PRIVACY AGREEMENT
Data Protection Act 2018
In carrying out our day to day activities we process and store personal information relating to our supporters and we are therefore required to adhere to the requirements of the General Data Protection Regulations. We take our responsibilities under this act very seriously and we ensure the personal information we obtain is held, used, transferred and otherwise processed in accordance with that Act and all other applicable data protection laws and regulations including, but not limited to, the Privacy and Electronic Communication Regulations.
For information about your rights, see the section below.
The Elijah Centre is the Data Controller for the purposes of Data Protection Legislation. The contact details for The Elijah Centre’s Data Protection Officer are:
Name: Nivin Jaber (Clinic Manager)
Email: n.jaberelijahsocialskills@gmail.com
The personal data we hold
Personal data that we may collect, use, store and share (when appropriate) includes, but is not restricted to:
We use this data to:
Less commonly, we may also process the children’s personal data in situations where:
How we store this data
We do not share information about the children at attending the Elijah Centre with any third party , without consent , unless the law and our policies allow us to do so.
Parents and pupils’ rights regarding personal data
Individuals have a right to make a ‘subject access request’ to gain access to personal information that the centre holds about them.
Parents/carers will have ready access to files and records of their own children - but not any other child.
Staff will not discuss individual children with people other than the parents/carers of that child.
Personal issues will remain confidential to the people involved.
Any anxieties/evidence relating to a child's personal safety will be kept in a confidential file and will not be shared within The Elijah Centre except for the child's key worker and manager.
In carrying out our day to day activities we process and store personal information relating to our supporters and we are therefore required to adhere to the requirements of the General Data Protection Regulations. We take our responsibilities under this act very seriously and we ensure the personal information we obtain is held, used, transferred and otherwise processed in accordance with that Act and all other applicable data protection laws and regulations including, but not limited to, the Privacy and Electronic Communication Regulations.
For information about your rights, see the section below.
The Elijah Centre is the Data Controller for the purposes of Data Protection Legislation. The contact details for The Elijah Centre’s Data Protection Officer are:
Name: Nivin Jaber (Clinic Manager)
Email: n.jaberelijahsocialskills@gmail.com
The personal data we hold
Personal data that we may collect, use, store and share (when appropriate) includes, but is not restricted to:
- Contact details
- Contact preferences
- Date of birth
- Identification documents
- Results of internal assessments and externally set tests
- Characteristics, such as ethnic background, or special educational needs
- Details of any medical conditions, including physical and mental health
- Safeguarding information
- Details of any support received, including care packages, plans and support providers
- Photographs
- CCTV images captured (covers the main entrances and outside areas)
We use this data to:
- Support the children’s learning
- Monitor and report on the children’s progress
- Provide appropriate pastoral care
- Protect the children’s welfare
- Assess the quality of our services
- Administer placement waiting lists
- Carry out research
- Comply with the law regarding data sharing
- We need to comply with a legal obligation
- We need it to perform an official task in the public interest
Less commonly, we may also process the children’s personal data in situations where:
- We have obtained consent to use it in a certain way
- We need to protect the individual’s vital interests (or someone else’s interests)
- Where we have obtained consent to use the children’s personal data, this consent can be withdrawn at any time. We will make this clear when we ask for consent and explain how consent can be withdrawn. Some of the reasons listed above for collecting and using pupils’ personal data overlap, and there may be several grounds which justify our use of this data.
- Collecting this information
- While the majority of information we collect about the children’s is mandatory, there is some information that can be provided voluntarily.
- Whenever we seek to collect information from you or your child, we make it clear whether providing it is mandatory or optional.
- If it is mandatory, we will explain the possible consequences of not complying.
How we store this data
- We keep personal information about the children while they are attending the centre.
- We may also keep it beyond their attendance at the centre if this is necessary in order to comply with our legal obligations.
- Data will be stored in a secured file, and destroyed after two years.
We do not share information about the children at attending the Elijah Centre with any third party , without consent , unless the law and our policies allow us to do so.
Parents and pupils’ rights regarding personal data
Individuals have a right to make a ‘subject access request’ to gain access to personal information that the centre holds about them.
Parents/carers will have ready access to files and records of their own children - but not any other child.
Staff will not discuss individual children with people other than the parents/carers of that child.
Personal issues will remain confidential to the people involved.
Any anxieties/evidence relating to a child's personal safety will be kept in a confidential file and will not be shared within The Elijah Centre except for the child's key worker and manager.
- If you make a subject access request, and if we do hold information about you or your child, we will: Give you a description of it
- Tell you why we are holding and processing it, and how long we will keep it for
- Explain where we got it from, if not from you or your child
- Tell you who it has been, or will be, shared with
- Let you know whether any automated decision-making is being applied to the data, and any consequences of this
- Give you a copy of the information in an intelligible form