Connect for Health Social Prescribing Privacy Notice

This notice explains:

  • what personal information Shaw Trust (“the Trust”) collects about you,
  • how and why we use your information,
  • how your information is protected and shared, and
  • the rights you have in relation to your personal data.

Shaw Trust delivers the Connect for Health Suffolk programme which aim is to streamline the process of collecting expression of interests (EOIs) for Connect to Health Suffolk. The goal is to ensure individuals seeking support and people referring to the programme can easily register through the Shaw Trust Website with their details being securely processed and managed

Shaw Trust is committed to handling your personal data lawfully, fairly, and transparently, in line with UK data protection legislation.

If you have any questions about this notice or wish to exercise your rights, please contact our Data Protection Officer at:

Email: data.protectionmailbox@shaw-trust.org.uk

Your personal information

When you submit an Expression of Interest (EOI) or are referred to the Connect for Health Suffolk programme, we may collect and process the following information about you:

  • Name,
  • Email Address
  • Telephone number
  • Home Address,
  • Postcode,
  • Date of birth for participants and referrers (excluding DOB)

Further information may be collected during initial telephone contact to help us assess eligibility and understand your support needs.

Information Provided About You by a Third Party (Referrals)

In some cases, we may receive your personal information from a third party, for example:

  • a Jobcentre or local authority service.
  • a health or social care professional.
  • a community or voluntary organisation supporting you; or
  • another organisation involved in employment support.

Where this happens, we will use your information to contact you about the programme, assess eligibility, and provide support if you choose to engage. This processing is carried out in accordance with Article 14 of the UK GDPR.

Legal Basis for Processing

We rely on Legitimate interest under Article 6(1)(f) UK GDPR to collect and process your personal data at the Expression of Interest and initial engagement stage.

This includes contacting individuals, assessing eligibility, and progressing referrals for the Connect to Health programme.

Submitting an Expression of Interest or agreeing to be referred does not constitute consent for processing. The processing is necessary for Shaw Trust’s legitimate interest in delivering the programme and managing referrals.

Consent is only used for optional activities, such as receiving marketing communications or additional updates, where applicable. Where consent is required, it will be clearly requested, recorded, and can be withdrawn at any time.

Special category data

Where we process special category data (such as health or disability information), we rely on Article 9(2)(h) UK GDPR. This allows processing where it is necessary for the provision of health-related or employment support services and the assessment of appropriate support needs.

Withdrawing your consent

You can withdraw your consent at any time by contacting us using the details in this notice.

If you withdraw your consent before enrolling on the programme, we will stop processing your personal data and securely delete it unless there is a lawful reason for us to retain it (for example, audit or safeguarding requirements).

Withdrawing consent may mean that we are unable to progress your Expression of Interest or provide support through the programme.

Protecting Your Information

Your information is stored securely and only accessed by trained and authorised staff. We use appropriate technical and organisational measures to protect your data from unauthorised access, loss, or misuse.

Personal data is stored within secure UK-based systems. We do not transfer your data outside the UK unless appropriate safeguards are in place.

How long we keep your data

We retain personal data only for as long as necessary:

  • Expressions of Interest or referrals that do not progress are normally retained for up to six months, after which they are securely deleted.
  • Individuals who go on to engage with the programme may have their data retained for up to six years following the end of their involvement, in line with funding, audit, and legal requirements.

Once retention periods expire, data is securely disposed of.

Sharing Your Information

To deliver the Connect for Health Suffolk programme, we may share your information securely with:

  • the programme commissioner or lead authority.
  • authorised delivery partners working with Shaw Trust under contract.
  • employers, where relevant to your employment support and with your knowledge.
  • IT and system providers supporting our secure systems; and
  • auditors or regulatory bodies where required by law.

We do not sell your personal data and do not use it for automated decision-making.

Your Rights

You have the right to:

  • access the personal data we hold about you.
  • request correction of inaccurate or incomplete data.
  • request deletion or restriction of processing (where applicable).
  • withdraw your consent at any time; and
  • lodge a complaint with the Information Commissioner’s Office (ICO).

To exercise your rights, contact:

Data Protection Officer
Email: data.protectionmailbox@shaw-trust.org.uk
Address: Shaw Trust, Black Country House, Rounds Green Road, Oldbury B69 2DG

Return to Connect for Health Social Prescribing