Privacy Notice – How we use your information
Calderdale Metropolitan Borough Council of Town Hall, Crossley Street, Halifax, HX1 1UJ is registered with the Information Commissioners Office (ICO) under the provision of the Data Protection Act 2018. The Council takes its responsibilities as Data Controller under the Data Protection Act and UK GDPR very seriously.
This privacy notice explains how your personal information will be processed to provide you with advice and support from the Better Living Service.
The type of information we will collect:
The following information if relevant will be provided to us by your referring practitioner, or directly by you:
- Name, date of birth and contact details
- Gender
- Ethnicity
- Health information including relevant medical conditions and medications
- GP surgery
- Alcohol consumption (Audit C validated tool)
- Physical activity levels (IPAQ validated tool)
- Weight, height and waist measurement
- Wellbeing score (SWEMWBS validated tool)
- Details of session bookings and progress
We may also collect the following information as part of our monitoring form, if you have explicitly consented to this processing:
- Armed Forces Covenant; whether considered to be disabled; if referred due to Over 40’s NHS Health Check; Unpaid Carer; Religion; Nationality; Sexual orientation; if pregnant; Gender identity same at birth; On Severe Mental Illness register; On Learning Disability Register; Employed/Unemployed status.
Why we collect and hold this information
The personal data provided will be used to:
- Manage your referral and check your eligibility based upon BMI (height/weight), activity levels, Alcohol Audit C risk score
- Identify your needs e.g. help with stopping smoking, drinking less alcohol, managing your weight, getting more fit and active, stroke recovery
- Provide you with an account with the Better Living Service, offer help and support, and monitor your progress
- Manage people receiving help from the Stroke Recovery service
- Contact you to keep you informed of relevant information
- Obtain feedback to help us to understand the effectiveness of the service and to develop and improve future services
- Administer and protect public funds.
Sharing your personal data
- Your data will be shared, with your permission, if you are referred to another service e.g., Recovery Steps, Staying Well, VitaMinds.
- Information will be shared between the Council and Slimming World if you contact them to use their service.
- If you are receiving support from the Stoke Recovery Programme your information may be shared with the NHS/your GP/Referrers, as our trainer works closely with referrers to support more complex needs.
We only share information where necessary to help provide the services you have asked for or where we have a lawful basis to do so.
The lawful basis for the processing your data
- Article 6(1)(a) and 9(2)(a) – your explicit consent to process personal data given where optional and for monitoring purposes
- Article 6(1)(e) – for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
- Article 9(2)(h) – for the provision of health or social care; and Schedule 1, part 1 of the Data Protection Act 2018
Retaining your personal information
Your personal information will be kept for either:
- a maximum of two years from the date of referral if you then choose not to use the service, or
- a maximum of two years from the date you end using the service
At the end of the retention period your personal data will be securely destroyed.
Your rights
The GDPR provides the following rights for individuals. Not all rights are absolute and therefore will only apply in certain circumstances:
- The right to be informed
- The right of access
- The right to rectification
- The right to erasure
- The right to restrict processing
- The right to data portability
- The right to object
- Rights in relation to automated decision making and profiling.
You also have the right to complain to the Data Protection Officer if you feel that your data has not been handled in accordance with the law. You can contact the Council’s Data Protection Officer at information.management@calderdale.gov.uk.
You have the right to lodge a complaint with the Information Commissioner’s Office at www.ico.org.uk