Reasons why we need information about you:
- To plan and deliver services;
- To create an appropriate person-centred support plan in-line with your needs;
- To liaise effectively with other services for your benefit;
- To help protect you or others from abuse or harm;
- To help you arrange and receive services when needed;
- So that external regulators, inspectors and funders can check and audit our services and ensure they meet the required standards;
- So that we may review, audit and improve the quality of our services and increase their benefit to you and others;
- So that we can ensure our services are accessible to all parts of society.
Our legal duty as a data controller
The Data Protection Act 2018 allows us to process your information providing we do so lawfully and fairly, whilst ensuring with you your information is accurate, up to date and necessary for the services we agree to provide. We must retain your information for as long as you are a client, but often our funders require that we retain it for a set number of years after you cease being a client for audit purposes. We must keep your information securely and confidential at all times.
The Data Protection Act 2018 and UK General Data Protection Guidelines (GDPR) require us to tell you that Bromley, Lewisham & Greenwich (BLG) Mind are the data controllers and that the legal basis under which we will be processing your data is legitimate interest, as we need the data in order to be able to provide you with a service, for example, your name, address and telephone number. In the case of what is classed as special category data, for example ethnicity, disability, religion, medical diagnosis, the data is processed under paragraphs (a) and (h) of article 9 of the UK General Data Protection Guidelines (GDPR). This is that explicit consent has been given or that we are providing health or social care respectively. Where explicit consent has been given, it can be withdrawn at any time.
Confidentiality and sharing data
We share information with other organisation(s) or person(s) you list on your Consent to Share Information form. In certain circumstances, there may be occasions where it is necessary to share information without your consent with other organisations in accordance with BLG Mind policies, common law and the Data Protection Act 2018 as appropriate. For example, in circumstances where disclosure is felt to be justified in the public interest e.g. to protect you or someone else from harm. In these circumstances the information shared will always be kept to the minimum necessary. If it is not possible to comply with your wishes shown on the agreement, our staff will explain what information must be shared and with whom.
Right to complain
If at any time you think there is a problem with the way we are handling your data you have a right to complain to the Information Commission’s Office or to our data protection lead, who can be reached at Data.Controller@blgmind.org.uk.
Last updated: 18 January 2022