This privacy notice is designed to help you understand how and why the provider services team within health and adults service (HAS) processes your personal data. This notice should be read in conjunction with our corporate privacy notice.
Who are we?
North Yorkshire Council is a ‘data controller’ as defined by Article 4(7) of the UK General Data Protection Regulation (UK GDPR). We directly provide for adults living in North Yorkshire care and support through a number of different services. These services are offered in a number of different ways or settings but all with the aim of providing care and support where needed, promoting independence and ensuring adults have choice and control over their lives. The teams dealing with these services collect and process data in order to facilitate the care and support provision of adults receiving these services.
The services provided are as follows:
Personal care at home – this is often referred to as domiciliary care and involved care and support workers providing support in person own home where required.
- extra care and support
We are the main provider of extra care in 13 extra care schemes in North Yorkshire. Staff provide planned visits to some of people living in these schemes and also the background/ad hoc support to all the people living in these schemes:
- residential care services
We have 10 care establishments where adults generally over 65 live permanently and require care and support on a 24 hour basis. Some of these residential establishments also provide support for people leaving hospital and require a period of rehabilitation and recuperation. Some also provide short stay visits to provide respite for carers and breaks for the person. We also deliver day care support in some of these establishments.
As well as the above, we also provides day care in 8 establishments for adults with learning disabilities, and autism and complex needs and provides residential short stay services for adults with learning disabilities in 5 buildings across North Yorkshire.
We have appointed Veritau Ltd to be our data protection officer.
Their contact details are:
Information Governance Office
Tel: 01904 552848
What personal information do we collect?
The provider services team collects personal data including, but not necessarily limited to:
- name, address, date of birth and contact details
- social care ID and NHS ID
- family composition, family history, relationships information, lifestyle information and social circumstances
- personal referees
- financial information
- visual images, personal appearance and behaviour
The team also collects the following special category data:
- physical and / or mental health details
- racial or ethnic origin
- religious or philosophical beliefs
- social care assessed needs and support outcomes
- criminal proceedings, outcomes and convictions
Why do we collect your personal information?
We require personal data and special category data in order to assess social care needs as well as arranging and providing social care services. This includes:
- service delivery
- service planning/improvement
- research (using anonymised data only unless we specifically request your consent to use identifiable personal data)
Who do we share this information with?
In order to deliver effective and high quality services the Provider Services Team routinely shares data with:
- NHS agencies (GPs, hospitals, ambulance, health visitor), mental health services, and other health providers
- education providers
- domiciliary care, residential/nursing care, and day care providers
- local and central government agencies (such as the department of health and department of work and pensions)
- substance misuse agencies
- advocacy services
- prepaid card providers
- direct payment support services
- housing associations
Use of your NHS number in adult social care
If you are receiving support from adult social care then the NHS may share your NHS number with us. This is so that the NHS and adult social care are using the same number to identify you whilst providing your care. By using the same number we are able to work together to improve your care and support.
How long do we keep your information for?
Records relating to the creation and management of the care needs assessment process
Retain from year records created plus 6 years.
Client records relating to the provision of respite care for adults
Retain from year records created plus 6 years.
What is our lawful basis for processing your information?
The provider services team processes your personal data in order to comply with a legal obligation or because processing is in the public interest. The team may also process your special category data as it has a legal obligation to provide health and social care services.
For more information about how we use your data, including your privacy rights and the complaints process, please see our corporate privacy notice.