Privacy notice
Your personal information and what we do with it
Why do you collect my information?
Thriving Nottingham collects your information for the delivery of our integrated wellbeing service. Our service is commissioned by Nottingham City Council. The purpose of our service is to support people to lead healthier and happier lives through a range of programmes including Stopping Smoking, Physical Activity, Adult Weight Management and Child and Family Weight Management.
Who do you get my data from?
We get your information from the following sources:
- Self-Referrals from Social Marketing and Community Engagement.
- Referrals from our partnerships with Healthcare Professionals such as GPs and Secondary Care.
If you are referring on behalf of another person, we will always ensure you have consent to do so.
How does data protection law allow you to use my data?
- If you have referred yourself into our service, we would be using your data on the basis that you have initially given us consent to do so, and from there that we are providing you with a healthcare service, which by itself gives us a basis for using your data.
- If you have been referred by a healthcare professional, we work on the understanding that they have discussed the initial referral with you and you agree with it being made, and once it is received by us similarly, that we are providing you with a healthcare service.
What information of mine do you use?
We will collect and process both your Personal Identifiable Information and Special Category Information to enable us to deliver our programmes and fulfil contractual reporting requirements as stipulated by Nottingham City Council.
Do you share my information with anyone?
To deliver our programme we may refer you to our partner organisations including Leisure Centres and Slimming World. We will ask for your consent to share your programme outcome data with your GP and Nottingham City Council. We will not pass your details onto any third parties for marketing.
Does any of my information get sent outside of the EU?
No.
How long do you keep my information?
We keep your information in line with the NHS Records Management Code of Practice 2021. We retain children’s records until 25th birthday, or 26th if the patient was 17 when treatment ended.
What about my rights under Data Protection law, how can I activate them?
Under Data Protection law you have the right to:
- Be informed how your data is used (which is what this notice is doing).
- Access to your information.
- Rectification of errors.
- Erasure (in certain circumstances).
- Restriction of processing (in certain circumstances)
- Objection to processing.
- Data Portability.
- Understand whether profiling or automated decision-making is being used
Do you use any automated decision-making or profiling on my information?
No.
What do I do if I am concerned about how you are using my information?
In the first instance we would be grateful for the opportunity to respond to your concerns ourselves and hopefully sort out any issues for you. To help with this, please write to our Data Protection Officer at the following address: dpo@thrivetribe.org.uk
If you are not satisfied with the outcome of our support, you may take your complaint to the Information Commissioner’s Office, which regulates Data Protection. Its address is Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. It can be contacted by telephone on 0303 123 1113 or by email on icocasework@ico.org.uk
