There is a law called the General Data Protection Regulation (GDPR) which protects individuals' privacy and controls how people and organisations use personal information. This Privacy Statement is all about the information we collect and process about you, in relation to a child or young person for whom you have parental responsibility (referred to as "your child" for the purposes of this statement). It details how we meet our legal requirements, as set out by the GDPR. It explains:
- Who we are
- Why we collect personal information & how we use it
- What types of information we collect and how long we keep it
- How we keep personal information secure
- Who we might share personal information with
- Your rights
Your child has received their own Privacy Statement for Children and Young People detailing how we meet our legal requirements to them as a data subject. Please ask a member of staff if you would like a copy.
1. Who are we?
We are Youth in Mind; a partnership of organisations supporting children and young people with their mental, emotional and social wellbeing. We provide support across Bradford, Airedale, Wharfedale and Craven, and the NHS funds us to run this service. The Youth in Mind partners are:
|Name of Organisation
||Type of Organisation
||Youth in Mind Role
||Programme Lead/Contract Manager
|Bradford Youth Service
||Local Authority - Bradford Metropolitan District Council
||Buddies and Peer Support Groups
|Bradford District Care NHS Foundation Trust - CAMHS
||Specialist Mental Health Service
||Community Interest Company
||WRAP and Peer Support Groups
||Community Interest Company
||Community Interest Company
||Digital Self Help Tool
|Sharing Voices Bradford
||Community Development Organisation
||Group and 1:2:1 support for Black, Asian & Minority Ethnic communities
We are committed to protecting personal information and making every effort to ensure it is processed in a fair, open and transparent way. Every Youth in Mind partner has a named Data Protection Officer, who helps us to achieve this goal; they monitor and guide us, making sure we meet all our obligations under the GDPR.
Our Data Protection Officers are also a key point of contact for you and your child; if you have any queries about how we process information about you or your child and would like to speak with one of our Data Protection Officers, please let a member of staff know and they will be able to help you.
2. Why do we collect personal information and how do we use it?
Under the GDPR we must have legal reasons to process your personal information; our reasons are that it is in our legitimate interest to do so and is necessary for the promotion of health and social care (GDPR articles 6(1)(f) and 9(2)(h) respectively).
This means the Youth in Mind partners need to collect information about you so we can provide your child with safe and effective services. It also means that we will only collect information about you that we need to know in order to provide our services, promote your child’s welfare and safeguard them from harm. We may also use your information to help us improve our services, for example, by seeking your views and comments on the services we provide and notifying you of service developments and changes.
3. What information do we process and how long do we keep it?
The information we collect about you includes:
- your name, address and contact information
- other relevant information about you shared by your child or another third party involved in your child’s support
We are legally required to hold information about you for a set period of time. All personal information will be securely destroyed at the appropriate time and we will not keep your personal information for longer than is required or permitted by law.
4. Who might we share your information with?
We may need to share information about you with other people and organisations involved in your child’s care, for example:
- Children's Social Care
- School / School Nurse
- Safeguarding Children Board
- NHS Digital
Information about you is only ever shared when it is in your child’s interests as a young person for whom we have a duty of care, or if it is in the public interest. We only share information where legislation allows us to do so and it is compliant with the GDPR. You have the right to know which other organisations we share your information with and the reasons for doing so; please ask a member of staff for more details.
We take your privacy very seriously and will never share your personal information with anyone who does not have a lawful and/or administrative purpose for using it. We will never sell or give your personal information to any third parties for marketing or automatic profiling purposes. We will not transfer your information outside of the European Union for any purpose.
5. How do we keep information secure?
The information we keep on you is held securely in both paper and digital formats. Most of the time we will record and store personal information on “MYMUP”, a secure, digital platform used by all Youth in Mind partners, that can only be accessed by the staff involved in your child’s support.
In some circumstances, Youth in Mind partners may need to record information about you outside of MYMUP, using their own organisations’ system. This could be if there is:
- an accident or incident
- a formal complaint
- a safeguarding disclosure or concern
Please ask a member of staff if you would like more information about the systems used to process information in these circumstances.
We have procedures in place to ensure that data security breaches are dealt with appropriately. We will notify you of suspected incidents, where we are legally required to do so.
6. Your Rights
To accurate & up-to-date information: You have the right to ask us to keep the information we hold about you accurate and up-to-date. If any of your personal circumstances change, or you think we may be holding information about you that is incorrect, please notify a member of staff.
To access the information we hold about you: If you wish to see a copy of the information we record about you, please ask a member of staff for an Information Access Request form. We aim to respond within five working days of receiving your form.
To complain: You have the right to log a complaint with the Information Commissioner’s Office (ICO) if you have any concerns about the way we are using your personal information. More information can be found at their website, https://ico.org.uk/concerns/ or by calling their helpline 0303 123 1113.
Under the GDPR your rights surrounding your child’s information, as an individual with parental responsibility, can only be exercised on your child’s behalf with proper authority and in your child’s best interests.
More details about how and why we process your information, and how we securely archive and later dispose of it can be found in Creative Support’s corporate policies, Data Protection and Information Governance and Records Management and Archiving. If you wish to see a copy of these policies, you can phone Creative Support’s Head Office on 0161 236 0829 or email firstname.lastname@example.org.