Privacy Policy

Who we are

Parish Council ("we", "us") is the data controller for personal information collected through this website.

Data protection contact: clerk@parishcouncil.local

What personal information we collect

• Contact form & newsletter subscriptions: name, email address, the content of your message.
• Resident accounts & issue reports: name, email, address, phone (if you provide it), and the details of your report.
• Bookings, ticket orders and grant applications: name, contact details, payment confirmation (we do not store card details — those are handled by Stripe).
• Petitions and survey responses: the answers you give and, if you sign in, your account identifier.
• Pseudonymous analytics: if you opt in via the cookie banner, we record page-view counts using a hashed IP. We do not profile individual visitors.

Lawful basis

We rely on the following lawful bases under UK GDPR Art. 6:

• Public task — for the council's statutory functions (meetings, agendas, minutes, planning, statutory notices).
• Consent — for newsletters, non-essential cookies and any optional contact you initiate.
• Contract — when you book a venue, buy event tickets or apply for a grant.
• Legal obligation — where we are required to retain information (e.g. financial records, AGAR returns).

How long we keep your information

We keep information only as long as we need it for the purposes above and to meet our statutory record-keeping obligations. Routine contact-form messages are kept for up to 24 months. Financial records are kept for at least 7 years. Pseudonymous analytics page-views are aggregated and pruned after 90 days.

Who we share information with

We share your information only with:

• Our hosting and email providers, under written processor agreements.
• Stripe, our payment processor, when you make a payment.
• Statutory bodies where we are legally required to do so (e.g. our external auditor for AGAR).

We do not sell your information. We do not transfer your information outside the United Kingdom or the European Economic Area without appropriate safeguards.

Your rights

Under UK GDPR you have the right to:

• Request a copy of the personal information we hold about you (subject access request).
• Ask us to correct information that is inaccurate.
• Ask us to erase information where we no longer have a lawful basis to keep it.
• Object to processing, or ask us to restrict it.
• Withdraw consent at any time where we rely on consent.

To exercise any of these rights, email clerk@parishcouncil.local.

Cookies

See our Cookie Policy for the full list of cookies and how to manage them. You can change your preferences at any time using the "Manage cookies" link in the page footer.

How to complain

If you are unhappy with how we have handled your personal information, please contact us first and we will do our best to put it right. You also have the right to complain to the Information Commissioner's Office (ICO):

Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113
Online: ico.org.uk/concerns