Privacy Notice – Clients: (How we use your information)
The categories of this information that we collect, process, hold and share include:
· personal information (such as name, date of birth and address, emergency contact details)
· characteristics (such as gender, ethnicity and disability)
· information gathered to support the provision of service including risk and needs assessments
· reports in relation to provision of service
· financial details under agreement in relation to payments
When using our website we collect standard internet log information (cookies) including
· IP address
· details of the pages you visit
· general details about the type of device you are using
This is statistical information used to monitor the number of visitors and pages visited. The information is not used to identify individuals. Where we collect personal information through our website we will make it clear that we are doing so.
Why we collect and use this information
We use this personal data to:
· support clients and monitor progress and successes
· work with multi-professionals, parents, guardians and carers to support a holistic approach to meeting the service provision requirement
· evaluate and improve our policies and practices
· facilitate the day to day management of our organisation
· marketing purposes (we do not share this information with third parties).
The lawful basis on which we use this information
We collect and process information about clients that we support using the following legal basis
Contractual: the processing is necessary for us to meet the terms of the service agreement.
Legitimate Interest: processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child. E.g internal due diligence.
Special Category Information:
Contractual: the processing is necessary for us to meet the terms of the service agreement
Consent: we need this information to meet your needs and your consent is required for us to offer our service, as part of our service agreement
Collecting this information
Whilst the majority of client’s information you provide to us is mandatory, some of it is provided to us on a voluntary basis. In order to comply with the data protection legislation, we will inform you whether you are required to provide certain information to us or if you have a choice in this.
Storing this information
We hold client data for:
· Six months after application; or
· The term of the service agreement plus 3 years.
Who we share this information with
We routinely share this information with:
· Multi-professionals, parents, guardians, carers.
Why we share this information
We share client’s data with multi-professionals, parents, guardians and carers to ensure we can provide the service and support that best meets the needs of the client.
We do not share information about our clients with anyone without consent unless the law and our policies require or allow us to do so.
Data collection requirements
Grow and Achieve Together collects and processes personal data from parents, guardians, clients, multi-professionals
Grow and Achieve Together may share information with third parties who or support the services we provide, for use in:
· conducting research or analysis
· producing statistics
· providing information, advice or guidance
Grow and Achieve Together has robust processes in place to ensure the confidentiality of our data is maintained and there are stringent controls in place regarding access and use of the data.
Access to your personal data
Under data protection legislation, you have the right to request access to information about you that we hold. To make a request for your personal information, contact our Data Manager: name Tracey Rhodes, 47 Coronation Avenue, Stoke-on-Trent, ST8 7AJ, firstname.lastname@example.org tel. no: 07467941782.
You also have the right to:
· object to processing of personal data that is likely to cause, or is causing, damage or distress
· prevent processing for the purpose of direct marketing
· object to decisions being taken by automated means
· in certain circumstances, have inaccurate personal data rectified, blocked, erased or destroyed; and
· claim compensation for damages caused by a breach of the Data Protection regulations
If you have a concern about the way we are collecting or using your personal data, you should raise your concern with us in the first instance or refer the issue directly to the Information Commissioner’s Office at https://ico.org.uk/concerns/
If you would like to discuss anything in this privacy notice, please contact our Data Manager, details as above.