Bradford Abbas Parish Council
Data Protection / Privacy Policy &
Freedom of InformationPolicy
Adopted by full council
Contents
- Introduction
- Statement of Policy
- Privacy Policy
- Data Protection Officer
- Subject Access Request
- Data Protection Impact Assessments
- Cybersecurity
- Security Incident Response
- Freedom of Information Policy
- Documents
- Appendix A
1. Introduction
Bradford Abbas Parish Council is fully committed to compliance with the requirements of the General Data Protection Regulation (GDPR) from 25thMay 2018, which supersedes the Data Protection Act.
The Council will therefore follow procedures that aim to ensure that all employees, elected members, contractors, agents, consultants, partners or other servants of the council who have access to any personal data held by or on behalf of the council, are fully aware of and abide by their duties and responsibilities under the Act / Regulations and that the Council remains committed to protecting and respecting the privacy of all who provide their data.
For the purpose of the General Data Protection Regulation, the data controller is:Bradford Abbas Parish Council Chairman
2. Statement of Policy
In order to operate efficiently, the Parish Council has to collect and use information about people with whom it works. This may include members of the public, current, past and prospective employees, clients and customers, and suppliers. In addition, it may be required by law to collect and use information in order to comply with the requirements of central government. This personal information must be handled and dealt with properly, however it is collected, recorded and used, and whether it be on paper, in computer records or recorded by any other means there are safeguards within the Act / Regulation to ensure this. The Parish Council regards the lawful and correct treatment of personal information as very important to its successful operations and to maintaining confidence between the council and those with whom it carries out business. The Parish Council will ensure that it treats personal information lawfully and correctly. Personal data may be processed on the basis that such processing is necessary for the performance of tasks carried out by public authority acting in the public interest, out of contractual necessity or on a lawful basis.
The Parish Council will seek the consent of individuals and companies to hold their personal data, where possible to do so. Records of those consenting will be kept.
Article 5 of the General Data Protection Regulation requires that personal data shall be:
-
Processed lawfully, fairly and in a transparent manner in relation to individuals;
-
Collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall not be considered to be incompatible with the initial purposes;
-
Adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed;
-
Accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that is inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay;
-
Kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes subject to implementation of the appropriate technical and organisational measures required by the GDPR in order to safeguard the rights and freedoms of individuals;
-
Processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.
3. Privacy Policy
Bradford Abbas Parish Council is committed to protecting and respecting the privacy of everyone and of ensuring it is fully compliant under the General Data Protection Regulation.
This policy (together with any other documents referred to within it) sets out the basis on which any personal data we collect, or is provided to us, will be processed. The following policy sets out the Parish Council’s practices regarding the collection and processing of personal data and how we treat it.
a) Personal Data we may collect:
“Personal data” is any information about a living individual which allows them to be identified from that data (for example a name, photographs, videos, email address, or address). Identification can be directly using the data itself or by combining it with other information which helps to identify a living individual. The processing of personal data is governed by legislation relating to personal data which applies in the United Kingdom including the General Data Protection Regulation (GDPR) and other legislation relating to personal data and rights such as the Human Rights Act.
b)Data Controllers:
The Chairman of the Bradford Abbas Parish Council is the data controller for all data collected.
Other data controllers the council works with:
-
Parish, District and County Councillors
-
Local groups and organisations (Volunteers)
-
West Dorset District Council
-
Dorset County Council
-
HMRC and other Central Gov. bodies
-
Charities
-
Contractors
We may need to share personal data that we hold with them so that they can carry out their responsibilities to the council. If we and the other data controllers listed above are processing data jointly for the same purposes, then the council and the other data controllers may be “joint data controllers” which mean we are all collectively responsible for the data. Where each of the parties listed above are processing data for their own independent purposes then each of us will be independently responsible.
c)What data do we process?
The council will process some, or all of, the following personal data where necessary to perform its tasks (see also the Parish Council’s Information Audit):
-
Names, titles, and aliases, photographs;
-
Contact details such as telephone numbers, addresses, and email addresses;
-
Where they are relevant to the services provided by a council, or where you provide them to us, we may process information such as gender, age, marital status, nationality, education/work history, academic/professional qualifications, hobbies, family composition, and dependants;
-
Where you pay for activities such as use of a council venue, financial identifiers such as bank account numbers, payment card numbers, payment/transaction identifiers, policy numbers, and claim numbers.
d)The council will comply with data protection law, this says that the personal data we hold about you must be:
-
Used lawfully, fairly and in a transparent way.
