Brokerage team privacy notice

This privacy notice is designed to help you understand how and why the brokerage team processes your personal data. This notice should be read in conjunction with our corporate privacy notice.

Who are we?

North Yorkshire Council is a ‘data controller’ as defined by Article 4(7) of the UK General Data Protection Regulation (UK GDPR).

The teams dealing with the sourcing of placements and packages of care for people with care and support needs on behalf of health collect and process data in order to facilitate this activity. They use this information to ensure that the care and support commissioned is appropriate and meets the needs of the person it is required for.

We have appointed Veritau Ltd to be our data protection officer.

Their contact details are:

Information Governance Office


West Offices

Station Rise


North Yorkshire



Tel: 01904 552848

What personal information do we collect?

The quality and monitoring team collects personal data including, but not necessarily limited to:

  • name, address, date of birth and contact details
  • social care ID and NHS ID
  • family composition, family history, relationships information, lifestyle information and social circumstances
  • personal referees
  • financial information
  • visual images, personal appearance and behaviour

The team also collects the following special category data:

  • physical and / or mental health details
  • racial or ethnic origin
  • health care assessed needs and health outcomes

Why do we collect your personal information?

Without your data we would not be able to assess social care needs, or be able to arrange services commissioned on behalf of health:

  • service delivery
  • service planning/Improvement

Who do we share this information with?

In order to deliver effective and high quality services the Brokerage Team routinely shares data with:

  • domiciliary care providers
  • residential/nursing care providers
  • day care providers
  • mental health services
  • local government
  • substance misuse agencies

Use of your NHS number in adult social care

If you are receiving support from adult social care then the NHS may share your NHS number with us. This is so that the NHS and adult social care are using the same number to identify you whilst providing your care. By using the same number we are able to work together to improve your care and support.

How long do we keep your information for?

Data held

Retention period

Records relating to the commissioning of health and social care services

Retain from year records created for 6 years.

What is our lawful basis for processing your information?

With regard to personal data:

  • article 6(1)(c) – Legal obligation: the processing is necessary to comply with the law

With regard to special category data:

  • article 9(2)(h) – Provision of health and social care

For more information about how we use your data, including your privacy rights and the complaints process, please see our corporate privacy notice.