Privacy & Consent Statement

Who are we?

The Hurdle project is a community support project which provides support for parents who have experienced or are at risk of the removal of a child within the care system.

What data do we keep?

We need to keep certain information (data) to provide you with support.

We use two legal bases for processing information under GDPR:

In most adult services data is processed under ‘contract’ as we need this information to provide effective and efficient support. Once the information is given to us, we do not need permission to process it. There is also data that we need to ask for, for which we DO need consent:

Equality information – we need to ask for this to comply with Equality Act 2010, but you can choose not to give it
Care plans / medical reports / criminal convictions – we need this information to understand your needs and allow us to support you appropriately, but we do need to ask for your explicit consent first as this is more sensitive data.

How will the data be used?

To enable us to provide you with an appropriate, effective, efficient service
For monitoring or statistical purposes (we will not use identifiable data for this)
For research, so we can improve our services in the future (we will not use identifiable data for this)

Your data will not be used for any automated decision making.

Where will we get the data from?

We will collect information from you, the person who refers you to us, or other professionals having contact with you, and anyone else you would like us to speak to about your needs.

Who will we share your data with?

We will only share information with professionals (e.g. your social worker, Consultant/GP), in the context of providing a service to you, only when it is necessary, and only with your consent. If there is an emergency, we may still need to share your data with other agencies, but we will only do this to keep you or others safe and if it is within your vital interests.

If a situation arises which is potentially a safeguarding issue we will share, without your consent, your data with the relevant authorities to ensure safety for both yourself and others.

Monitoring or statistical data will be shared with funders/commissioners, but we will not share identifiable information with them. Where we provide services in partnership with other agencies, we will ensure they sign a Data Sharing Agreement to keep your data safe.

How will we keep the data?

We will collect your data onto paper forms, or directly onto a secure service database. We will keep paper forms securely and destroy them as soon as we don’t need them anymore (in most cases this will be as soon as the data has been transferred onto our secure database). Our databases are only accessible with individual staff passwords. Access within our databases is restricted to those people who need to see it as part of their job. With regard to retention please see regulatory requirements i.e. Ofsted, Charity Commission, Companies House and the company’s Retention of Records and Destruction Policy.

What are your rights?

Your rights and your personal data

Unless subject to an exemption (under the GDPR), you have the following rights with respect to your personal data:

The right to request a copy of your personal data which the company/charity holds about you;
The right to request that the company/charity corrects any personal data if it is found to be inaccurate or out of date;
The right to request your personal data is erased where it is no longer necessary for company/charity to retain such data;
The right to withdraw your consent to the processing at any time;
The right to request that the company/charity provide the data subject with his/her personal data and where possible, to transmit that data directly to another data controller;
The right to lodge a complaint with the Information Commissioners Office.

If at any point you believe the information we process on you is incorrect you request to see this information and even have it corrected or deleted.

To exercise all relevant rights, queries or if you wish to raise a complaint on how we have handled your personal data, in the first instance you can contact the project manager

Kelly Moore – 02476502800

If you are not happy with the outcome you can complain to the Chief Executive (Carly Davis and Jim Evans our Data Protection Officers) who will investigate the matter.

If you believe we are processing your data unfairly you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) Tel: 03031231113.

Data Protection Officers

Our Data Protection Officers are Carly Davis and Jim Evans and you can contact them at:

carly@dudleylodge.co.uk

jimevans@dudleylodge.co.uk or:

Tel: 02476502800