-
Collected only for valid purposes that we have clearly explained and not used in any way that is incompatible with those purposes.
-
Relevant to the purposes we have stated and limited only to those purposes.
-
Accurate and kept up to date.
-
Kept only as long as necessary for the purposes we have stated.
-
Kept and destroyed securely including ensuring that appropriate technical and security measures are in place to protect personal data from loss, misuse, unauthorised access and disclosure.
e)We use your personal data for some or all of the following purposes:
-
To deliver public services, including to understand individuals needs to provide the services that they request and to understand what we can do for the individual and inform them of other relevant services;
-
To confirm identity to provide some services;
-
To contact by post, email, telephone or using social media (e.g., Facebook, Twitter, WhatsApp);
-
To help us to build up a picture of how we are performing;
-
To prevent and detect fraud and corruption in the use of public funds and where necessary for the law enforcement functions;
-
To enable us to meet all legal and statutory obligations and powers including any delegated functions;
-
To promote the interests of the council;
-
To maintain our own accounts and records;
-
To seek views, opinions or comments;
-
To notify of changes to our facilities, services, events and staff, councillors and other role holders;
-
To send communications which you have requested and that may be of interest to you. These may include information about campaigns, appeals, other new projects or initiatives;
-
To process relevant financial transactions including grants and payments for goods and services supplied to the council
-
To allow the statistical analysis of data so we can plan the provision of services.
f) What is the legal basis for processing your personal data?
The council is a public authority and has certain powers and obligations. Most of the personal data is processed for compliance with a legal obligation which includes the discharge of the council’s statutory functions and powers. Sometimes when exercising these powers or duties it is necessary to process personal data of residents or people using the council’s services. We will always take into account the interests and rights of the individual.This Privacy Policy, and the Privacy Notices, we display and distribute sets out the rights and the council’s obligations to each individual. We may process personal data if itis necessary for the performance of a contract, or to take steps to enter into a contract. An example of this would be processing data in connection with surveys/obtaining the views of Bradford Abbas residents. Sometimes the use of personal data requires consent, we will first obtain consent to use that data.
g) Sharing personal data
This section provides information about the third parties with whom the council may share personal data. These third parties have an obligation to put in place appropriate security measures and will be responsible to the individual directly for the manner in which they process and protect personal data. It is likely that we will need to share data with some or all of the following (but only where necessary):
-
The data controllers listed above under the heading “Other data controllers the council works with”;
-
Our agents, suppliers and contractors. For example, we may ask a commercial provider to publish or distribute newsletters on our behalf, or to maintain our database software;
-
On occasion, other local authorities or not for profit bodies with which we are carrying out joint ventures e.g. in relation to facilities or events for the community.
h)How long do we keep personal data?
We will keep some records permanently if we are legally required to do so. We may keep some other records for an extended period of time. For example, it is currently best practice to keep financial records for a minimum period of 8 years to support HMRC audits or provide tax information. We may have legal obligations to retain some data in connection with our statutory obligations as a public authority. The council is permitted to retain data in order to defend or pursue claims. In some cases, the law imposes a time limit for such claims (for example 3 years for personal injury claims or 6 years for contract claims). We will retain some personal data for this purpose as long as we believe it is necessary to be able to defend or pursue a claim. In general, we will endeavour to keep data only for as long as we need it. This means that we will delete it when it is no longer needed.
i) Individual rights and their personal data
Individuals have the following rights with respect to personal data:
When exercising any of the rights listed below, in order to process a request, we may need to verify identity for security. In such cases we will need the individual to respond with proof of identity before they can exercise these rights.
j-i)The right to access personal data we hold
-
At any point an individual can contact us to request the personal data we hold as well as why we have that personal data, who has access to the personal data and where we obtained the personal data from. Once we have received a request we will respond within one month.
-
There are no fees or charges for the first request but additional requests for the same personal data or requests which are manifestly unfounded or excessive may be subject to an administrative fee.
j-ii)The right to correct and update the personal data we hold
If the data we hold is out of date, incomplete or incorrect, individuals can inform us and the data will be updated.
j-iii)The right to have personal data erased
-
If an individual feels that we should no longer be using their personal data or that we are unlawfully using it, they can request that we erase the personal data we hold.
