We are committed to protecting your privacy when you use our Adult Social Care services.
This Privacy Notice explains what personal information we collect about you, how and why we use it, who we disclose it to, and how we protect your privacy.
We comply with our legal obligations under the General Data Protection Regulation (GDPR) 2018 and the Data Protection Act 2018 when using your personal data - for example, collecting, storing, sharing, and destroying it.
Who we are
We want to ensure that our residents live healthy, independent and fulfilling lives as part of our communities. We provide the support you need to achieve your goals, get involved in the community and make informed choices about your wellbeing and care. We aim to help you stay as independent as possible.
When providing social care services to you, we must collect and use your personal information. We process your data to provide care and support services to adults with physical, mental health and learning disabilities, older people and carers. We do this either directly or by working jointly with our partners.
Most of the information given to us is mandatory (for example to comply with our statutory obligations). However, some of it is provided by you on a voluntary basis. To comply with the GDPR and the Data Protection Act 2018, we'll say if you must give us certain information, or it is your choice. We will also request your consent where it is not mandatory to provide information. We'll also explain what your data rights are and what your information will be used for.
We may collect information in various ways including on paper, by telephone, electronically or by a member of staff in person. You have the right to withdraw your consent if this applies to processing your data.
You may be unable to consent to us collecting your information. For example, a learning disability or cognitive impairment means you cannot understand this process. In such cases, we will talk to your representative and store and share your information to promote your wellbeing.
We may also share your personal information with third-party agencies. These include the NHS, domiciliary care services, care home providers and other health and care services we may commission to support you. We may also share your data when it is necessary and mandatory under the law.
Your privacy rights
This Privacy Notice tells you:
- What information do we, Adult Social Care Services hold about you
- How we use your information
- Who we share your information within and outside the council
- How we keep your information safe and secure
- Your right to see your social care records
The legal bases for processing your personal information are:
- Compliance with a legal obligation
- Contract for the supply of services
Adult Social Care staff will update their systems with any details about your situation to help us to meet your social care and health needs. The information we hold about you is confidential. Any records we store can only be seen by authorised staff and others with a right to know, including you.
The law gives you various rights to control the personal information we use and how we use it. For more information about your individual data rights see our Corporate Privacy Notice.
What information we hold about you
This may include all or some of the following:
- Your personal details
- Information about other members of your household
- Details of family relationships in and outside of your household
- The names and contact details of your close relatives and/or carers
- Your legal status and documents (eg immigration, power of attorney)
- Your accommodation (eg type, layout, details of alarms fitted, accessibility)
- Details about your personal care, eating and drinking, practical tasks, physical and emotional wellbeing, parenting
- Details of any risks
- Whether you need an interpreter or translator
- Any cultural, spiritual or religious beliefs we must consider when providing support
- Your medical history and details of any diagnoses
- Health, social care or other services you receive
- Goals you wish to achieve relating to your social care needs
- Support provided by any carers or others
- Information about your situation given to us by your family and/or carers
- Information other organisations (like health or other care services) tell us to help us understand your needs to better coordinate your care services
- Reports relating to your situation and care (eg assessments, support plans and reviews)
- Any documents sent to us relating to you
- Records of phone conversations relating to you (eg conversations between you or your carer or representative and Adult Social Care staff, or conversations between our staff and NHS, members of your family/your representative or providers of care).
Why we collect personal data
We collect person data in order to:
- produce statistics and reports to plan our services (eg to help decide what support a person needs, how often they need it and when). This helps us to commission appropriate services to meet a person’s need). We use statistics in such a way that people cannot be identified from them.
- account for our decisions and investigate complaints
- make sure the service you receive is efficient and effective
- meet our statutory obligations including those related to diversity and equalities
- carry out different types of analysis, eg price benchmarking, placements and services, and calculation of rates for services
- review the quality of care
- research and plan new services
- identify and protect those at risk of harm or abuse, and ensure compliance with adult safeguarding policies and procedures
Who we share your information with internally
Your data is used by staff working in our Adult Social Care Services. This has number of services / teams, including:
- Older People Service Teams
- Disability Service Teams
- Adult Safeguarding Team
- Deprivation of Liberty Safeguards Team
- Hospital Discharge Teams
- Occupational Therapy Service Teams
- Day Service Teams
- Children’s Service Teams
- NELFT Adult Mental Health Service Teams
- Carers Support Services
- Finance Team
These staff will only access the personal information that is vital to carry out their work and statutory functions. However, they may share data between different teams where this is necessary to provide you with services.
