The Data Protection Act 2018/GDPR provides a legal framework for processing personal data in the UK ensuring privacy for all individuals. Redditch Nightstop undertakes its work in accordance with these laws.
Our Privacy Notice tells you how we process the data which we collect on you and how we protect your privacy and what your rights are. Our full Privacy Notice, with all the details, can be found on our website. This is a summary of the key points.
Redditch Nightstop collects your personal and special category data when you interact with us. This could be when you tell us information on the phone, go onto our website, correspond with us by email or letter, complete a form or tell us information in person. We may collect the following data about you:
|Your Personal Data||Your Special Category Data|
|Name, Address, data of birth, telephone number, email, country of birth, Age, Gender, financial information, work history, education, training, family/dependents, friends/social life, national insurance number, GP details, Dentist details, Optician details, local connections, safeguarding, reason for referral||Criminal offence data Ethnicity Physical or Mental Health Religion Sexual life and orientation|
When we refer to ‘processing data’ we mean any of the following:
In order to comply with the law we must always process your data lawfully, fairly and in a transparent manner.
We must have a lawful basis for processing your data. For Redditch Nightstop, the lawful basis for processing your data is ‘Legitimate Interests’ which is, “where you use people’s data in ways they would reasonably expect…” (ICO)
If we need to process your special category data, for example information about your health, then we must have an additional lawful basis for processing this sort of data specifically Article 9(h) Health or social care.
Sometimes we need to share your data with third parties as follows:
|Data is shared between the following third parties:||Purpose|
|Redditch Nightstop hosts & Volunteers, Redditch Borough Council, housing providers, DWP, Health Services, Headgym, schools and colleges, Referees, Homeless Link – database, Centrepoint, Depaul||To provide our services To access a service on behalf of a client.|
We may ask for your consent for other optional parts of our service, for example case studies, photographs for use in social media and our newsletter.
We also share data with our accrediting organisation Depaul UK and Centrepoint for statistical evidence to inform policy and monitoring purposes. However, this data is anonymised and does not identify you. It is therefore not covered by data protection law.
Redditch Nightstop keep your data for different lengths of time as directed by Financial Law, our funders’ requirements and our business need. After the specified time it will be destroyed.
|Type of data||Where is it stored||Duration|
|Client – referral form including risk assessment, support notes Emergency Accommodation, Supported Lodgings and Drop In and Floating Support (21-35yrs)||Electronically on secure server Database||2 years from last contact|
|Client - referral form including risk assessment, support notes Floating Support (18-21yrs)||Electronically on secure server Database||5-7 years from last contact|
|Client – expenses, rent, hardship payment Financial Records||Electronically on secure server Database||7 years|
Apart from the data sharing set out above, Redditch Nightstop will not share your data unless we believe someone is at risk of serious harm or if we have a legal obligation to pass information on. When this is the case we will as far as possible inform you beforehand.
Your information is held securely as set out in the full Privacy Statement referred to above.
Depending on the legal basis for process your data, you may have the right to request the following:
If you would like a full copy of our Privacy Statement or for more information about how your data is used please contact Charlotte Shepard by writing to:
Unit 4 & 5, Britten House
The Old Needle Works
or phoning 01526 66036
or emailing: firstname.lastname@example.org
If you would like to find out more about your rights around how your data is processed or if you are unhappy with our response you can contact www.ico.org.uk