-
When we receive a request, we will confirm whether the personal data has been deleted or the reason why it cannot be deleted (for example because we need it for to comply with a legal obligation).
j-iv)The right to object to processing of personal data or to restrict it to certain purposes only
Individuals have the right to request that we stop processing their personal data or ask us to restrict processing. Upon receiving the request, we will contact the person concerned and let
them know if we are able to comply or if we have a legal obligation to continue to process the data.
j-v)The right to data portability
Individuals have the right to request that we transfer some of their data to another controller.
We will comply with a request, where it is feasible to do so, within one month of receiving it.
j-vi)The right to withdraw consent to the processing of data to which consent was obtained
Individuals can withdraw their consent easily by telephone, email, or by post (see Contact Details below).
j-vii)The right to lodge a complaint with the Information Commissioner’s Office.
To lodge a complaint, individuals can contact the Information Commissioner’s Office on 0303 123 1113 or via email or at the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
k) Further processing
If we wish to use personal data for a new purpose, not covered by the Privacy Policy or Privacy Notice, then we will provide you a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions. Where and whenever necessary, we will seek prior consent to the new processing.
l) Changes to the Policy
We keep this Privacy Policy under regular review and we will place any updates on the Parish Council’s website.
4. Data Protection Officer
This section has been removed as, inMay 2018, Parish Councils were declared not to be public bodies for the purposes of GDPR and therefore did not need to have a DPO (Data Protection Officer) if they did not wish to. (See this article on the ICO website.)
As Digital minister Margot James said:
We have been working to minimise the impact of this requirement, and have concluded that as parish and community councils process very little personal data, the burden they would face would be disproportionate.
5. Subject Access Request (SAR)
-
The Parish Council will inform data subjects of their right to access data and provide an easily accessible mechanism through which such a request can be submitted.
-
At any point an individual can contact us to request the personal data we hold as well as why we have that personal data, who has access to the personal data and where we obtained the personal data from. Once we have received a request we will normally respond within one month.
-
There are no fees or charges for the first request but additional requests for the same personal data or requests which are manifestly unfounded or excessive may be subject to an administrative fee.
-
Ensure personal data is easily accessible at all times in order to ensure a timely response to SARs and that personal data on specific data subjects can be easily filtered.
-
The Parish Council will implement standards to respond to SARs, including a standard response.
Upon receipt of a SAR the Parish Council will:
-
Verify whether they are the controller of the data subject’s personal data. If they are not the controller, but merely a processor, the Parish Council will inform the data subject and refer them to the actual controller.
-
Verify the identity of the data subject; if needed, request any further evidence on the identity of the data subject.
-
Verify the access request to ensure it is sufficiently substantiated. Ensure it is clear to the data controller what personal data is requested and If not request additional information.
-
Verify whether requests are unfounded or excessive (in particular because of their repetitive character); if so, the Parish Council may refuse to act on the request or charge a reasonable fee.
-
Promptly acknowledge receipt of the SAR and inform the data subject of any costs involved in the processing of the SAR.
-
Verify whether you process the data requested. If you do not process any data, inform the data subject accordingly. At all times make sure the internal SAR policy is followed and progress can be monitored.
-
Ensure data will not be changed as a result of the SAR. Routine changes as part of the processing activities concerned are permitted.
-
Verify whether the data requested also involves data on other data subjects and make sure this data is filtered before the requested data is supplied to the data subject; if data cannot be filtered, ensure that other data subjects have consented to the supply of their data as part of the SAR.
-
Respond to a SAR within one month after receipt of the request, If more time is needed to respond to complex requests, an extension of another two months will be taken, this will be communicated to the data subject in a timely manner within the first month;
-
If the Parish Council cannot provide the information requested, it will inform the data subject on this decision without delay and normally at the latest within one month of receipt of the request.
-
If a SAR is submitted in electronic form, any personal data will be provided by electronic means if possible.
