Privacy policy

1. Who we are

This website is operated by Gormsey Parish Council.

Data Controller: Gormsey Parish Council

Email:
Telephone:

This website is built and hosted using the Active Council platform, provided by WJP Software Limited, who act as a data processor on behalf of the Council.

2. What personal data we collect

This website may collect and process the following personal data:

Name and contact details (such as email address)

Information submitted via contact forms or report forms

Correspondence you send to the council

Technical data such as IP address, browser type, and device information

Cookie data (see Cookies section)

We only collect data that is necessary for the operation of the website and council services.

3. How we use your data

Your personal data may be used to:

Respond to enquiries or requests

Deliver council services or information you have asked for

Manage website functionality and security

Meet legal or regulatory obligations

Improve the website and user experience

We do not use your data for marketing unless you have explicitly agreed to this.

4. Legal basis for processing

We process personal data under one or more of the following lawful bases:

Consent – where you have provided it

Public task – where processing is necessary to carry out the council’s statutory duties

Legal obligation – where required by law

Legitimate interests – where necessary to operate and secure the website

5. Sharing your data

We do not sell or rent your personal data.

Your data may be shared with:

WJP Software Limited – as the website platform provider and data processor

IT and hosting providers used to operate the website

Regulatory or law enforcement bodies where legally required

All processors are required to handle data securely and in line with UK GDPR.

6. Data storage and security

Personal data is stored on secure UK or EEA-based servers.

Appropriate technical and organisational measures are in place to protect your data against loss, misuse, unauthorised access, or disclosure.

Access to data is restricted to authorised personnel only.

7. How long we keep your data

We only retain personal data for as long as necessary:

Enquiries: retained until resolved and for a reasonable audit period

Statutory records: retained in line with council retention schedules

Technical logs: retained for security and diagnostics purposes only

8. Your data protection rights

Under UK GDPR, you have the right to:

Access your personal data

Request correction of inaccurate data

Request deletion of your data (where applicable)

Restrict or object to processing

Data portability

Withdraw consent at any time

Requests should be made to the council using the contact details above.

9. Cookies

This website uses cookies to:

Ensure basic site functionality

Improve performance and usability

Collect anonymous usage statistics (where enabled)

You can manage or disable cookies through your browser settings.

A separate Cookie Policy may be provided where required.

10. External links

This website may contain links to external websites.

We are not responsible for the privacy practices or content of external sites. Please check their privacy policies before providing personal data.

11. Changes to this policy

This privacy policy may be updated from time to time.

The latest version will always be published on this website.

12. Contact and complaints

If you have concerns about how your data is handled, please contact the council first.

You also have the right to complain to the Information Commissioner’s Office (ICO):

Website: https://www.ico.org.uk
Telephone: 0303 123 1113