We have a duty to ensure your personal information is:
- processed lawfully, fairly and transparently
- collected for specified, explicit and legitimate purposes
- adequate, relevant and limited to what is necessary
- accurate, and where necessary kept up to date
- kept for no longer than necessary for
Details of how we do this are set out below.
Our corporate privacy notice sets out a summary of how and why we collect and use your personal information, and how and why we share it with other organisations.
Fair processing notices
As an organisation we are responsible for providing a broad range of services. More specific information will be supplied to you by the various departments who collect and use your personal information where necessary. We do this using fair processing notices.
You should be supplied with this information either at the time personal information is obtained from you, or within a reasonable period of obtaining information from another source.
Retention and disposal schedule
Our records retention and disposal schedule sets out how long we keep information and the legal and regulatory requirements, or business reason for keeping it. The schedule covers all types of information, personal and non-personal, supporting all of our services and our management and administrative processes.