-
The Parish Council will include as a minimum the following information in the SAR response:
-
The purposes of the processing;
-
The categories of personal data concerned;
-
The recipients or categories of recipients to whom personal data has been or will be disclosed;
-
Where possible, the envisaged period for which personal data will be stored, or, if not possible, the criteria used to determine that period;
-
The existence of the right to request rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
-
The right to lodge a complaint with theInformation Commissioners Office (“ICO”);
-
If the data has not been collected from the data subject: the source of such data;
-
The existence of any automated decision-making, including profiling and any meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
-
Provide a copy of the personal data undergoing processing.
-
Upon receipt of a SAR, the Clerk is to refer to the SAR Policy and templates provided by NALC.
6. Data Protection Impact Assessments (DPIAs)
Under the GDPR, data protection impact assessments (DPIAs) are mandatory where the processing poses a high risk to the rights and freedoms of individuals.
7. Cybersecurity
Data security is an ever-increasing risk for most organisations including councils. However, the number of breaches which are the result of highly sophisticated attacks from hackers is still very limited; most breaches are still the result of human error or relatively unsophisticated phishing attacks.
Storage of data
Appendix A gives detailed descriptions where data - digitally and otherwise - is stored. With respect to cybersecurity, digital data is stored in two main locations:
- The Clerk’s laptop (secure home office), a memory stick is also stored at the Chairman’s home office. This is protected in the following way
- Antivirus software
- Complex passwords of 8 or more characters secure all access
- The Parish Council's website
- Access to the web server (Linux, Nginx) is via SSH key pairs. (Stored on a memory stick in the Parish Clerk's possession)
- Access to the website content (Drupal 8 CMS) is via strong passwords. The strength of a user's password is indicated by the website and isupdatable by the website's authorised users themselves, and only them.
Users of the website have different roles where each role has its own set of permissions to access different kinds of data on the website.
Tables in Appendix A use a legend where "3" is the website as the storage location.
8. Security Incident Response
The Parish Council takes any breach of data security seriously and in the event of such a breach the following response plan will be followed:
A data security breach is defined as the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data. This includes breaches that are the result of both accidental and deliberate causes. It also means that a breach is more than just about losing personal data.
Examples of which are:
-
Access by an unauthorised third party.
-
Deliberate or accidental action (or inaction) by a controller or processor.
-
Sending personal data to an incorrect recipient.
-
Computing devices containing personal data being lost or stolenď‚·Loss of availability of personal data.
In the event of a breach the Clerk is to be notified immediately, and in her absence the Chairman should be informed. Clerk and Cllrs are instructed to report any breaches immediately they suspect one may have occurred. Decisions are to be made by the Parish Clerk after consultation with Councillors. These decisions will include but are not limited to: notifying the correct supervisory bodies and the individual involved in the breach.
If after investigating the incident it is confirmed that a personal data breach occurred, we will establish the likelihood and severity of the resulting risk to people’s rights and freedoms. If it is likely that there will be a risk then we will notify the Information Commissioners Office (ICO). Any notifications to the ICO will be done not later than 72 hours after the breach was identified. The GDPR recognises that it will not always be possible to investigate a breach fully within 72 hours to understand exactly what has happened and what needs to be done to mitigate it. Article 34(4) allows us to provide the required information in phases, as long as this is done without undue delay. We will always prioritise the investigation, give it adequate resources, and expedite it urgently.
The Parish Clerk in conjunction with the Chairman will decide if the breach is notifiable after assessing both the severity of the potential or actual impact on individuals as a result of a breach and the likelihood of this occurring. In such cases, we will promptly inform those affected, particularly if there is a need to mitigate an immediate risk of damage to them, therefore allowing them time to take steps to protect themselves from the effects of a breach. We will provide them with a description of the likely consequences of the personal data breach; and what measures are being taken, or proposed to be taken, to deal with the breach and including, where appropriate, the measures taken to mitigate any possible adverse effects.
If the decision is taken not to notify individuals, we will still notify the ICO unless the breach is unlikely to result in a risk to rights and freedoms. However, if a decision is made not to inform the ICO then that decision will be documented. As with any other breach of procedures or security incident officers will thoroughly investigate to ascertain whether the breach was a result of human error or a systemic issue. It will then be determined the best way to ensure how a recurrence can be prevented, whether this is through better processes, further training or other corrective steps.
