Privacy and data protection

Data protection

We collect and use personal information to deliver Council services. When we do this, we must comply with the General Data Protection Regulation and the Data Protection Act 2018. This is called data protection law.

How we use your personal information

Telling people about how we use their personal information is a key part of data protection law. Our privacy notices tell you how we do this. This includes how we collect, share, and use your information.

Our record retention schedule tells you how long we keep your personal information for and why. 

How the law protects you

Data protection law says that we are only allowed to use your personal information if we have a proper reason to do so. Our record of processing sets out what personal information we use and the reasons for doing so.

Your data protection rights

Under data protection law you have certain rights. You have the right to object to how we use your personal information. You also have the right to correct, sometimes delete and restrict the personal information we use. Our privacy notices set these out in more detail and describes how you can exercise these rights.

You also have the right to request information we hold about you. This is known as a subject access request. Make a subject access request

Making a complaint

You have a right complain to us and the data protection regulator, the UK Information Commissioner.