Privacy notice for Culture Host

Who runs this service

Telford & Wrekin Council is the controller. Brass Lantern Studios is the processor.

What we collect

The name, work email and phone number of people who have an account, and a record of what each account does in the service.

Why we use it

[lawful basis, Council to confirm]

Who it's shared with

• AWS, in the UK
• Cloudflare, for public listings only
• Our UK or EEA email provider

We use no new subprocessor without the Council's prior written approval.

How long we keep it

Accounts unused for 24 months are flagged to the Council, which removes them on its decision. The audit trail is kept for 12 months.

Sign-in records include the internet address used; they are deleted after 12 months.

Your rights

You can check and correct your details at any time, and ask for them to be erased. When an account is removed, the audit trail keeps a record of what happened, with the name shown as "Removed user".

Contact

[Council data protection officer]