9. Freedom of Information Policy
The Council is committed to complying with the provisions of the Freedom of Information Act 2000 and associated legislation. This provides a general entitlement to information that the Council holds to any person subject to exemptions and conditions laid down by law.
Scope
This policy applies to all recorded information the Council holds regardless of how it was created or received. It applies regardless of the media the information is stored in whether the information may be on paper, held electronically or as an audio recording. The Act is fully retrospective. Dealing with requests the Parish Council offers advice and assistance to anybody who wishes to make a Freedom of Information (FOI) request. The Council is committed to dealing with requests within the statutory timescales of no more than 20 working days. This can be extended in specific circumstances on legal advice. However, the Council is committed to providing a prompt service.
The Council will claim exemptions as appropriate whilst maintaining a commitment to openness, scrutiny and the public interest and will inform the FOI applicant when exemptions have been applied. Where appropriate, requests in writing will be treated as Freedom of Information requests. There is no need for requests to indicate they are made under the Act. The Council reserves the right to refuse requests where the cost of supply of the information would exceed the statutory maximum (see section 12 of the Act.).
Adopting and Maintaining Publication Schemes
The Council has adopted an Information Publication Scheme (attached at Appendix A) and is committed to updating and maintaining it to keep it current and relevant. The Publication Scheme contains many of the documents, policies, plans and guidance which are usually asked for and much more. Material contained within the publication scheme, and a copy of the scheme itself, is readily available. Where charges are applied these are stated in the Scheme. The scheme can also be accessed via the website. The Parish Clerk will give advice and assistance on how to use the scheme as appropriate. This scheme is reviewed an updated on an annual basis.
Responsibilities
The Parish Clerk is responsible for ensuring that any request for information is dealt with under the Act and in compliance with this policy. The Clerk is also responsible for good information handling practice and implementing records management policies and procedures as appropriate. The Council will carefully consider its responsibilities under GDPR before releasing any personal data about living individuals, including current and former officers, current and former Council Members, and users of the Council’s services.
Contact Details
For advice and assistance please contact the Parish Council:
Bradford Abbas Parish Council
3 Churchwell Lane,
Bradford Abbas,
Sherborne,
Dorset. DT9 6RQ
Email: bradfordabbas@dorset-aptc.gov.uk
Contact form: (Click here)
Website: www.bradford-abbas.uk
Further advice and information, including a full list of exemptions and advice on the public interest test, is available from the Information Commissioner's Office:www.ICO.org.uk.
10. Associated Documents
Other documents related to both the Data Protection and Freedom of information policy are:
-
Risk Management Policy (including Financial) ( Linkrequired )
-
Audit Questionnaire ( Linkrequired )
-
Information Audit( Linkrequired )
11. Appendix A
Key to InformationLocation*
In the tables below the Location column uses the following identifiers:
- PC Laptop/Memory Sticks/NAS Drive (Clerk’s home office)
- Clerk’s home Office
- Parish Council’s Website
- Noticeboards
Information to be published | Location* | Comments |
---|---|---|
Location of main Council office and accessibility details Clerks’ Home Office | 1 - 4 | |
List of Councillors and their responsibilities (each including address and telephone number) |
1 - 4 | |
Membership of Working Groups | 1, 3 | |
Bradford Abbas Code of Conduct | 1 | |
Agendas, reports and minutes | 1 - 3 | |
Reports to Council (last 2 years) | 1 | |
Minutes of Council (last 2 years) | 1 - 3 | |
Standing Orders | 1 |
Class 1 Exclusions
Confidential Agendas, Minutes and Reports (pre-2007 or staff related). This is where the documents contain exempt information. Typically information may be withheld if it is personal data and its disclosure would contravene the General Data Protection Regulations or if the information relates to legal proceedings or advice, or if disclosure would prejudice the commercial interests of another person. Since 2007 confidential Minutes other than those relating to staff are released into the public domain with the public minutes.
