Ayrshire Roads Alliance privacy notice

02 October 2025

This notice provides clarification on what information the Ayrshire Roads Alliance (ARA) needs in order to process information regarding individuals when they are providing the following services:

maintenance of public roads,bridges, footways and footpaths
street lighting
traffic calming and road safety
roads design and structural design
parking enforcement and mobility
bus infrastructure and interchange facilities
winter maintenance

Ayrshire Roads Alliance puts measures in place to protect the privacy of individuals throughout this process.

Responsibility for your information

The Ayrshire Roads Alliance is a public sector partnership that delivers shared council roads and transportation services to communities across East Ayrshire and South Ayrshire.

Personal information that is held and processed by each council within the partnership is processed in accordance with data protection law.

For information on the role of the Data Controller, Data Protection Officer and contact details please refer to the Privacy Statement on the respective councils’ websites.

What personal information we need and why

Personal data regarding individuals is required to be collected in order to carry out roads and transportation services.

Personal data is collected when individuals are in contact with the Ayrshire Roads Alliance and includes identifiers such as name and address details.

Lawful basis for processing personal information

The lawful basis for processing personal data are set out in data protection legislation. In this case the lawful basis for processing individuals’ data are:

contract - the processing is necessary for a contract
legal obligation - the processing is necessary for Ayrshire Roads Alliance to comply with the law
public task - the processing is necessary to perform a task in the public interest or for official functions, and the task or function has a clear basis in law

Who we will share your information with and why

The Ayrshire Roads Alliance may receive individuals’ personal data from or share individuals’ personal data with the following organisations:

DVLA
Police Scotland and other emergency services
Strathclyde Passenger Transport
ScotRail
Scottish Environmental Protection Agency
Transerv Scotland
External Contractors and Consultants
Developers
Scottish Public Services Ombudsman
The (UK) Information Commissioner
East and South Ayrshire Councils

The Ayrshire Roads Alliance will also make any disclosures required by law and may also share information with other bodies responsible for:

detecting or preventing fraud, or
auditing and administering public funds

How long we keep your information

The Ayrshire Roads Alliance will only keep your information for the minimum period necessary.

After this time, information is deleted/destroyed in accordance with our Council approved Retention Schedule (PDF 814 KB) which explains how long we keep information for.

Providing accurate information

It is important that we hold accurate and up-to-date information.

If any details have changed, or change in the future, then individuals should ensure that they inform Ayrshire Roads Alliance as soon as possible so that they can update their records.

Individuals' data processing rights

Under data protection legislation, individuals have the right to request access to information about them that ARA holds.

Individuals also have the right to:

object to processing of personal data that is likely to cause, or is causing, damage or distress
prevent processing for the purpose of direct marketing
object to decisions being taken by automated means; and
in certain circumstances, have inaccurate personal data rectified, blocked, erased or destroyed
in certain circumstances, transfer their data to another organisation (data portability)

How to contact Ayrshire Roads Alliance

Individuals can contact the councils:

regarding their data protection rights and the processing of their data
if they have concerns about the way Ayrshire Roads Alliance is collecting or using their personal data

They should raise their concern with the relevant council Data Protection Officer in the first instance. Contact details can be found on their main Privacy Statement, via their websites.