Broadstone Town Council processes personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable data protection law.
Who is responsible for your information
Broadstone Town Council is the data controller for personal information it collects through this website. We only collect information that is necessary for Council business and use it for the purpose explained when it is collected.
Contact and website enquiries
The contact form sends your name, contact details, subject and message to the Council by email. The website does not keep a separate copy of the submission. We use the information to understand and respond to your enquiry and to manage any resulting Council business.
Our lawful reasons for using information
Depending on the enquiry, we may use personal information to perform a task in the public interest, meet a legal obligation, carry out a contract, protect someone’s vital interests, or because you have given consent. We will not rely on consent where another lawful basis is more appropriate.
Who we share information with
We may share relevant information with authorised Council members, officers, service providers or another public authority when this is necessary to deal with your request or meet a legal duty. We require organisations processing information for us to protect it appropriately.
How long we keep information
We keep personal information only for as long as it is needed for the purpose collected and in line with the Council’s retention arrangements. Different records have different retention periods because legal and administrative requirements vary.
Your data protection rights
Depending on the circumstances, you may have rights to be informed, access your information, correct inaccurate information, restrict or object to processing, request deletion, and receive information in a portable format. Some rights have legal exceptions. Contact us if you want to exercise a right or ask how your information is used.
Security and international transfers
We use proportionate technical and organisational measures to protect information. If a service provider processes information outside the UK, we will require an appropriate lawful transfer safeguard.
Spam protection
The contact form uses Cloudflare Turnstile to distinguish people from automated submissions. Cloudflare may process technical information about your browser and connection for this purpose.
Email newsletter
If you subscribe to the Council’s quarterly email newsletter, The Newsletter Plugin stores your email address, consent and subscription status in this website’s WordPress database. The Town Clerk is responsible for the subscriber list. We use your consent to send the newsletter, and you must accept a confirmation email before your subscription becomes active (double opt-in). Each newsletter contains links to manage your details or unsubscribe.
We may record delivery, opens and link clicks to understand whether Council updates are useful. You can withdraw consent at any time by using the unsubscribe link in a newsletter.
Questions and complaints about data protection
Email contact@broadstone-tc.gov.uk or use our contact form. You can also complain to the Information Commissioner’s Office.