Stop Smoking Service Privacy Notice
Our core data protection obligations and commitments are set out in Bradford Council's primary privacy notice and the Public Health privacy notice.
This notice provides additional privacy information for those accessing the Council’s Stop Smoking Service and describes how the Stop Smoking Service collects, uses and shares personal information about you and the types of personal information we need to process, including information the law describes as 'special' because of its sensitivity.
Personal information we collect and use
Information collected by us
The information we collect will be the minimum we need to deliver our service and will include the following personal data:
- name, age, date of birth, ethnicity, gender
- correspondence details (address, telephone number, email addresses)
- referrer details
- NHS number
- GP practice
- health and medical information
- medication
- Nicotine Replacement Therapy details
- pregnancy details
- employment status and occupation
How we use your personal information
We collect your personal information for the following purposes:
- assist individuals to improve their general health and wellbeing through a variety of different stop smoking services
- commission and deliver stop smoking services to promote health and prevent ill health
How long your personal data will be kept
We will hold your personal information in line with Bradford Council's retention schedule. At its expiry date the information will be reviewed, and only retained where there is an on going requirement to retain for a statutory or legal purpose. Following this your personal information will be securely destroyed.
Reasons we can collect and use your personal information
The lawful basis on which we collect and use your personal data is that
- The data subject has given consent
- Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract
- Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
We hold the information in line with the following legislation:
The Health & Social Care Act 2012 (plus consent under common law duty of confidence)
Who we share your personal information with
We may sometimes share the information that we have collected about you where it is necessary, lawful and fair to do so. We may share information with the following for these purposes:
As a commissioned service, we will share information with those referring individuals to the Stop Smoking Service. This will include GP surgeries and pharmacies.
We may also share information if we are referring individuals to other well-being services.
We will also share reports and information related to the Stop Smoking Service with Tobacco Control Alliance, Public Health England (PHE) and NHS Digital, but in this instance all personal data will be anonymised.
Keeping your personal information secure
We have appropriate security measures in place to prevent personal information from being accidentally lost, used or accessed in an unauthorised way. We limit access to your personal information to those who have a genuine business need to know it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.
We also have procedures in place to deal with any suspected data security incidents and we will notify you and the appropriate regulator of any incident where we are legally required to do so.
When computers make any decisions about you?
The Stop Smoking Service does not make or use automated decisions.
When your data is sent to other countries?
We do not send any information we collect about you outside the United Kingdom.
Rights for individuals under UK GDPR
What are your rights?
Please contact the Corporate Information Governance Team at dpo@bradford.gov.uk to exercise any of your rights, or if you have a complaint about why your information has been collected, how it has been used or how long we have kept it for.
You can contact our Data Protection Officer at dpo@bradford.gov.uk or write to: Data Protection Officer, City Hall, Centenary Square, Bradford, BD1 1HY.
The UK GDPR also gives you the right to lodge a complaint with the Information Commissioner's Office who are the supervisory authority responsible to regulate and monitor the legislative obligations within the UK and can be contacted on 03031 231113.