This privacy notice is designed to help you understand how and why the no wrong door service processes your personal data. This notice should be read in conjunction with our corporate privacy notice.
Who are we?
North Yorkshire Council is a ‘data controller’ as defined by Article 4(7) of the UK General Data Protection Regulation (UK GDPR).
Young people (as defined in the no wrong door (NWD) project submission to the department of education) in the care of North Yorkshire Council are at risk of being drawn into crime or criminal gangs, falling victim to sexual abuse or exploitation or engaging in anti-social behaviour with, or encouraged by, other people. No wrong door aims to identify those people associating with young persons in the care of North Yorkshire Council who may pose or increase the likelihood one or more of the above risks (either directly or indirectly through other contacts), and to disrupt that association and provide alternative, lower-risk paths for the young person concerned.
In order to ensure a co-ordinated approach to identifying and disrupting those associations that are considered a risk, relevant information, including personal and sensitive personal information, about the young person(s) concerned and the identified associate(s) will be identified and considered by each partner organisation who are working as part of the No wrong door model.
The council has appointed Veritau Ltd to be its data protection officer. Their contact details are:
Information Governance Office
Veritau
West Offices
Station Rise
York
North Yorkshire
YO1 6GA
Email: infogov@northyorks.gov.uk
Tel: 01904 552848
What personal information do we collect?
In order to deliver our no wrong door service the council will need to collect both personal and special category data.
The council will collect the following categories of personal data:
- name
- address (including previous addresses)
- date of birth
- relationship to young person
- family history
- education information
- unique reference numbers (e.g. NHS number, pupil number)
- employment status
- known associates
- physical attributes and unique features
- looked after children status and background
We will collect the following categories of special category data:
- sexual orientation and/or sexual history
- religious or philosophical beliefs
- racial or ethnic origin
- criminal conviction and/or offence history
- physical and mental health information
Why do we collect your personal information?
We need to collect this information to carry out the following tasks:
- delivery of the no wrong door service
- prevention/detection of a crime
- safeguarding of young people
- to ensure young people in crisis receive well organised and appropriate support
- to ensure risks to young people are correctly identified and assessed
Who do we share this information with and where do we get our information from?
In the course of performing our duties, we may share your information with a number of agencies who are key to delivering the no wrong door service. The purpose of sharing personal and special category information between the partner organisations is for the safeguarding and promotion of welfare of children. Additionally, depending upon the particular risk that has been identified, the sharing of some personal or sensitive personal data may also be for the prevention and / or detection of crime or anti-social behaviour.
Within North Yorkshire Council:
- social workers (young person’s care plan owners)
- VEMT team
- prevention team
- youth justice service
- education department
- foster service and carers
Agencies we routinely share information with and gather information from:
- Police
- NHS trusts: Harrogate and district Foundation trust; Tees, Esk and Wear Valley foundation trust
- housing providers: Foundation UK; Safe and Sound Homes; Barnardos; Ryedale YMCA; Ripon YMCA; Richmond YMCA; Leeds federation Housing; Broadacres
How long do we keep your information?
The data we hold about you is only kept for as long as is necessary for us to carry out our obligations with regard to no wrong door and all data is retained in line with the council’s record retention and destruction schedule (RRDS).
| Data held | Retention period |
|---|---|
| No wrong door case files | Date of birth + 40 years |
| Child protection orders | Date of birth + 75 years |
What is our lawful basis for processing your information?
North Yorkshire Council relies on the following lawful basis to process your personal data:
UK GDPR Article 6(1)(c) - processing is necessary for compliance with a legal obligation to which the controller is subject. For the processing of personal data relating to criminal convictions and offences, processing meets Schedule 1, Part 2 of the Data Protection Act 2018 as below:
- (10) Preventing or detecting unlawful acts
- (18) Safeguarding children and individuals at risk
UK GDPR Article 6(1)(e) - processing is necessary for the performance of a task carried out in the public interest.
With regard to special category data, the Council will rely on the following lawful basis:
UK GDPR Article 9(2)(h) - processing is necessary for the provision of health or social care meeting Schedule 1, Part 1 of the Data Protection Act 2018 as below:
- (1) processing is necessary for health or social care purposes
UK GDPR Article 9(2)(g) – The processing of your special category data is necessary for reasons of substantial public interest (with a basis in law), meeting Schedule 1, Part 2 of the Data Protection Act 2018 as below:
- (6) Statutory and government purposes
- (10) Preventing or detecting unlawful acts
- (18) Safeguarding of children and individuals at risk
The legislations, policies and guidance that relate to this service includes, but is not limited to:
- children act 1989
- children act 2004
- education act 2002
- crime and disorder act 1998
- keeping children safe in education act 2018
For more information about how we use your data, including your privacy rights and the complaints process, please see our corporate privacy notice.