This privacy notice is designed to help you understand how and why the living well smoke free service processes your personal data. This notice should be read in conjunction with our corporate privacy notice.
Who are we?
North Yorkshire Council is a ‘data controller’ as defined by Article 4(7) of the UK General Data Protection Regulation (UK GDPR). The team dealing with smoking cessation collects and processes data in order to facilitate support of adults and children over 12 years old receiving this service.
We have has appointed Veritau Ltd to be our data protection officer.
Their contact details are:
Information Governance Office
Veritau
West Offices
Station Rise
York
North Yorkshire
YO1 6GA
Email: infogov@northyorks.gov.uk
Tel: 01904 552848
What personal information do we collect?
The living well smokefree service collects the following personal information about you:
- name, address, date of birth and contact details
- lifestyle information
- health information
- occupational status
The team will also collect certain ‘special category’ information such as:
- physical and / or mental health details
- racial or ethnic origin
Why do we collect your personal information?
Without your data we would not be able to assess your needs around smoking cessation, or be able to recommend appropriate smoking cessation medication/nicotine replacement therapy. Therefore we require your personal data in order for:
- service delivery
- service planning/improvement
- data returns to public health England (using anonymised data only unless we specifically request your consent to use identifiable personal data)
- research (using anonymised data only unless we specifically request your consent to use identifiable personal data)
Who do we share this information with?
In order to deliver the best possible service, the team will often need to disclose your personal data to other organisations. This could include, but not necessarily limited to:
- NHS agencies (GPs, hospitals, ambulance, health visitor), mental health services, and other health providers
How long do we keep your information for?
| Data held | Retention period |
|---|---|
| Smoking record | Service retention policy applies. 10 years after last contact with client. |
What is our lawful basis for processing your information?
With regard to personal data:
- article 6(1)(e) – public task
With regard to special category data:
- article 9(2)(h) - provision of health and social care
- article 9(2)(i) - processing is necessary for reasons of public interest in public health
For more information about how we use your data, including your privacy rights and the complaints process, please see our corporate privacy notice.