How we look after your data

Laleston Community Council is committed to protecting the privacy of visitors to its website and people who interact with the Council. This page explains what personal data the Council collects, how it’s used, and your rights under UK GDPR.

Who we are

The data controller is Laleston Community Council, Bryntirion Community Centre, Laleston, Bridgend. Contact: OM@lalestoncommunitycouncil.gov.uk · 07376 730851.

What data we collect

The Council collects personal data when you:

  • Contact us by email, phone or post (we keep correspondence to manage your enquiry)
  • Submit a comment on a planning application or public consultation
  • Apply for a grant, allotment plot, or to hire a Council venue
  • Register to attend a Council meeting in any capacity
  • Subscribe to receive updates from the Council

Data we may collect: your name, address, email, phone number, and the content of your communication or application.

Why we collect it (lawful basis)

The Council processes personal data on the following lawful bases under UK GDPR Article 6:

  • Public task (Article 6(1)(e)) — to carry out the Council’s statutory functions and exercise official authority
  • Consent (Article 6(1)(a)) — where you’ve actively opted in (e.g. to receive updates)
  • Legitimate interests (Article 6(1)(f)) — for routine administration where this doesn’t override your rights

How long we keep it

The Council retains data only as long as necessary for the purpose collected, and in line with the Council’s document retention policy. Statutory records (financial, council meeting minutes) are retained per the relevant statutory periods.

Your rights

Under UK GDPR you have the right to: access your data · ask for it to be corrected · ask for it to be deleted (where applicable) · object to processing · withdraw consent · ask for processing to be restricted · data portability. To exercise any of these, contact the Clerk.

Cookies

This website uses minimal cookies. We do not use third-party advertising or behavioural tracking cookies. We do use:

  • Essential cookies for site functionality (e.g. session, security)
  • Analytics cookies via Independent Analytics — first-party, GDPR-compliant, no IP tracking, no third-party data sharing

You can clear cookies via your browser settings at any time. The site continues to work without cookies, though some functions may not behave as expected.

Sharing your data

The Council does not sell or trade personal data. We may share data with: our auditors (Audit Wales) · the Public Services Ombudsman for Wales where investigating a complaint · law enforcement where legally required.

Complaints

If you are unhappy with how the Council handles your data, you can complain to the Information Commissioner’s Office (ICO):

Changes to this policy

This policy was last updated on 1 July 2026. Material changes will be published here and on the News & Notices page.