Privacy Notice

Who we are:

National non-domestic rates claims is operated by the Education & Skills Funding Agency (ESFA) which is a part of the Department for Education (DfE). For the purpose of data protection legislation, the DfE is the data controller for the personal data processed as part of this service.

How we will use your information:

We receive your personal data via the DfE Sign-In service.
The aim for this service is to allow you to claim funding for national non-domestic rates.

The nature of your personal data we will be using:

The personal data that this service collects and uses is as follows:

  • your full name
  • email address

Why our use of your personal data is lawful:

In order for our use of your personal data to be lawful, we need to meet one (or more) conditions in the data protection legislation. For the purpose of this service, the relevant condition is:

  • Article 6(1)(e) UK GDPR, to perform a public task as part of our function as a department.

How long we will keep your personal data:

The Department for Education will only keep your personal data as part of this service for as long as:

  • it is needed for the purposes set out in this notice
  • the law requires us to

For NNDR claims, your personal data will be kept for 7 years.

Your data protection rights:

More information about how the DfE handles personal information is published here:

Under the Data Protection Act 2018, you are entitled to ask if we hold information relating to you and ask for a copy, by making a ‘subject access request’.

For further information and how to request your data, please use the ‘contact form’ in the Personal Information Charter at
under the ‘How to find out what personal information we hold about you’ section.

If you need to contact us regarding any of the above, please do so via the DfE site at:

Further information about your data protection rights appears on the Information Commissioner’s website at:
Individual rights | ICO.

Last updated

We may need to update this privacy notice periodically so we recommend that you revisit this information from time to time. This version was last updated in March 2022.

Contact Info:

If you have any questions about how your personal information will be used, please contact us at and enter dotnet & NNDR as a reference. For the Data Protection Officer (DPO) please contact us via and mark it for the attention of the ‘DPO’.