 6(1)(f)): We use limited essential cookies and security tools (like Google reCAPTCHA) to ensure the website remains secure and functional. This is necessary for our legitimate interest in preventing fraud and maintaining website availability.

3. Data Minimisation & Storage Limitation

We adhere strictly to the principle of Storage Limitation (Article 5(1)(e)).

This website operates on a “Pass-Through” model:

  • Personal data submitted via forms is not stored on the Real Care Deal web servers.
  • Data is instantly transmitted via secure email to Norfolk County Council’s internal systems.
  • Once the transmission is complete, the digital footprint of your submission is removed from our website’s backend.

4. Your Rights

As a data subject, you have the following rights regarding your personal data held by Norfolk County Council:

  • The right to be informed: You have the right to know how your data is used (as explained in this statement).
  • The right of access: You can request a copy of the data held about you.
  • The right to rectification: You can correct data that is inaccurate or incomplete.
  • The right to erasure: You can ask for your data to be deleted (“the right to be forgotten”).
  • The right to restrict processing: You can limit how your data is used.

To exercise any of these rights, please contact the Norfolk County Council Data Protection Officer directly.

5. Contact the Data Protection Officer (DPO)

If you have any concerns about how your data is being processed, please contact:

Data Protection Officer
Norfolk County Council
County Hall, Martineau Lane
Norwich, NR1 2DH

Email: dpo@norfolk.gov.uk