Data Protection & Privacy Policy

Last reviewed: May 2026 | Next review due: May 2027

Data Controller

Cliviger Parish Council is the Data Controller for all personal data processed in connection with its functions as a local authority. This policy is prepared in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller: Cliviger Parish Council
Clerk to the Council: Rebecca Hay
Address: 239 Red Lees Road, Cliviger, Burnley, BB10 4RJ
Email: info@clivigerparishcouncil.com
Tel: 07977 611947
ICO Registration Reference: ZA391287 (verify at ICO register)

Data Protection Officer

Rebecca Hay, Clerk to the Council, acts as Data Protection Officer (DPO) for Cliviger Parish Council. The DPO can be contacted at:
Email: info@clivigerparishcouncil.com
Tel: 07977 611947
Address: 239 Red Lees Road, Cliviger, Burnley, BB10 4RJ

What Personal Data We Collect

We may collect and process the following personal data:

Names, addresses, email addresses and telephone numbers of residents who contact us
Names, addresses and financial details of suppliers and contractors
Names and contact details of councillors and council staff
Information provided in planning consultation responses or grant applications
Information relating to applications to the ScottishPower Renewables Coal Clough Windfarm Benefit Fund
Website usage data collected via cookies (see our Cookie Policy)

Lawful Basis for Processing

We process personal data under the following lawful bases as defined in UK GDPR Article 6:

Legal obligation – to comply with our statutory duties as a local authority
Public task – to perform tasks carried out in the public interest or in the exercise of official authority
Legitimate interests – for administrative purposes including responding to enquiries
Consent – where you have given us specific consent to process your data

How We Use Your Data

We use personal data to:

Respond to enquiries and correspondence
Administer council business, meetings and elections
Publish minutes, agendas and council decisions as required by law
Process payments and manage contracts
Administer the ScottishPower Renewables Benefit Fund
Comply with legal and regulatory obligations

Data Sharing

We do not sell or trade your personal data. We may share data with:

Burnley Borough Council and Lancashire County Council where required by law
ScottishPower Renewables in connection with the Coal Clough Windfarm Benefit Fund
Government departments, regulators or enforcement agencies where legally required
Professional advisors (auditors, legal advisors) bound by confidentiality obligations

Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, in accordance with our retention schedule and statutory obligations. Council minutes and financial records are retained for a minimum of six years.

Your Rights Under UK GDPR

You have the following rights regarding your personal data:

Right of access – to request a copy of the personal data we hold about you (Subject Access Request)
Right to rectification – to request correction of inaccurate data
Right to erasure – to request deletion of your data in certain circumstances
Right to restrict processing – to request that we limit how we use your data
Right to data portability – to receive your data in a structured, machine-readable format
Right to object – to object to processing based on legitimate interests or public task

How to Make a Subject Access Request

To exercise any of your rights, please write to the Clerk at the address above or email info@clivigerparishcouncil.com. We will respond within one calendar month of receiving your request. There is no charge for a Subject Access Request unless requests are manifestly unfounded or excessive.

Cookies

Our website uses cookies. Please see our Cookie Policy for full details of the cookies we use and how to manage them.

Security

We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, or unauthorised disclosure. All staff and councillors with access to personal data are trained in their data protection responsibilities.

Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Tel: 0303 123 1113
Website: www.ico.org.uk

Changes to This Policy

This policy will be reviewed annually by the Council. Any significant changes will be published on this website. This policy was last reviewed at the Council meeting of May 2026 and is due for review in May 2027.