Rural Payments Wales: woodland grants: privacy notice

Welsh Government will be the data controller for any personal data you provide in relation to your grant application or request for grant funding. The information will be processed as part of our public task (i.e. exercising our official authority to undertake the core role and functions of Welsh Government) and will help us assess your eligibility for funding.

Before we provide grant funding to you, we undertake checks for the purposes of preventing fraud and money laundering, and to verify your identity. These checks require us to process personal data about you to third party fraud prevention agencies.

If we, or a fraud prevention agency, determine that you pose a fraud or money laundering risk, we may refuse to provide the grant funding you applied for, or we may stop providing existing grant funding to you.

A record of any fraud or money laundering risk will be retained by the fraud prevention agencies, and may result in others refusing to provide services, financing or employment to you.

In order to assess eligibility, we may also need to share personal information relating to your application with:

• Natural Resources Wales (NRW)
• Animal and Plant Health Agency (APHA)
• Veterinary Medicine Directorate
• Welsh local authorities
• Food Standards Agency (FSA) Wales
• Department for Environment, Food and Rural Affairs (Defra)
• other UK Government Agriculture Offices
• regulatory authorities, such as HM Revenue and Customs, local authorities, Health and Safety Executive and the Police

We may also share your information with organisations which deliver training, knowledge transfer and innovation advice and support on behalf of Welsh Government for the purposes of appropriate targeting of support.

Your information, including your personal information, may be the subject of a request by another member of the public. When responding to such requests the Welsh Government may be required to release information, including your personal information, to fulfil its obligations under the Freedom of Information Act 2000, the Environmental information Act 2004, the Data Protection Act 2018 or Commission Regulation No 908/2014.

We will publish details of the amounts paid to agreement holders who have received support under Assimilated EU Law.   Data will be published for all beneficiaries and will include the full name, post town and post code area and district where the agreement holder is resident It will include details of the amounts and schemes for which payment has been made. However, this will not apply for those agreement holders receiving relevant support less than £1,250.00 in the financial year.  

We will keep personal information contained in line with our retention policy. If successful in your application, then your personal data will be kept for ten years after the date when you, as grant recipient, are free from all conditions relating to the grant awarded and all payments have been made. If you are unsuccessful, your details will be kept for one year after the date you provided them.

Under the data protection legislation, you have the right:

• to access the personal data Welsh Government holds on you
• to require us to rectify inaccuracies in that data
• to (in certain circumstances) object to or restrict processing
• for (in certain circumstances) your data to be ‘erased’
• to lodge a complaint with the Information Commissioner’s Office (ICO) who is the independent regulator for data protection.

Welsh Government is committed to handling your personal data safely, securely and only for as long as we need. 

If you have any concerns about how we use your personal data, we encourage you to raise them with the relevant team in the first instance. 

For further details about the information Welsh Government holds and its use, or if you want to exercise your rights under UK GDPR, please see contact details below.

You can contact the Data Protection Officer by emailing or writing to:  

If you wish to make a formal complaint about how the Welsh Government has processed your personal data, you can complain about Welsh Government.

We will acknowledge your complaint and respond within an appropriate timescale, in line with data protection legislation and our complaints process.

The contact details for the Information Commissioner’s Office are:

Should you have any queries regarding this privacy statement please contact the RPW Customer Contact Centre.