Town Hall and Create Building CCTV privacy notice

The following privacy notice applies to closed-circuit television (CCTV) in the respective reception, public areas and specified spaces within the Town Hall and the Create Building, located at The Boulevard, Crawley RU10 1UZ.

It also covers the external areas which surround the overall building. 

This notice explains how personal information is going to be used, what it is used for, who it might be shared with and why and for how long it is to be kept.

What information is collected?

  • CCTV cameras will record images of individuals entering and exiting the Town Hall. This will include images of individuals in all areas of the ground-floor reception space. Images will also be recorded in the Mezzanine space, the public lift lobby, on the stairwell leading up to that level and the council’s public meeting rooms
  • CCTV cameras will record images of individuals entering and exiting the Create Building. This will include images of individuals in all areas of the reception space and back-of-house corridors on the ground floor. Images will also be recorded in the lift lobby and on the stairwell leading to the upper levels of the buildings.
  • CCTV cameras will record images of individuals moving through the external areas that surround the overall building.

The CCTV cameras will operate 24 hours a day, 7 days a week. However, the majority of personal data collected inside the building will be during the hours of 8am to 6pm, Monday to Friday.

CCTV recordings of individuals and real-time footage are only accessible to authorised members of council staff.

Why do we collect your personal information?

The purpose of collecting personal data through the use of CCTV is:

  • for the safety of all council staff, users and visitors to the Town Hall and the Create Building
  • for the prevention and detection of crime
  • for protecting council property and assets
  • deterring violent or aggressive behaviour towards council officers

Data Controller

Crawley Borough Council is registered as a Data Controller with The Information Commissioner’s Office (Registration Number Z5327706).

The council (CBC) complies with The Data Protection Act 2018 and the GDPR.

We ensure that your personal data is processed fairly, kept safe and secure and retained for no longer than is necessary.

The Data Protection Officer (DPO) for CBC is the Head of Governance, People & Performance. If you have any concerns or questions about how we look after your personal information, email

The legal basis for processing personal data

We are relying on GDPR Article 6(1) (f), namely that processing is necessary for the legitimate interests pursued by the controller (Crawley Borough Council) or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject (individuals) which require protection of personal data, in particular where the data subject is a child.

The legitimate reasons for using CCTV video surveillance and for processing personal data include the prevention and detection of crime, safeguarding council staff, users and visitors and ensuring compliance with health and safety procedures.

Who we share data with

We may pass your personal data with:

  • Internal departments (for incident investigation)
  • Agencies with whom we must co-operate, such as the police
  • HM Court Services

This will be based on law enforcement, regulation, criminal prosecutions and law proceedings. We may need to share personal data to establish, exercise or defend legal rights this includes providing personal data to others for the investigation of fraud and the prevention and detection of crime.

We will not share data with third parties for marketing purposes.

Retention periods

Personal data will not be retained for longer than necessary for the purposes for which it was collected.

CCTV camera footage will be stored for 28 days unless required for investigation in which case it will be retained for as long as is required in respect to that process.


You have the right to:

  • Be informed of data processing (which is covered by this privacy notice)
  • Access your personal information (known as a Subject Access Request)
  • Have inaccuracies corrected
  • Have information erased
  • Restrict processing
  • Data portability
  • Intervention in respect of automated decision-making or profiling
  • Withdraw consent (if it is the legal reason why we use your data)
  • Complain to the Information Commissioner’s Office (see below)

To exercise any of these rights, email the Data Protection Officer (DPO) at

Where can I get advice?

If you have any worries or questions about how your personal information is handled, email our Data Protection Officer (DPO) at

For independent advice about data protection, privacy and data rights, you can contact the Information Commissioner’s Office (ICO):