Information to be published | Location* | Comments |
---|---|---|
Current and previous financial year as a minimum | 1, 3 | |
Annual return form and report by auditor – internal and external (limited to the last financial year) | 1, 3 | |
Budgets | 1 | |
Precept request (limited to the last financial year) | 1 | |
VAT records (limited to the last financial year) | 1 | |
Financial Standing Orders and Regulations (including those dealing with the award of contracts) | 1 | |
Fees and charges applied by the Council | 1 | |
Receipt/Payment records, receipt books of all kinds, bank statements from all accounts (limited to the last financial year) | 1 | |
Purchase of goods/services ÂŁ100 and over | 3 | Updated quarterly |
Class 2 Exclusions
All commercially sensitive information e.g. quotations and tenders, loan documentation and insurance policies. With regard to quotations and tenders, this information is treated as confidential to ensure that the whole tender process is fair i.e. if tender information is released to a third party prior to the end of the tender period those who initially submitted tenders could be undercut and or unfairly disadvantaged.
Information to be published | Location | Comments |
---|---|---|
Village Plan | 3 | |
Risk Assessments | 1 | |
Best Value Inspection Reports | N/A |
Information to be published | Location | Comments |
---|---|---|
Timetable of meetings (Council, any working group meetings and parish meetings) | 1, 3 | Recorded in minutes/emails |
Agendas of meetings (as above) | 1, 3 | |
Minutes of meetings (as above) – nb this will exclude information that is properly regarded as private to the meeting. | 1, 3 | |
Reports presented to council meetings - nb this will exclude information that is properly regarded as private to the meeting. | 1, 3 | |
Responses to consultation papers | 1 | |
Analysis of responses received to public consultations by the Council | 2, 3 | |
Public consultations with local community | 2, 3 | |
Responses to planning applications | 1, 3, WDDC planning |
Class 4 Exclusions
Copies of planning consultations, the Development Plan, Structure Plan, Local Plan and Rights of Way/Footpath maps all of which are available from the local planning and/or highway authority respectively.
Information to be published | Location | Comments |
---|---|---|
Policies and procedures for the conduct of council business: |
|
|
Policy statements issued by the Council | 1 | |
Standing orders | 1 | |
Code of Conduct | 1 | |
Safety Inspection Record | 1, 3 | |
Policies and procedures for the provision of services and about the employment of staff: | ||
Equality and diversity policy | 1 | |
Health and safety policy | 1 | |
Job Descriptions | 1 | |
Terms and Conditions of Employment | 1 | |
Policies and procedures for handling requests for information | 1 | |
Information security policy | 1 | |
Records management policies (records retention, destruction and archive) | 1 | |
Data protection policies | 1, 3 | |
Schedule of charges (for the publication of information) | 1, 3 |
Class 5 Exclusions
All personal records i.e. appraisals, employee specific salary details, disciplinary records, sickness records and the like by virtue of being personal data under the Data Protection Act 1988.
Information to be published | Location | Comments |
---|---|---|
Any publicly available register or list (if any are held this should be publicised; in most circumstances existing access provisions will suffice) |
1 | |
Information relating to the last periodic electoral review of the council area | 1 / WDDC | |
Information relating to the latest boundary review of the council area | 1 / WDDC | |
Assets Register | 1, 3 | |
Members’ Declaration of Acceptance of Office | 1 | |
Register of Pecuniary and Personal Interests | 1, 3 |
Information to be published | Location | Comments |
---|---|---|
Current information only (hard copy or website; some information may only be available by inspection) | 1 | |
Parks, playing fields and recreational facilities | 1 | |
Seating, litter bins, memorials etc | 1 |
Contact details
- Parish Clerk, Bradford Abbas Parish Council, 3 Churchwell Lane, Bradford Abbas, Sherborne, Dorset. DT9 6RQ
- The Contact form of the Parish Council's website.
Type of charge | Description | Basis of charge |
---|---|---|
Disbursement cost | Photocopying @ 8p per sheet (black & white) | 0.86p (actual cost incurred by BAPC ) + VAT |
Postage | Actual cost of Royal Mail standard 2nd class |
Any charges made by Bradford Abbas Parish Council for routinely published material must be justified and transparent and kept to a minimum. Material which is published and accessed on a website will be provided free of charge. Charges may be made for actual disbursements incurred such as photocopying and also a postage charge if you are unable to call into the office to collect them. The cost will be 8p per page plus actual postal charges. If a charge is to be made, the individual will be informed of the charge and why it is to be incurred prior to the information being provided. Payment may be requested prior to release of the information. Charges may also be made for information provided under the scheme where it is legally authorised. Any subject access requests to information will be complied within one month. Your request will be refused or charged for if it is manifestly unfounded or excessive.