PRIVACY NOTICE
Your personal information and what we do with it
Why do you collect my information?
One You Surrey collects your information for your inclusion on our Stop Smoking or Adult Weight Management Programmes. Our service is commissioned by Surrey County Council to improve your health and wellbeing.
Who do you get my data from?
We get your information from Self-Referrals, Healthcare Professionals and Community Services.
How does data protection law allow you to use my data?
If you have referred yourself into our service, we would be using your data on the basis that you have initially given us consent to do so, and from there that we are providing you with a healthcare service, which by itself gives us a basis for using your data.
If you have been referred by a healthcare professional, we work on the understanding that they have discussed the initial referral with you and your agreement with it being made, and once it is received by us similarly, that we are providing you with a healthcare service.
We will ask for your consent for marketing and communication to you regarding other programmes we offer upon sign-up.
What information of mine do you use?
The personal data we use includes Name/ Surname, DOB, Address, GP Surgery, Email Address, Phone, Gender, Employment Status, Marital Status, Disability, Pregnant, Pay for Prescription.
The more sensitive special category data we use is Ethnicity, Medical History, Religion and Sexual Orientation.
Do you share my information with anyone?
If you select one of our partner’s Adult Weight Management Programmes then we will share your data with MAN v FAT or Slimming World to enable them to contact you and deliver their programmes.
If you are a Stop Smoking client who opts for Nicotine Replacement Therapy direct supply we will share your contact information (name, address, email and telephone number) with our partner distributors Direct Supply Solutions Limited.
Your personal data is shared with Surrey County Council to monitor and evaluate the One You Surrey service which they commission.
We will ask for your consent to feedback your programme outcome to your healthcare professionals when you sign up.
Does any of my information get sent outside of the UK?
We send your data outside the UK but not outside the EU.
How long do you keep my information?
We keep your information for in line with the NHS Records Management Code of Practice 2021 thereafter it will be deleted through a manual process. We retain children’s records until their 25th birthday, or 26th if the patient was 17 when treatment ended.
What about my rights under Data Protection law, how can I activate them?
Under Data Protection law you have the right to:
- Be informed how your data is used (which is what this notice is doing).
- Access to your information.
- Rectification of errors.
- Erasure (in certain circumstances).
- Restriction of processing (in certain circumstances)
- Objection to processing.
- Data Portability
- Understand whether profiling or automated decision-making is being used.
If you would like to request or discuss any of these, please contact our Data Asset Owner using the details at the end of this notice.
Do you use any automated decision-making or profiling on my information?
No.
What do I do if I am concerned about how you are using my information?
In the first instance we would be grateful for the opportunity to respond to your concerns ourselves and hopefully sort out any issues for you. To help with this, please write to our Data Asset Owner at the following address: [email protected]
If you are not satisfied with the outcome of our support, you may take your complaint to the Information Commissioners Office which regulates data protection.
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. It can be contacted by telephone on 0303 123 1113 or by email on [email protected]
