Privacy Policy
Overview
Being transparent and providing accessible information to individuals about how we use personal information is a key element of the UK General Data Protection Regulation (UK GDPR). The most common way to provide this information is in a privacy notice.
Alongside this privacy notice we also provide service and project specific privacy notices that give further details on how we process your personal data.
Data controller
A Data Controller is an individual or organisation that determines the purposes and means of processing personal data.
Lancashire County Council is registered as a data controller with the Information Commissioner's Office (registration number: Z542705X).
Contact details for the council's data controller are:
Information Governance Team
Lancashire County Council
PO Box 78
County Hall
Preston
PR1 8XJ
Email: dataprotection@lancashire.gov.uk
Purpose of processing personal information
As a local authority, the council delivers services to you. In order to do this in an effective way we will need to collect and use personal information about you.
If you use a specific council service, we will usually let you know how that service will use your personal information via a separate privacy notice.
The UK General Data Protection Regulation ensures that we comply with a series of data protection principles. These principles are there to protect you and they make sure that we:
Process all personal information lawfully, fairly and in a transparent manner.
Collect personal information for a specified, explicit and legitimate purpose.
Ensure that the personal information processed is adequate, relevant and limited to the purposes for which it was collected.
Ensure the personal information is accurate and up to date.
Keep your personal information for no longer than is necessary for the purpose(s) for which it was collected.
Keep your personal information securely using appropriate technical or organisational measures.
Service or project specific privacy notices
Services using large amount of personal or special categories of information will have their own dedicated privacy notice to tell people what information is being shared. These notices will map out how personal information flows through the service or project and how it is processed.
As a local authority, the council delivers services to you. In order to do this in an effective way we will need to collect and use personal information about you.
If you use a specific council service, we will usually let you know how that service will use your personal information via a separate privacy notice.
The UK General Data Protection Regulation ensures that we comply with a series of data protection principles. These principles are there to protect you and they make sure that we:
Process all personal information lawfully, fairly and in a transparent manner
Collect personal information for a specified, explicit and legitimate purpose
Ensure that the personal information processed is adequate, relevant and limited to the purposes for which it was collected
Ensure the personal information is accurate and up to date
Keep your personal information for no longer than is necessary for the purpose(s) for which it was collected
Keep your personal information securely using appropriate technical or organisational measures