Privacy Policy

Privacy Notice

This privacy notice is intended to inform you of how your personal data will be used in our organisation.  We take your data protection rights seriously, and we will only use your personal data in the ways we describe here.

Who we are and what we do?

  •  We are Illogan Parish Council a council in England. Our contact details are Illogan Parish Council, Illogan Parish Council Community Office, Trevelyan Road, Illogan, TR16 4RG.
  • We are a data controller for personal data as defined by all applicable data protection and privacy laws including, but not limited to, the retained EU law version of the General Data Protection Regulation ((EU) 2016/679) (the “UK GDPR”), as it forms part of the law of England and Wales, Scotland, and Northern Ireland by virtue of section 3 of the European Union (Withdrawal) Act 2018, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 as amended, and any successor legislation (the “Data Protection Legislation”).
  • We are not required to have a Data Protection Officer as defined by Article 37 of the UK GDPR.
  • We process your personal data to enable us to manage our organisation and provide a service to you and others

Your data protection rights

  •  Under the data protection legislation, you have rights including:
  • Your right to be informed – You have the right to be informed of our use of your personal data. This notice is designed to give you that information.  If you require further information, please contact us using the details below.
  • Your right of access – You have the right to ask us for copies of your personal information.
  • Your right to rectification – You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
  • Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
  • Your right to restriction of processing – You have the right to ask us to restrict the processing of your information in certain circumstances.
  • Your right to object to processing – You have the right to object to the processing of your personal data in certain circumstances.
  • Your right to data portability – You have the right to ask that we transfer the information you gave us to another organisation, or to you, in certain circumstances.
  • Your right in relation to automated decision making including profiling – We do not process personal data in this way.
  • You are not required to pay any charge for exercising your rights. If you make a request, the law gives us one month to respond to you, but we have undertaken to respond as soon as possible and in any case 28 days.
  • Please contact us using the details in Section 1 above if you wish to make a request.

What data does the data protection legislation cover? 

  • Data protection legislation is to protect the data privacy of individuals and uphold your rights over your own personal data.
  • Definitions:
  • Personal Data – means any information relating to an identified or identifiable person (‘data subject’); an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that person.
  • Processing – means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
  • Data Controller – means the person or organisation which, alone or jointly with others, determines the purposes and means of the processing of personal data.
  • Data Processor – means a person or organisation which processes personal data on behalf of the Data Controller.
  • Third Country – means a country or territory outside the United Kingdom.
  • Lawful Basis – means one of the six lawful reasons to process personal data as set out in Article 6 of the UK GDPR. At least one of these will apply whenever we process your personal data.

Why do we have your information and how long will we keep it? 

  • We take your data privacy seriously and will only use your personal data for the purpose for which it was collected.
  • For every activity that we undertake using personal data we must be clear what our purpose is for that activity and have a Lawful Basis to process your data.
  • Where we process personal data that reveals special category data (article 9 UK GDPR) or personal data relating to criminal convictions and offences (article 10 UK GDPR) we require an additional condition to process.
  • We collect and process your personal data for the following purposes for which we collect certain categories of data and in order to lawfully process your data for those purposes we rely on these lawful bases and additional conditions.
Purpose Lawful basis Additional Condition to Process Categories of data
Minutes Legal obligation N/a Identity

Contact information

Accounts Legal obligation N/a Identity

Contact information

Bank details

Correspondence and casework Public task Substantial public interest – statutory etc and government purposes Identity

Contact information

Special category data

Planning process Public task N/a Identity

Contact information

All councillor details Legal obligation Substantial public interest – statutory etc and government purposes Identity

Contact information

Special category data

Financial information

Register of interests Legal obligation Substantial public interest – statutory etc and government purposes Identity

Contact information

Financial information

Special category data

Payroll and pension Legal obligation Employment Identity

Contact information

Bank details

Financial information

Special category data

Hire of venue Contract N/a Identity

Contact information

Bank details

Contract tenders and management Contract N/a Identity

Contact information

Bank details

Invitations email Consent N/a Identity

Contact information

Invitations postal Legitimate interest N/a Identity

Contact information

Photos of individuals and small groups Consent Explicit consent Image

Identity

Photos of large groups Legitimate interest Made public by data subject Image

Identity

Agendas and reports Legal obligation N/a Identity
HR and recruitment Contract N/a Identity

Contact information

Bank details

Education and employment history

Special category data

CCTV Legitimate interest Public interest – preventing and detecting crime Image

Voice

News articles Legitimate interest N/a Identity

Contact information

FOI/UK GDPR requests Legal obligation N/a Identity

Contact information

Suppliers Contract N/a Identity

Contact information

Bank details

Councillor code of conduct Public task N/a Identity

Contact information

 

  • If we have relied on ‘consent’ to process your personal data, you are able to withdraw that consent at any time and we will be happy to assist you.
  • We collect data in the following ways
Categories of data How we collect your data
Bank details Direct from you
Contact information Direct from you
from Cornwall councilFrom find a tender service (fts)

Via a community group

Education and employment history Direct from you
Financial information Direct from you
Identity Direct from you

From Cornwall council

From find a tender service (fts)

Via a community group

Image Direct from you
Special category data Direct from you
Voice Direct from you

 

