Policies and Procedures

Data Protection Policy and Procedures

The Parish Council has a responsibility under the Data Protection Act 2018 and the General Data Protection Regulation 2018 to hold, obtain, record, use and store all personal data relating to an identifiable individual in a secure and confidential manner. The documents below explain how we do this.

HFSP Data Protection Policy revised May 2025: our overall policy statement

HFSP-Data-Privacy-Policy-2025 as adopted: why and how we hold and process your data, and your rights

You have the right to know what data we hold about you:

HFSP Subject Access How to access your records 2025

HFSP Subject Access request form

We also have some procedural documents:

Data Breach Policy v1.0 2025 as adopted: how we will deal with any data incident

HFSP Data Retention Schedule: how long we retain data and documents

HFSP Data Privacy Impact Assessment : the procedure we use for any major project