How we collect and use your information
When you interact with the Future Surrey website, we may need to collect personal data to respond to an enquiry, provide information, or deliver a service. We only collect personal data that is necessary for these purposes. This may include your name, contact details, address, or other information that could identify you.
Your data may be processed when it is submitted through the website using the Contact Us, Feedback, or Find My Council forms to help us improve our website content and services.
Using your personal data
Most personal data collected through the Future Surrey website is provided directly by you. Where we have a duty to provide a service, our lawful basis for processing your data will usually be the performance of a public task.
Depending on the circumstances, we may also rely on one or more of the following lawful bases:
- You have given your consent for us to use your personal data for a specific purpose
- Processing is necessary to perform a contract with you, or to take steps at your request before entering into a contract
- Processing is necessary to comply with a legal obligation
- Processing is necessary to protect your vital interests or those of another person
- In very limited circumstances, processing is necessary for our legitimate interests or those of a third party, where this does not override your rights and freedoms, particularly where children’s data is involved
We will only use your personal data for the purpose it was collected, or for another compatible and lawful purpose.
Why we use your information
Your information may be used, where necessary and proportionate, for the following purposes:
- To communicate with you and provide information or services through the Future Surrey website
- To plan, monitor, and improve services and website performance
How we keep your information safe
We take the security of your personal data seriously and protect it whether it is held electronically or in paper form. Measures include:
- Encryption to protect information from unauthorised access
- Restricted access to systems and data
- Regular staff training on data protection and information security
- Ongoing testing and updating of systems to maintain security
We manage personal data throughout its lifecycle, ensuring it is accurate, kept up to date where necessary, and not retained for longer than required. When data is no longer needed, it is securely deleted or disposed of in line with our retention policies.
Sharing your information
To provide effective services and meet our legal responsibilities, we may share personal data internally and with Surrey county, district and borough councils. Where possible, we will tell you who your information will be shared with at the point it is collected or within a relevant privacy notice.
Where we regularly share information with another organisation, we put formal data sharing agreements in place to ensure high standards of data protection.
We use the Jadu content management system Jadu website to run this website. Jadu may have access to your data when it is submitted through the site using contact us, feedback and find my council forms.