Privacy Notice – Active Lifestyles
How we use your information
The categories of this information that we collect, process, hold and share include:
Contact Information
Telephone number
Mobile telephone number
Email address
Personal Information
Name
Full Address including post code
Gender
Details of registered GP Practice
Details of medical history
Smoking status
Alcohol use
Lifestyle and physical activity information
Equality Monitoring and special category data
Employment
Sexual Orientation
Religion
Gender at birth
Disability
Results of Active Lifestyles appointments
Height
Weight
Waist measurement
Blood pressure
Resting Heart Rate
Lung Functions *Optional*
Exercise options chosen
Appointment / Contact dates
Why we collect and use this information
The Council and The Living Well Sefton Service (which includes Active Lifestyles, Sefton CVS, May Logan Centre, Brighter Living Partnership, Smokefree Sefton and Ambition Sefton) use your personal information in order to:
Assess health risks and provide individualised exercise, lifestyle and wellbeing support.
To recommend and refer into partner lifestyle and wellbeing services (Sefton Council, Sefton CVS, May Logan Centre, Brighter Living Partnership, Smokefree Sefton and Ambition Sefton).
To recommend other lifestyle and wellbeing services
The data is also used to derive statistics and intelligence for research and planning purposes, which include:
Producing assessments of the health and care needs of the population
Identifying priorities for action
Informing decisions eg on the design of services
Assessing the performance of the NHS Health Checks Programme
Reporting summary statistics to Public Health England
These statistics are presented in such a way that individuals cannot be identified from them and person identifiable details are removed as soon as possible in the process of intelligence.
The lawful bases on which we use this information
Article 6(1)(c) of the General Data Protection Regulation 2016 gives the Council a lawful basis for collecting and using personal data in order to comply with its legal obligations,
Article 6(1)(e) of the General Data Protection Regulation 2016 gives the Council a lawful basis for collecting and using personal data where it is in the exercise of official authority vested in the Council.
Article 9(2) (g) of the General Data Protection Regulation 2016 gives the Council a lawful basis for collecting and using ‘special category’ data where the processing is necessary for reasons of substantial public interest, on the basis of Union or Member State law which shall be proportionate to the aim pursued, respect the essence of the right to data protection and provide for suitable and specific measures to safeguard the fundamental rights and the interests of the data subject;
The NHS Health Check Programme is a legal responsibility of unitary or upper tier local authorities in England as per Local Authorities (Public Health Functions and Entry to Premises by Local Healthwatch Representatives) Regulations 2013. The data processed as part of the check is used to establish a QRisk score which predicts the probablitity of an individual developing cardio-vascular disease. With consent, this information is also used to refer to partner lifestyle and wellbeing services (Sefton Council, Sefton CVS, May Logan Centre, Brighter Living Partnership, Smokefree Sefton and Ambition Sefton) or to advise the individual of other services as appropriate.
Section 149 of the Equalities Act 2010 imposes a number of duties on public authorities when exercising their functions. More information on these duties can be viewed at the following link:
https://www.gov.uk/government/publications/public-sector-equality-duty
Storing this information
We hold your information for a period of 6 years from the date of your latest appointment.
Data access is limited to key staff who are regularly trained to understand their duty towards protecting data and good information governance procedures.
Confidential public health data will only be shared with other areas of Sefton Council, Sefton CVS, May Logan Centre, Brighter Living Partnership, Smokefree Sefton, Ambition Sefton, Sefton GP Practices and Public Health England with the permission of the Caldicott Guardian, once the necessary legal basis has been established and data protection safeguards have been verified, so that the data is managed and used under the same restrictions. Anyone who received information from Sefton Council is also under a legal duty to keep it confidential.
Who we share this information with
We share this information with the following parties in order to deliver the NHS Health Check programme. We will also share your information to the following parties in order to refer into lifestyle and wellbeing services with your consent:
Sefton Council
Sefton CVS
May Logan Centre
Brighter Living Partnership
Smokefree Sefton
Ambition Sefton
GP Practices – Results of your progress on the Active Lifestyles programmes will be sent to your registered GP Practice with your consent.
Public Heath England – Anonymised aggregate information is shared
Requesting access to your personal data
Under data protection legislation, you have the right to request access to information that we hold. To make a request for your personal information contact:
Lindsay McDowall at Lindsay.McDowall@sefton.gov.uk
Steven Cushion at Steven.Cushion@sefton.gov.uk
or the Data Protection Officer at: ino.information@sefton.gov.uk
You also have the right to:
object to processing of personal data that is likely to cause, or is causing, damage or distress
prevent processing for the purpose of direct marketing
object to decisions being taken by automated means
in certain circumstances, have inaccurate personal data rectified, blocked, erased or destroyed and
right to data portability in certain circumstances
The right to lodge a complaint with the supervisory authority (the Information Commissioner’s Office)
If you have a concern about the way we are collecting or using your personal data, we request that you raise your concern with us in the first instance. Alternatively, you can contact the Information Commissioner’s Office at https://ico.org.uk/concerns/
Further information
If you would like further information about this privacy notice, please contact:
Lindsay McDowall, Development Manager at Lindsay.McDowall@sefton.gov.uk
Steven Cushion, Development Manager at Steven.Cushion@sefton.gov.uk
Or contact Sefton Council’s Data Protection Officer at:
Telephone: 0345 140 0845 email ino.information@sefton.gov.uk