Who will own my data once I submit it?
Knowsley Metropolitan Borough Council and Vibe Charitable Incorporated Organisation (CIO).
Vibe CIO’s privacy notice is available on Privacy & Cookies Policy — Vibe UK - Youth Charity
Why do you need my information?
Knowsley Metropolitan Borough Council has commissioned Vibe CIO to support and sit alongside the work of existing services such as, Children’s Services, Education Services, Youth Offending Service, health services, substance misuse services, and schools. The purpose of the service is:
- To provide targeted, diversionary, positive activities for young people who are carers to develop their self-esteem and resilience and offer positive activities and emotional support.
- To provide access to information, advice and guidance about services for them and their families. This will include the signposting of young people to the statutory Young Carers Assessment Team within children’s services (if originally referred by another source such as education, health). This will provide the opportunity for young people to access support available from the statutory Young Carers Assessment Team.
Where available, Knowsley Metropolitan Borough Council will use existing Children's Social Care data to identify eligible young carers to make appropriate referrals to the Me Time service.
The purpose for Knowsley Metropolitan Borough Council and Vibe CIO collecting this information includes but is not restricted to:
- Help and support young carers
- To protect service user and others from harm
- To help the prevention and detection of crime
- Help identify risk to children, vulnerable adults, and others
- Inform future service design and funding decisions
- Examine the outcomes of aspects of the service and the characteristics of people accessing the service
- Statistical Analysis
- Statutory returns
- Ensuring service delivery
What Personal Information do we collect?
In order for Knowsley Metropolitan Borough Council, and the Me Time – Young Carers Service to offer support within Knowsley we may collect all, or some, of the following information from you:
Examples include:
- Personal Data
- Name
- DOB
- Sex
- Address
- Postcode
- Next of kin
- Phone number
- Medical information
- Photographs
- Videos
- Voice notes
- Impact measurement
- Special Category Data
- Medical information
What allows you to use my information?
The lawful bases under the UK General Data Protection Regulation (UK GDPR) for Knowsley Council processing the personal, and special category personal data are as follows:
- Article 6(1)(a), which states that an individual has given consent to the processing of their personal data. We would seek your consent to make a referral to Vibe.
- Article 6(1)(e), Public task. This allows the processing of personal data if processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in a data controller.
- Article 9(2)(g), which allows processing that is necessary on the basis of substantial public interest.
- Article 9(2)(h), Health or social care. This allows of the processing of special category personal data, such as medical information, for the purposes of the provision of health or social care or treatment or the management of health and social care systems and services.
- Article 9(2)(i), which allow processing that is necessary for reasons of public interest in the area of public health
The relevant lawful conditions under the Data Protection Act 2018 are as follows:
- Sch 1, P2 (6) Statutory and government purposes
- Sch 1, P1 (2) Health and social care
- Sch 1, P1 (3) Public health
The statutory legislation underpinning this processing of personal data is: Health and Social Care Act 2008 (Regulated Activities) Regulations 2014. In addition to this, the Equality Act 2010 is also relevant as there are specific provisions for carers i.e., “carers should not be treated unfairly because they are caring for an elderly or disabled person”.
The lawful bases for Vibe CIO processing the personal, and special category personal data are as follows:
UK GDPR
- Article 6 (1)(a) the data subject has given consent to the processing of his or her personal data for one or more specific purposes;
- Article 6(1)(f), Legitimate interests. Vibe CIO need to hold data on service users to provide support.
- Article 9(2)(a), Explicit consent. This is where a service user would give explicit consent to the processing of any special category personal data about them.
- Article 9(2)(c), Vital interests. This will cover situations where an individual is at risk of immediate and serious harm.
- Article 9(2)(e), Personal data which are manifestly made public by the individual.
- Article 9(2)(f), Establishment, exercise or defence of legal claims.
- Article 9(2)(h), Processing of personal data for the purposes of preventative or occupational medicine, the provision of health or social care or treatment or the management of health or social care systems and services.
- Article 9(2)(i), Public interest in the area of public health.
- Article 9(2)(j), Research purposes.
The relevant lawful conditions under the Data Protection Act 2018 are as follows:
• Sch 1, Pt 1(2), Health and social care.
• Sch 1, Pt 1(3), Public health.
• Sch 1, Pt 1(4), Research etc.
Who will my information be shared with?
Knowsley Metropolitan Borough Council may be required by law to share personal data relating to individuals/families and children to other Government departments and our authorised partner agencies organisations.
Wherever possible we will discuss with you the reasons for sharing information and where relevant ask for your informed and explicit consent. However, in some circumstances, the law and our policies allow us to share information without your consent (for example when we feel that you or others are at risk of harm). When sharing information, we do so in line with data protection legislation and agreed information sharing protocols.
Here is a list of some of the organisations that we may be required to share your information with:
- Other service areas within the Local Authority.
- Mersey Care (formerly Northwest Boroughs Health Service) if related to a shared service. For example, Care Experienced Health to ensure statutory health requirements are met and shared with the appropriate professionals to ensure all parties are fully informed on a child or young person’s health and social care status. Such information may be shared via access to secure case management systems.
- Local Government and Social Care Ombudsman.
- All partner agencies involved specifically with children and families, and the safeguarding of individuals such as Police and local Safeguarding Partnerships.
- When in court proceedings, information will be shared with parties to proceedings; The child’s parents and anyone else who holds Parental Responsibility for the child will be a “party to proceedings”. In some circumstances other individuals may request to be made a “party to proceedings” which the court will have agreed on if they feel this is in the best interest of the proceedings.
