Data Privacy Policy
Introduction
Thornton Parish Council needs to gather and use certain information about individuals. These can include residents of Thornton, suppliers, business contacts, and other people the organisation has a relationship with or may need to contact.
This policy describes how this personal data must be collected, handled and stored to meet data protection standards and to comply with the laws of the General Data Protection Regulation (GDPR).
Why this policy exists
This data protection policy ensures Thornton Parish Council:
- Complies with data protection law and follow good practice
- Protects the rights of Thornton Parish Councillors & Clerk, customers and partners
- Is open about how it stores and processes individuals’ data
- Protects itself from the risks of a data breach
Data protection law
GDPR requires that personal data must be:
- Processed lawfully, fairly and in a transparent manner in relation to individuals;
- Collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall not be considered to be incompatible with the initial purposes;
- Adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed;
- Accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that inaccurate personal data is erased or rectified without delay;
- Kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes subject to implementation of the appropriate technical and organisational measures required by the GDPR in order to safeguard the rights and freedoms of individuals;
- Processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures
Data Controller Details
Thornton Parish Council is the data controller responsible for collecting the personal data that you provide to us. To exercise all relevant rights, queries or complaints please in the first instance contact: gdpr@thornton-pc.gov.uk
How we use the information
When you contact Thornton Parish Council the information you provide (personal information such as name, address, email address, telephone number) will be processed and stored so that it is possible to contact you and respond to your correspondence, advise and provide information.
We do not collect any special data (such as health, disability, etc.) unless you wish to make us aware of any special circumstances to deal with your enquiry.
Your personal information will not be shared with any third party without your prior consent. We do not sell or trade personal information.
Thornton Parish Council: Right to Process Information
We process your personal data either with your consent; to comply with legal obligations; to take steps with a view to entering into a contract or to perform the actual contract or to carry out a task in the public interest or in the exercise of our official authority. On occasion we may process your personal data to further our legitimate interests or those of a third party.
Information Security
Thornton Parish Council strives to ensure the security of personal data. We aim to make sure that your information is protected from unauthorised access, loss, manipulation, falsification, destruction or unauthorised disclosure. This is done through appropriate technical measures and relevant policies.
We will only keep your data for the purpose it was collected for and only for as long as is necessary, after which it will be deleted or shredded.
Your Rights
You have the right to request access to the information we have on you. You can do this by contacting us by email or post. You will be required to provide proof of identity.
Access to Information
Information Correction
If you believe that the information we have about you is incorrect, you may contact us so that we can update it and
keep your data accurate.
Information Deletion
If you wish Thornton Parish Council to delete the information about you, please contact us.
Right to Object
If you believe that your data is not being processed for the purpose it has been collected for, you may object, please contact us.
To Sum Up
In accordance with the law, we only collect the minimum amount of information about you that is necessary to respond to your correspondence, advise and provide information. We do not sell or pass your data to third parties. We do not use your data for purposes other than those specified. We make sure your data is stored securely. We delete all information deemed to be no longer necessary. We constantly review our Privacy Policies to keep it up to date in protecting your data.
Complaints
If you have a complaint regarding the way your personal data has been processed you may make a complaint to our Data Protection Officer, Thornton Parish Council, c/o 2F Kent Road, Southport, PR8 4BJ or the Information Commissioners Office: ico.org.uk/make-a-complaint/ Tel: 0303 123 1113 or at the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
Reviewed – April 2025
Next review date – April 2027