How we use your information

The categories of this information that we collect, process, hold and share include:

Contact Information

• Telephone number
• Mobile telephone number
• Email address

Personal Information

• Name
• Full Address including post code
• Gender
• Details of registered GP Practice
• Details of medical history
• Smoking status
• Alcohol use
• Lifestyle and physical activity information

Equality Monitoring and special category data

• Employment
• Sexual Orientation
• Religion
• Gender at birth
• Disability

Results of Active Lifestyles appointments

• Height 
• Weight
• Waist measurement
• Blood pressure
• Resting Heart Rate
• Lung Functions *Optional*
• Exercise options chosen
• Appointment / Contact dates 

Why we collect and use this information

The Council and The Living Well Sefton Service (which includes Active Lifestyles, Sefton CVS, May Logan Centre, Brighter Living Partnership, Smokefree Sefton and Ambition Sefton) use your personal information in order to:

• Assess health risks and provide individualised exercise, lifestyle and wellbeing support.
• To recommend and refer into partner lifestyle and wellbeing services (Sefton Council, Sefton CVS, May Logan Centre, Brighter Living Partnership, Smokefree Sefton and Ambition Sefton).
• To recommend other lifestyle and wellbeing services

The data is also used to derive statistics and intelligence for research and planning purposes, which include:

• Producing assessments of the health and care needs of the population
• Identifying priorities for action
• Informing decisions eg on the design of services
• Assessing the performance of the NHS Health Checks Programme
• Reporting summary statistics to Public Health England

These statistics are presented in such a way that individuals cannot be identified from them and person identifiable details are removed as soon as possible in the process of intelligence.

The lawful bases on which we use this information

Article 6(1)(c) of the General Data Protection Regulation 2016 gives the Council a lawful basis for collecting and using personal data in order to comply with its legal obligations, 

Article 6(1)(e) of the General Data Protection Regulation 2016 gives the Council a lawful basis for collecting and using personal data where it is in the exercise of official authority vested in the Council. 

Article 9(2) (g) of the General Data Protection Regulation 2016 gives the Council a lawful basis for collecting and using ‘special category’ data where the processing is necessary for reasons of substantial public interest, on the basis of Union or Member State law which shall be proportionate to the aim pursued, respect the essence of the right to data protection and provide for suitable and specific measures to safeguard the fundamental rights and the interests of the data subject;

The NHS Health Check Programme is a legal responsibility of unitary or upper tier local authorities in England as per Local Authorities (Public Health Functions and Entry to Premises by Local Healthwatch Representatives) Regulations 2013.  The data processed as part of the check is used to establish a QRisk score which predicts the probablitity of an individual developing cardio-vascular disease.  With consent, this information is also used to refer to partner lifestyle and wellbeing services (Sefton Council, Sefton CVS, May Logan Centre, Brighter Living Partnership, Smokefree Sefton and Ambition Sefton) or to advise the individual of other services as appropriate.

Section 149 of the Equalities Act 2010 imposes a number of duties on public authorities when exercising their functions. More information on these duties can be viewed at the following link:

https://www.gov.uk/government/publications/public-sector-equality-duty

Storing this information 

We hold your information for a period of 6 years from the date of your latest appointment.

Data access is limited to key staff who are regularly trained to understand their duty towards protecting data and good information governance procedures.

Confidential public health data will only be shared with other areas of Sefton Council, Sefton CVS, May Logan Centre, Brighter Living Partnership, Smokefree Sefton, Ambition Sefton, Sefton GP Practices and Public Health England with the permission of the Caldicott Guardian, once the necessary legal basis has been established and data protection safeguards have been verified, so that the data is managed and used under the same restrictions.  Anyone who received information from Sefton Council is also under a legal duty to keep it confidential.  

Who we share this information with

We share this information with the following parties in order to deliver the NHS Health Check programme.  We will also share your information to the following parties in order to refer into lifestyle and wellbeing services with your consent:

• Sefton Council
• Sefton CVS
• May Logan Centre
• Brighter Living Partnership
• Smokefree Sefton
• Ambition Sefton

GP Practices – Results of your progress on the Active Lifestyles programmes will be sent to your registered GP Practice with your consent.

Public Heath England – Anonymised aggregate information is shared

Requesting access to your personal data

Under data protection legislation, you have the right to request access to information that we hold. To make a request for your personal information contact:

Lindsay McDowall at Lindsay.McDowall@sefton.gov.uk

Steven Cushion at Steven.Cushion@sefton.gov.uk 

or the Data Protection Officer at: ino.information@sefton.gov.uk

You also have the right to:

• object to processing of personal data that is likely to cause, or is causing, damage or distress
• prevent processing for the purpose of direct marketing
• object to decisions being taken by automated means
• in certain circumstances, have inaccurate personal data rectified, blocked, erased or destroyed and
• right to data portability in certain circumstances
• The right to lodge a complaint with the supervisory authority (the Information Commissioner’s Office)

If you have a concern about the way we are collecting or using your personal data, we request that you raise your concern with us in the first instance. Alternatively, you can contact the Information Commissioner’s Office at https://ico.org.uk/concerns/

Further information

If you would like further information about this privacy notice, please contact:

Lindsay McDowall, Development Manager at Lindsay.McDowall@sefton.gov.uk

Steven Cushion, Development Manager at Steven.Cushion@sefton.gov.uk 

Or contact Sefton Council’s Data Protection Officer at: 

Telephone: 0345 140 0845  email ino.information@sefton.gov.uk