HIOW IPS Programme Privacy Notice
This notice tells you about:
- the information Shaw Trust (the Trust) may hold about you,
- how we will protect your information,
- how we may share or use this, and
- the rights you have.
As the new provider of the Individual Placement and Support (IPS) service for people with Serious Mental Illness (SMI) in Hampshire and the Isle of Wight, Shaw Trust must comply with Data Protection laws. We will protect the information we hold about you to ensure your right to privacy.
If you have any questions or would like to exercise your rights as listed in this notice, please contact our Data Protection Officer at: data.protectionmailbox@shaw-trust.org.uk.
Your personal information
We receive your personal information from Osel (the previous provider of the IPS service) as part of a transfer of service. This may include:
- your name
- contact details (e.g. telephone number or email address)
- support history and case notes
- employment-related information
- health-related information relevant to your support
We only collect and use the minimum information required to continue supporting you. This may include special category data, such as health or wellbeing details, which we handle with extra care and safeguards.
Information Provided About You by a Third Party (Referrals)
We are receiving your personal data from Osel, the previous provider of this service, as part of a service transition.
In some cases, we may also receive further relevant information about you from other trusted sources involved in your care or employment support — such as:
- your NHS care team,
- your employment advisor, or
- a referring support organisation.
We use this information to:
- continue your support without interruption,
- assess your needs and eligibility, and
- deliver appropriate services if you choose to engage.
This data is processed in line with our Article 14 UK GDPR obligations.
Legal Basis for Processing
We rely on the following legal bases under the UK GDPR:
- Public Task – the processing is necessary for delivering a commissioned public health or employment service.
- Health and Social Care Provision – where special category data is involved, under Article 9(2)(h).
- Legal Obligation – where required by law (e.g. safeguarding, funding requirements).
We do not rely on consent as our lawful basis to receive your information, but you still have rights over your data (see below).
Protecting Your Information
Your data will be stored in secure systems and only accessed by trained and authorised personnel. We will not transfer your personal data outside the UK/EEA without suitable safeguards in place.
How long we keep your data
We retain your personal data:
- For up to 6 years after the end of your involvement in the IPS programme, in line with funding and legal obligations.
- If you do not continue with the service, we may keep your data for no more than 6 months after the referral is received, after which it will be securely deleted.
Sharing Your Information
- NHS commissioners or referrers (e.g. the ICB)
- employment support staff within Shaw Trust
- IT service providers supporting our secure systems
- funders or oversight bodies, where legally required
Your Rights
You have the right to:
- access and correct your personal data;
- request erasure, restriction, or objection;
- be informed of how we got your data (if from a third party);
- withdraw consent at any time;
- complain to the Information Commissioner’s Office (ICO).
To exercise your rights, contact:
Data Protection Officer
Email: data.protectionmailbox@shaw-trust.org.uk
Address: Shaw Trust, Black Country House, Rounds Green Road, Oldbury B69 2DG
When we Contact You (Referrals)
- explain why we’re contacting you and what services we offer
- provide a copy of this privacy notice