Other council teams or services may also have access to your personal information to perform their statutory roles or support the teams/services listed above and may include:
- Complaints Team
- Legal Services Department
- Business Intelligence Team
- Information Management Team
- Corporate Finance Service Teams
- Housing Service Teams
- Welfare Service Teams
Who we share your information with outside the Council
Relevant information about you may be passed to external organisations to arrange support to meet your health and social care needs. The types of organisation we may pass your information to are listed below:
- Your advocate or representative (if you have instructed one)
- Health care professionals including your GP, nurse or hospital consultants
- Mental Health Providers of domiciliary care and supported living care
- Clinical Commissioning Groups are NHS organisations created by legislation to organise the delivery of NHS services in England
- Providers of residential and nursing care services
- Housing landlords and tenancy officers when necessary to provide you with care and support, or to prevent or avoid harm to yourself
- Providers of respite services
- Providers of community services whom we have a contract with
- Other local authorities if you're placed or transferred outside the borough
- Government departments such as the Disclosure and Barring Service and Care Quality Commission
- We also have legal duties to pass information to third-party organisations like the Police and/or the Department of Work and Pensions and anti-fraud agencies. This is for the purposes of preventing and detecting crime, or for anti-fraud purposes, or for the protection of public funds.
All organisations we pass your information to will have an information-sharing agreement with us to ensure they meet the standards of the GDPR and the Data Protection Act 2018, and will be covered by a legal basis allowing them to collect, use and share your personal information. In some circumstances, information may be shared with third parties where there is a legal obligation to do so.
Please note we may share your personal information when we feel that the risk is serious and protecting you is more important than protecting your privacy. For example, we may share your information:
- to protect adults who are thought to be at risk if they are frail, confused or cannot understand what is happening to them
- to prevent or investigate a crime
- to protect yourself, or our staff, or the public
- to protect other professionals
- if we are required to do so by any court or law.
If we are worried about your safety and believe we need to take action to protect you from being harmed, we will discuss our concerns with you and, if possible, obtain your permission to disclose this information. We may share this information with third parties if we assess the risk to you or others to be serious.
There may also be situations when the risk to you or others is so great that we believe we need to share your information without delay. If this is the case, we will make sure that we record what information we share and our reasons for doing so. We will also let you know what we have done and why if we think it is safe to do so.
Lawful basis for processing personal data
We are committed to ensuring that your information is stored safely.
We manage, maintain and protect all information according to legislation, our policies and best practice. All information is stored, processed and communicated in a secure manner. We provide training to staff who handle personal information and how to report and escalate when something goes wrong.
When we no longer require keeping information about you, we will review it and archive it for any relevant legal retention period and ultimately dispose of it in a secure manner.
Our Data Protection Officer
Our Data Protection Officer is Mark Hynes. Email: Data.Protection@walthamforest.gov.uk.
Protecting your information
Please see the relevant section of the Corporate Privacy Notice.
Your information choice and rights
Please see the relevant section of the Corporate Privacy Notice.
Complaints and contact details
These are included in the relevant section of the Corporate Privacy Notice.
Information Commissioner’s Office
If we’re unable to resolve your complaint to your satisfaction, you can complain to the Information Commissioner's Office (ICO)
The GDPR and Data Protection Act 2018 give you a number of rights to control what personal information is used by us and how it is used by us. Information about your individual data rights is listed in the Council’s Corporate Privacy Notice.
If you have any questions or concerns about the way we collect, store or use your personal information, please contact us in the first instance on 020 8496 3000.
For advice about data protection issues, you can contact the Information Commissioner’s Office (ICO).
We reserve the right to amend this Privacy Notice at any time and will keep it under review. If we do make any changes, we will post the current version to our website at this address.