  • How long we intend to keep your data
Purpose How long we will keep your data
Minutes Indefinitely
Accounts 7 years after current
Correspondence and casework 1 year after completion of case
Planning process Indefinitely
All councillor details Indefinitely
Register of interests Until councillor replaced by another
Payroll and pension 7 years after employment
Hire of venue 7 years after hire
Contract tenders and management 7 years after end of tender or contract and 2 years after unsuccessful contract or tender
Invitations email Until unsubscribe, or no contact for 2 years
Invitations postal Until unsubscribe, or no contact for 2 years
Photos of individuals and small groups 20 years unless historically significant
Photos of large groups 20 years unless historically significant
Agendas and reports Indefinitely
HR and recruitment 7 years after employment or application
CCTV 30 days
News articles Indefinitely
FOI/UK GDPR requests 2 years
Suppliers 7 years after last use of supplier
Councillor code of conduct Indefinitely

 

  • When we no longer need your personal data to undertake our stated purpose we will delete it or anonymise it so that it no longer permits the identification of you.
  • Personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with UK GDPR Article 89(1).
  • In some cases, we may be allowed to use your personal data to contact you with news about our activities, products or services. We will always offer an opt out and we will always comply with the data protection legislation.

Sharing this information with other data controllers

  • We may share your data with another data controller if that controller takes over the purpose for which we collected your data.
  • We may be required to share your personal data for legal, judicial, law enforcement or government reasons.
  • We routinely share personal data with other data controllers for the following reasons.
Receiving Data Controller Reason Data Controller Location
Banks Payroll and pension UK / EU
Contractors and suppliers Correspondence and casework UK / EU
Cornwall council Planning process

Register of interests

All councillor details

UK / EU
HMRC Payroll and pension

HR and recruitment

UK / EU
Law enforcement and similar competent authorities CCTV

Correspondence and casework

UK / EU
Other local authority Correspondence and casework UK / EU
Pension provider Payroll and pension UK / EU
Training providers All councillor details

HR and recruitment

UK / EU

 

  • We may share your personal data with other data controllers to enable us to fulfil our obligations to you or to provide a product or service, in that event we will tell you who we are going to share your data with.
  • We take your data protection rights seriously and will take steps to ensure that those we share data with process it responsibly.

Data processors working on our behalf

  • We may send your data to a data processor to undertake data processing activities on our behalf.
  • We send personal data to data processors for the following reasons.
Categories of data processor Reason Data Controller Location
Auditor Accounts

All Councillor Details

Contract Tenders and Management

Payroll and Pension

UK / EU

 

Cloud IT provider Accounts

Agendas and reports

All Councillor Details

Contract Tenders and Management

Correspondence and Casework

Councillor Code of Conduct

FOI/GDPR Requests

HR and Recruitment

Invitations Email

Invitations Postal

Minutes

News articles

Photos of Individuals and Small Groups

Photos of large Groups

Planning Process

Register of interests

Suppliers

 

UK / EU / USA

 

Kresen Kernow (archive) Minutes UK
MailChimp Invitations Email USA
Moneysoft HR and Recruitment UK / EU
Printers News articles

Photos of Individuals and Small Groups

Photos of large Groups

UK / EU
Scribe Accounts

All Councillor Details

Contract Tenders and Management

HR and Recruitment

Suppliers

Hire of venue

UK / EU
Social media All Councillor Details

Photos of Individuals and Small Groups

Photos of large Groups

UK / EU
Webhost Agendas and reports

All Councillor Details

HR and Recruitment

Minutes

News articles

Photos of Individuals and Small Groups

Photos of large Groups

Planning Process

Register of interests

UK / EU

 

Where do we store and process your personal data? 

  • Most of your personal data will be stored and processed here in the UK.
  • Some data may be stored or processed in other third countries. We have made sure that safeguards are in place or such transfers to ensure that an equivalent standard of data protection is in place.
  • Personal data transferred to EU member states, Iceland, Norway, Liechtenstein, Gibraltar, Andorra, Argentina, Faroe Islands, Guernsey, Isle of Man, Israel, Jersey, New Zealand, Switzerland, Uruguay, Japan (only private sector organisations) or Canada (only covers data that is subject to Canada’s Personal Information Protection and Electronic Documents Act) is transferred to those third countries on the basis of adequacy regulations.
  • Personal data transferred to USA organisations certified to the “UK Extension to the EU-US Data Privacy Framework” is transferred on the basis allowed for by Article 45 of the UK General Data Protection Regulation (GDPR).

How to contact us for more information 

  • We hope that you will feel that we have explained our use of your personal data adequately to you, however if you have any questions, wish to exercise any of your data protection rights or have a complaint please contact us at Illogan Parish Council, Illogan Parish Council Community Office, Trevelyan Road, Illogan, TR16 4RG.
  • You can also complain to the Information Commissioner’s Office (ICO) if you are unhappy with how we have used your data. Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF Helpline number: 0303 123 1113
  1. Updates to this notice 
  • We might have to make changes to this Privacy Notice if there are changes to how we process your personal data or the data protection legislation changes.
  • Changes will be made available via updated notices on the Illogan Parish Council Website and at the Illogan Parish Council offices at the above address.
  • This Privacy Notice was last updated on 09.07.2025.