Privacy notice - Recovery Solutions

Middlesbrough Council works with people in need of specialist support to Achieve Change Together (ACT). The wider privacy notice for these services is available elsewhere on our website. The rest of privacy notice covers ACT’s Recovery Solutions services in more detail.

We collect ‘personal data’ including names, date of birth, location and contact information, gender, spoken languages, family and friend’s information, prescription charges payment status, NHS Patient Number, and details of involvements with other agencies or services and names of professionals involved.

We collect ‘special category data’ including racial or ethnic origin, religious or philosophical beliefs, sexual orientation, sex life, and health including but not limited to physical, physiological, disability, diagnosis, treatment, and risks and hazards posed to others. We also collect ‘criminal convictions and offences’ information.

We collect this information directly from people that we work with and sometimes from other organisations – including the NHS Summary Care Record unless you have specifically objected to this.

We use personal data and criminal convictions and offences data to comply with our ‘legal obligations’ or to deliver our ‘public tasks’. We use special category data to ‘provide health or social care or treatment’ or where there is a ‘substantial public interest’ based in law.

Some of the laws that require or allow us to use this data include the National Health Service Act 2006, Mental Health Act 1983, Care Act 2010, Children Act 1989, Health and Safety Act 1974, and the Equality Act 2010.

We use personal data to provide substance use assessment and treatment and support services, protection for our staff and those of our partner organisations, safeguarding services for adults and children, and accessible services. Some of the information that we gather can be used to detect or prevent fraud. Although we gather a lot of different data, we only use what is necessary for the services that you receive.

We only share personal data necessary to provide services you need or would benefit from. This can include services that Middlesbrough Council has asked other organisations to provide on our behalf. Where you have a choice about what services to receive or which organisations we refer you to, we will always listen to your preferences. Some of those organisations are affected by data protection law in different ways and may ask for your consent to use or share your data. However, at Middlesbrough Council, we do not require consent and share information to help us to meet our legal obligations or provide our public tasks.

Some of the organisations that we share information with include Health bodies including those that provide Public Health, Health Testing, Hospitals, Mental Health, Ambulance, Pharmacies, GP services, and the Government Department of Health and Social Care.

We share information with Police, Courts, Prison or Probation Services where we have a legal obligation or where you have not objected. We are also part of the Teesside Intensive Supervision Court sharing information mainly with the Probation Service. We also share some information with other Middlesbrough Council teams including other ACT Teams, Adult Social Care, Children’s Social Care, Community Safety, and Welfare Rights.

We use the following measures to ensure that your personal data is secure: data protection and security policies, information security incident reporting, data and device encryption, system and data access controls, user accounts and passwords, physical and environmental security, staff vetting practices, staff training and awareness, data back-ups, ICT network penetration testing, and business continuity and disaster recovery plans.

We only keep your data for as long as the Law requires it and this is set out in our ‘Records Management Retention Schedules’.

No, your personal data is processed and stored only in the United Kingdom.

We will not use this personal data for any direct marketing purposes.

Your Information Rights are set out in law and, subject to some exceptions, you have the:

• Right to rectification - to ask for information to be corrected
• Right to erasure - to have your personal data deleted
• Right to object - to how your data is used
• Right to restriction - to request limits on how your data is used
• Right to portability - to request that we move your data to another organisation
• Right of subject access - to request a copy of data the Council holds about you

If you have a concerns about the way we are collecting or using your personal data, you should raise your concern with us in the first instance or directly to the Information Commissioner's Office. Visit the website of the Information Commissioner's Office.

If you would like to discuss anything in this privacy notice or your information rights, please contact:

The Data Protection Officer
Middlesbrough Council
PO Box 500, Middlesbrough, TS1 9FT
Phone: 01642 245432
Email: dataprotection@middlesbrough.gov.uk