Data protection
We collect and use personal information to deliver Council services. When we do this, we must comply with the General Data Protection Regulation and the Data Protection Act 2018. This is called data protection law.
How we use your personal information
Telling people about how we use their personal information is a key part of data protection law. Our privacy notices tell you how we do this. This includes how we collect, share, and use your information.
Our record retention schedule tells you how long we keep your personal information for and why.
How the law protects you
Data protection law says that we are only allowed to use your personal information if we have a proper reason to do so. Our record of processing sets out what personal information we use and the reasons for doing so.
Your data protection rights
Under data protection law you have certain rights. You have the right to object to how we use your personal information. You also have the right to correct, sometimes delete and restrict the personal information we use. Our privacy notices set these out in more detail and describes how you can exercise these rights.
You also have the right to request information we hold about you. This is known as a subject access request. Make a subject access request
Making a complaint
You have a right complain to us and the data protection regulator, the UK Information Commissioner.