Privacy notice

This privacy policy applies to the ‘Defra Trade Developer Portal’ service run by the Animal and Plant Health Agency (APHA), an executive agency of the Department for Environment, Food and Rural Affairs (DEFRA).

This specific privacy notice sets out how we will use your personal data as part of our legal obligations regarding the Data Protection Act 2018 and Article 13 &14 of EU General Data Protection Regulation (GDPR).

Your data is collected by:

APHA, the Animal and Plant Health Agency, an executive agency of Defra, responsible for safeguarding animal and plant health for the benefit of people, the environment and the economy

You can contact APHA’s data protection manager at:

Data Protection Manager

Animal and Plant Health Agency

County Hall

Spetchley Road



The reason we are collecting your data and what we are using it for and why we are allowed to process your data:

Our personal information charter explains how we deal with your personal information. It also explains how you can ask to view, change or remove your information from our databases.

The information we ask for includes details about the:

  • exporter (and agent if applicable)
  • official veterinarian
  • animal or animal product
  • destination
  • consignment

We collect and store this data in order to process your application for an export health certificate.

We may use the personal information you give us to contact you about our service. We will not contact you with any marketing information.

DEFRA (including its agencies and public bodies) has a duty to protect the public funds it administers so may use the information for the prevention and detection of fraud.

It may also share this information with other bodies responsible for auditing or administering public funds for these purposes.

We are allowed to process your data because we have official authority as the UK government department responsible for safeguarding our natural environment, supporting our food and farming industry, and sustaining our rural economy.

The legal basis for processing this data is processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, additionally processing is necessary for compliance with a legal obligation to which the controller is subject.

We also collect information through Google Analytics to monitor how you use the site. We do this to help:

  • make sure the site is meeting the needs of its users
  • make improvements, for example improving site search

We also collect data in order to:

  • gather feedback to improve our services, for example our email alerts
  • respond to any feedback you send us, if you’ve asked us to
  • send email alerts to users who request them
  • allow you to access government services and make transactions
  • provide you with information about local services if you want it
  • monitor use of the site to identify security threats

Who we share the information with:

We may share the information with:

  • your nominated official veterinarian or local authority certifying officer
  • the competent authority of the destination country
  • Defra
  • Other Government Departments (including Her Majesty's Revenue and Customs, Cabinet Office, Department for Transport and Home Office)
  • Scottish Government
  • Welsh Government
  • Northern Ireland Executive
  • enforcement authorities
  • European Commission

This is how long we keep the information:

We hold the information for 7 years.

if I don’t provide the data:

If you do not give us this information, we will not be able to process your application for an export health certificate.

Automated decision-making or profiling:

The information you provide is not connected with individual decision making (making a decision solely by automated means without any human involvement) or profiling (automated processing of personal data to evaluate certain things about an individual).

How we protect your data and keep it secure

We are committed to doing all that we can to keep your data secure. We have set up systems and processes to prevent unauthorised access or disclosure of your data - for example, we protect your data using varying levels of encryption.


We also make sure that any third parties that we deal with keep all personal data they process on our behalf secure.

Your rights:

Read a list of your rights under the General Data Protection Regulation, the Data Protection Act 2018 (DPA 2018).

To complain:

You have the right to lodge a complaint with the ICO (supervisory authority) at any time. Should you wish to exercise that right full details are available at:

Telephone: 0303 123 1113

Textphone: 01625 545860

Monday to Friday, 9am to 4:30pm


Information Commissioner's Office

Wycliffe House

Water Lane


Cheshire SK9 5AF Telephone: 0303 123 1113


Data Controller:

DEFRA is the data controller for the personal data you give APHA.


We also collect data from cookies to assist us in improving your journey with us.

The ‘Apply for an export health certificate’ service puts small files (known as cookies) on to your computer.

These cookies are used to

  • remember what messages you’ve seen so you’re not shown them again
  • understand how you use the service so we can improve it
  • temporarily store the information you enter

The cookies we use don’t identify you personally.

You can choose to except or not except any non-essential cookies.

Changes to this policy

We may change this privacy policy. In that case, the ‘last updated’ date at the bottom of this page will also change. Any changes to this privacy policy will apply to you and your data immediately.

If these changes affect how your personal data is processed, we will take reasonable steps to let you know. This notice was last updated on 10/02/2021