- Teams within Knowsley Metropolitan Borough Council working to improve outcomes for children and young people.
- In house providers of social care services, such as in house foster carers and short breaks.
- Commissioned providers of Local Authority services (such as Voluntary Sector Agencies, Independent Foster Care Agencies, Children’s Homes, Semi-Independent accommodation Providers, Supported Lodgings Providers, Residential Special Schools, and Secure accommodation). Where services are commissioned, the provider would often be a processor of information and be a data controller in their own right and, as such, they would determine the means and purposes of processing personal data.
- Law enforcement or other authorities if required by applicable law.
- Interpreters E.g., where a staff member requires an interpreter to assist them in carrying out their role this will be communicated to you and IG arrangements will be in place to support any processing of personal information for this purpose.
- Partner organisations signed up to the Information Sharing Agreement, where necessary, which may include health visitors, midwives, district councils, housing providers, police, school nurses, doctors, and mental health workers.
- Government departments including the Department of Education, Department of Work and Pensions, and the Home Office.
- Her Majesty's Courts and Tribunal Service.
- Ofsted (in the event of a local authority inspection of children’s services).
- Wirral 0-25 Health Services (Wirral Community Health and Care NHS Foundation Trust) as a commissioned provider and under the terms of an Information Sharing Agreement to ensure children’s health needs are met and the relevant health services are provided to improve health outcomes. This will include access and sharing of information to provide health information to social care and social care information to health professionals involved in a child open with Early Help and Children’s Social Care.
Where we are required to lawfully share your information with authorised partner organisations, we will ensure this is done in a secure manner, and the information shared is relevant and proportionate in order for them deliver your services.
Vibe CIO will only share data with other organisations if it is appropriate, these organisations include but not restricted to:
- Knowsley Metropolitan Borough Council.
- NHS (including hospitals and GPs).
- Wellbeing organisations if accessing services such as therapies.
Do I have to provide this information and what will happen if I don’t?
Where Knowsley Metropolitan Borough Council rely on your consent to process your personal information, you can withdraw your consent to our use of your data at any time. You can do this by emailing Inforights@knowsley.gov.uk
Please also be aware of the following:
- Information enables us to plan and support children and families further.
- Sometimes information is requested via Court, and it can affect plans if it is not shared.
- We appreciate open and honest relationships so may ask for consent to share information as best practice where appropriate. Where there is a clear risk or safeguarding issue, we may not seek your consent and rely on another lawful basis under UK GDPR as outlined above.
- If you are a family member who does not hold parental responsibility and do not consent to your information being shared within court proceedings and shared with parties to proceedings, you will be given the opportunity to withdraw from the assessment process.
How long will you keep this data for and why?
Your information will only be held for as long as necessary to achieve the relevant purpose unless we are legally required to retain it for a specific period. It will only be held for the periods stated in our record retention schedule, after which it will be securely destroyed.
Information can be stored up to 75 years, dependent upon the nature of the information. Most of this information is kept electronically.
Vibe CIO’s privacy notice states that consent is valid for 12 months from the date the form is signed. Following this date, we will store the data securely electronically for a maximum of 3 years, unless we are required by law to keep it any longer.
How will my information be stored?
Your information will be stored securely on Knowsley Metropolitan Borough Council and/or Vibe CIO’s IT systems. Some information is held in a central SharePoint site. Access to the systems is restricted to those who are entitled to view and process your data. If the information is collected in a paper format, we will also ensure it is kept secure and destroyed when no longer required.
Will this information be used to take automated decisions about me?
No, the information will not be used to take automated decisions.
Will my data be transferred abroad and why?
No
What rights do I have when it comes to my data?
Under the Data Protection Act (DPA) 2018/ UK General Data Protection Regulation (UK GDPR), you have the following rights with regards to your personal data: -
- The right to subject access – you have the right to see a copy of the personal data that the council holds about you and find out what it is used for.
- The right to rectification – you have the right to ask the council to correct or remove any inaccurate data that we hold about you.
- The right to erasure (right to be forgotten) you have the right to ask the council to remove data that we hold about you.
- The right to restriction – you have the right to ask for your information to be restricted (locked down) on council systems.
- The right to data portability – you have the right to ask for your data to be transferred back to you or to a new provider at your request.
- The right to object – you have the right to ask the council to stop using your personal data or to stop sending you marketing information, or complain about how your data is used.
- The right to prevent automated decision making – you have the right to ask the council to stop using your data to make automated decisions about you or to stop profiling your behaviour (where applicable).
To find out more about your rights under the DPA 2018/UK GDPR, please visit the Information Commissioner’s website.
You can request a copy of your data or ask questions about how it is used by visiting our website here:
Subject access request | Knowsley Council
By email to: Inforights@knowsley.gov.uk
Or in writing to:
Data Protection Officer
Knowsley Council
Westmorland Road
Huyton
L36 6GA
Who can I complain to if I am unhappy about how my data is used?
You can complain directly to the Council’s Data Protection Team by writing to: -
Data Protection Officer
Knowsley Council
Westmorland Road
Huyton
L36 6GA
Or email: data.protection.officer@knowsley.gov.uk
You also have the right to complain to the Information Commissioner’s Office using the following details: -
The Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 08456 30 60 60 or 01625 54 57 45
Website: www.ico.org.uk