This privacy notice explains what types of personal data we may hold about you, how we collect it, how we use it and who we may share information with. We are required to give you this information under data protection law.
Achieving for Children is registered as a controller with the Information Commissioner’s Office (ICO). Registration number ZA045069. The organisation is committed to being transparent about how it collects and uses that data and to meeting its data protection obligations.
The Getting Help Team is employed by Berkshire Healthcare Foundation Trust but sits within Achieving for Children’s Early Help Hub in Windsor and Maidenhead. The team works with children and young people who need short-term support (six to eight sessions) with mild to moderate mental health issues.
The help offered may involve participating in a group, or individual one to one informed Cognitive Behavioural Therapy. The team may also sign post children and young people to other services that may be able to offer longer term support including access to the AnDY Clinic or Specialist CAMHS if needed. It is an integrated approach that is a key component of the delivery framework of providing support to improve the health and wellbeing of children and young people with mild to moderate mental health concerns.
Personal data we collect
- Personal identifiers such as name, date of birth, gender, language, NHS number, family details and emergency contact details
- Addresses and contact information if home visits and direct contact with the family as part of the therapeutic intervention is required.
- Special category data such as details of mental health difficulties and ethnicity.
Parent or guardian data
Personal identifiers such as name, address, email address and telephone number
How we use your personal data
- We use the personal information we collect from you about your child to ascertain the most appropriate form of therapeutic support and/or signposting.
- Whether the support should be provided by the RBWM AfC Wellbeing Service or the Getting Help Team.
- Safeguarding and mental health risk assessment.
Lawful basis for processing your personal data
We collect and use your personal data and special category data only when you have given us your consent. Specifically in regards to the UK GDPR, these are articles 6 (1)(a) and 9(2)(a).
Who we share your personal information with
We will only share information where it is appropriate and legal to do so. Where this is necessary, we are required to comply with all aspects of the Data Protection Act 2018.
Depending on the individual circumstances of each situation, we may have to share this information with other teams within Achieving for Children to fulfil other duties and powers to support our work.
During the course of working with your child, we may share your information with our Commissioning councils and with Berkshire Healthcare Foundation Trust.
How long will we keep your information
We only keep your personal data for as long as is required by law and in accordance with our retention schedule.
Keeping your personal information secure
We have appropriate security measures in place to prevent personal information from being accidentally lost or used or accessed in an unauthorised way. We limit access to your personal information to those who have a genuine business need to know it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.
Achieving for Children’s email service has been configured to Government Digital Service and we encrypt and authenticate email in transit using Transport Layer Security (TLS) and Domain-based Message Authentication, Reporting and Conformance (DMARC). We will ensure that when we send emails containing your personal information they are sent using appropriate security measures to encrypt the data in transit. This may involve the use of a third party encryption tool where appropriate.
We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.
Your rights and access to information
Under data protection legislation you have the right to request access to the information that we hold about you. To request a copy of your data, please read the Individual Rights Requests page and then submit your request using your preferred method of contact.
You also have the right to:
- Object to processing of personal data that is likely to cause, or is causing, damage or distress
- Have inaccurate personal data rectified, blocked, erased or destroyed
- Prevent processing for the purpose of direct marketing object to decisions being taken by automated means
- In certain circumstances have inaccurate personal data rectified, blocked, erased or destroyed; and
- A right to seek redress, either through the ICO, or through the courts
If you have any questions or concerns about the way we process personal data, or would like to discuss anything in this privacy notice, please contact our Data Protection Officer: email@example.com
If you want to make a complaint about how we handle your personal data, we ask that you give our Data Protection Officer the opportunity to respond in the first instance but you are not obliged to do this. You can make a complaint directly to the Information Commissioner’s Office at https://ico.org.uk/concerns/