Adopted: 21 September 2026  |  Review Date: September 2027

This privacy notice is intended to inform you of how your personal data will be used in our organisation.  We take your data protection rights seriously and we will only use your personal data in the ways we describe here.

  1. Who we are and what we do?
    • We are Perranzabuloe Parish Council a council in England. Our contact details are Perranzabuloe Parish Council, Chyanhale, Ponsmere Rd, Valley, Perranporth, TR6 0DB, email: clerk@perranzabuloe-pc.gov.uk
    • We are a data controller for personal data as defined by all applicable data protection and privacy laws including, but not limited to, the retained EU law version of the General Data Protection Regulation ((EU) 2016/679) (the “UK GDPR”), as it forms part of the law of England and Wales, Scotland, and Northern Ireland by virtue of section 3 of the European Union (Withdrawal) Act 2018, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 as amended, and any successor legislation (the “Data Protection Legislation”).
    • We are not required to have a Data Protection Officer as defined by Article 37 of the UK GDPR.
    • We process your personal data to enable us to manage our organisation and provide a service to you and others.
  2. Your data protection right
    • Under the data protection legislation, you have rights including:
      • Your right to be informed – You have the right to be informed of our use of your personal data. This notice is designed to give you that information.  If you require further information please contact us using the details below.
      • Your right of access – You have the right to ask us for copies of your personal information.
      • Your right to rectification – You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
      • Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
      • Your right to restriction of processing – You have the right to ask us to restrict the processing of your information in certain circumstances.
      • Your right to object to processing – You have the right to object to the processing of your personal data in certain circumstances.
      • Your right to data portability – You have the right to ask that we transfer the information you gave us to another organisation, or to you, in certain circumstances.
      • Your right in relation to automated decision making including profiling – We do not process personal data in this way.
    • You are not required to pay any charge for exercising your rights. If you make a request, the law gives us one month to respond to you.
    • Please contact us using the details in Section 1 above if you wish to make a request or make a data protection complaint.

      What data does the data protection legislation cover?

      • Data protection legislation is to protect the data privacy of individuals and uphold your rights over your own personal data.
      • Definitions:
        • Personal Data – means any information relating to an identified or identifiable person (‘data subject’); an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that person.
        • Processing – means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
        • Data Controller – means the person or organisation which, alone or jointly with others, determines the purposes and means of the processing of personal data.
        • Data Processor – means a person or organisation which processes personal data on behalf of the Data Controller.
        • Third Country – means a country or territory outside the United Kingdom.
        • Lawful Basis – means one of the six lawful reasons to process personal data as set out in Article 6 of the UK GDPR. At least one of these will apply whenever we process your personal data.

The full policy is available to view and download.