Skip Navigation

What data is collected by FORT

The FORT website collects property / location data on flooding to allow authorities to undertake their legal duties. The answers you give regarding the location and source of flooding are used to ensure that your report reaches the correct authority.

The system will not keep contact information or comments and media containing personal data for longer than 7 years unless by agreement with you and where a reason can be provided for the extension request. Personal data may be removed in advance of this by the relevant record lead. You will be notified once your record can no longer be edited unless re-activated by a registered FORT user.

Where personal data is provided; the Data Protection Act requires that we define the lawful basis by which personal data will be processed. FORT processes data under 'Public Task' in order to perform a task in the public interest, for official functions. Data collected on this site is used to fulfil the Lead Local Flood Authority (LLFA) functions as set out in the Flood and Water Management Act of 2010.

Who is processing personal data?

You are responsible for the content you upload to the FORT website however once uploaded the FORT web application (administered by Dorset Council under the GeoWessex Partnership) takes on the role of data processor. The maintainer of the website will only use personal data to contact you should a system error occur.

The data collected by the system under the Flood and Water Management Act (2010) is passed to the relevant LLFA who act as the data controller for the dataset. In some cases, they may share this responsibility with other risk management organisations such as the Environment Agency and utility companies. Other organisations investigating flood events may also be given access as required but will not be given access to personal data.

Queries relating to your data should be addressed directly to the relevant data controller in the first instance and each organisation using FORT will provide their own privacy statement in addition to this one which relates to the wider application.

Who will the data be shared with?

Data submitted on the FORT website is shared between Lead Local Flood Authorities, the Environment Agency, emergency services and other organisations who need the data to assist them with analysis, planning or emergency response to flooding. It may be used to plan future flood defence schemes and to inform the public about whether there is a risk of flooding in an area. All non-personal data is also subject to Freedom of Information and Environmental Information Requests as set out in the relevant regulations.

Personal data is only available to record leads however as this can change during an investigation all the privacy statements for the geographical area are provided.

We will not share your personal data with external companies or use it for marketing purposes unless you have agreed for this to happen. This currently only applies to media where you are given the option to permit us to use it in publications.

Protecting your personal data

Please ensure that all personal data is removed from all comments (except where specifically permitted) and that all media is edited so that no living person can be identified. Any personal data placed in the media or incorrect comment fields will be removed by authorised FORT users prior to being shared with all the project partners.

Data will be retained until the relevant risk authority no longer deems it required to process the record, or for a maximum period of 7 years. Status fields are used to determine when a report has been processed and this may be set prior to the seven-year period and in such cases the personal data shall be removed.

Should a report still be actively under investigation or subject to a grant application this period may be extended as required to fulfil any official function or meet a legal obligation, however you will be informed of this in writing or by email by the relevant risk authority.

Please refer to their individual privacy statements for more information on this and for details of any other ways that they may wish to use personal data.

Will all records be investigated?

All authorities will prioritise workloads and in some cases reports will be used for statistical analysis but not individually investigated. In such cases all contact details and any comments or media containing personal data will be permanently deleted at the end of the retention period.

Access, deletion and updating of records

You can update your report for as long as the record is being processed. This will allow you to remove personal data but a historical copy of the original text will be retained until the processing is completed or the data retention period is exceeded. It is only possible to completely remove a record if it can be proved that the record was incorrectly entered and it may not be possible if the data has been used in a report. In such cases it is possible to record an updated version to prevent its inclusion in further reports and analysis.

Please Note: we use email as the primary method of communication relating to processing of your report. You will be sent details of how to access and update your record via an email from Should you wish to prevent further communication you should update your record and remove the email address.