Data protection policy

This is yet to be done. The council needs to register with the ICO.