Liverpool City Council is fully committed to complying with Data Protection Act 2018 legislation, including the General Data Protection Regulation (GDPR), which regulates how we process personal information.


Liverpool City Council's privacy notice

The council's privacy notice explains how we collect and use personal data, tells you about your rights and gives contact details for help and advice.

Sports and Recreation privacy notice

The service level privacy notice for Sports and Recreation explains how we collect, store and process your data for the services we deliver, including Lifestyles. 

The Sport and Recreation service works under the legal obligations and conditions of both the Principles of the Data Protection Act (DPA) and the Articles of the new European General Data Protection Regulation (GDPR).

Whilst the majority of the GDPR is similar to the DPA, and will be reflected in a new Data Protection Act, there are some critical changes which effect both ourselves as an organisation and you as an individual.

The legal basis for processing your information

Previously we have relied on obtaining consent in order to provide you with member and participation data information relating to both our services and your individual membership accounts and member promotions, although we understand that in many cases there was an expectation on your behalf that the organisations involved would automatically do this.

Our obligations

We make every effort to keep all the personal data we hold secure, whether held electronically or as paper copies. We also ensure that only members of staff with a legitimate reason to access your information have permission to do so.

Your information will only be kept for a specific amount of time after which it will be securely destroyed.

Even though we are required to share your information with authorised partner organisations for statistical analysis, the vast majority of this is anonymised data with no reference to individual participants. We will ensure this is done in a secure manner, and the information is proportionate in order for them to analyse our provision. As the data controller we will make sure that they comply with our required information sharing standards and protocols.

Organisations we may be required to share your information with
Organisation Type of data shared Format Used for
Liverpool Clinical Commissioning Group Anonymised Electronic Statistical reports
Sport England Anonymised Electronic Funding bids and statistical reports
Merseyside Sports Partnerships Anonymised Electronic Statistical reports
Public Health Team Anonymised Electronic Clinical research and statistical reports
University of Liverpool Anonymised Electronic Academic research
Liverpool John Moores University Anonymised Electronic Funding bids and statistical reports


It is very important that Sport and Recreation is able to plan and realign its delivery of services to meet the needs of members and other centre users.

To do this, we carefully use the information we collect about how services are delivered and who is using these services. This also includes the statutory functions of Public Health which is now part of the council’s responsibility.

In certain cases, such as safeguarding inquiries and criminal investigations we are legally obliged to provide information to the police. However, we have procedures in place that allows this to be carried out in a secure and confidential manner.

Will this information be used to take automated decisions about me? 


Will my data be transferred abroad?


What rights do I have when it comes to my data?

You have a number of rights that are set out on the How to access your data page of the council website.

Where can I get advice?

View the Help and advice page on the council website  for more information.