This booklet details how we protect the privacy and security of your personal information
- The purpose of this document
- Who we are
- The kind of information we hold about you and who provides it
- What we use your personal information for
- How the law protects you and the legal basis for processing your information
- Who we share your personal data with
- Your responsibility to inform us of changes
- How long we use your information for
- Your rights under the GDPR
- Questions or complaints
- Links to other websites
- Changes to this privacy notice
The purpose of this document
Norfolk SEND Partnership is committed to protecting the privacy and security of your personal information. By personal information, we mean information which, by itself or with other data available to Norfolk SEND Partnership, can be used to identify you.
The General Data Protection Regulations (GDPR) amended the Data Protection Act 1998 and this booklet has been produced in compliance with the GDPR.
In summary, this privacy notice:
- Sets out how we promise to look after your personal information
- Describes how we collect, use and share your personal information
- Tells you about your privacy rights and how the law protects you
This privacy notice covers personal information we collect about:
- Visitors to our website
- People who use our services
- People who complain about any aspect of a service we provide
Who we are
Norfolk SEND Partnership is the "data controller" for the personal information held by Norfolk SEND Partnership. This means that we are responsible for deciding how we “process” (that is, collect, hold, use and disclose) your personal information.
Our address is Norfolk SEND Partnership, 148 Woodside Road, Norwich, NR7 9QL
Norfolk SEND Partnership Data Protection Officer (DPO) is Janina Schiebler.
The kind of information we hold about you and who provides it
Personal information can include, but is not limited to, your name, address, telephone number, date of birth, email address which may include electronic records, letters, and emails. It does not include anonymous information.
We may also hold more sensitive personal data known as “special categories” of data. This includes details of ethnic origin, religious beliefs, sexual orientation, and health data, but only if it relevant to the service we are providing to you.
What we use your personal information for
We use your personal information:
- For service requests
- To deal with complaints
- For evaluation feedback
- For newsletter distribution
How the law protects you and the legal basis for processing your information
The GDPR places a legal obligation on us to process your personal information in accordance with the following data protection principles in that your personal data must be:
- Used lawfully, fairly and in a transparent way
- Collected only for valid purposes that we have explained to you and not used in any way that is incompatible with those purposes
- Relevant to the purposes we have told you about and limited only to those purposes
- Accurate and kept up to date
- Kept only as long as is necessary for the purposes we have told you about
- Kept securely
There must also be a lawful basis for processing personal information – a justifiable reason for us to collect, store, use and disclose your personal information. Our lawful basis for doing so will depend on what services we are providing to you.
The basis for which we process your information will include:
- When you consent/agree to it. Norfolk SEND Partnership will tell you if processing some of your personal data is necessary to comply with a public task or to fulfil a legal duty or to fulfil a contract and is therefore optional. In these circumstances, we may ask for your consent to process it. The GDPR sets a high standard in relation to obtaining your consent to process your personal information. We have an obligation to ensure that when consent is required from you it is done so in a manner which is clear.
- In order to fulfil the service users request and deliver the correct advice and information.
Your responsibility to inform us of changes
It is important that the personal information we hold about you is accurate and current.
Please keep us informed if your personal information changes during your working relationship with us. You can help us with this by:
- Telling us when any of your details change; and
- Telling us if any of the information we hold on you is wrong
How long we use your information for
We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To work out the right retention period for personal data, we consider the following matters:
- The amount, nature, and sensitivity of the personal data
- The potential risk of harm from unauthorised use or disclosure of your personal data
- The purposes for which we process your personal data and whether we can achieve those purposes through other means, and
- Any legal or regulatory requirements.
In some circumstances we may anonymise your personal information so that it can no longer be associated with you, in which case we may use such information without further notice to you.
Once you no longer require services from us, we will retain and securely destroy your personal information in accordance with our data retention schedule.
Your rights under the GDPR
You have the following rights (but note, these rights do not apply in all circumstances):
- Your right to be informed about the processing of your personal information. This is the purpose of this notice.
- Your right to have your personal information corrected if it is inaccurate and to have incomplete personal information completed
- Your right to object to the processing of your personal data
- Your right to restrict processing of your personal information
- Your right to have your personal data erased subject to restrictions
- The right to move, copy or transfer your personal information (“data portability”) in some circumstances
- Your right to request access to your personal information and information about how Norfolk SEND Partnership processes it
- Your right to withdraw any consent you have given for the processing of personal data at any time
If you want to exercise any of these rights, please contact Norfolk SEND Partnership Team by:
Writing to—Norfolk SEND Partnership, 148 Woodside Road, Norwich, NR7 9QL
Questions or complaints
If you have any questions about this privacy notice, how we handle your personal information, or you would like to make a complaint you can contact us at any time.
If you still unhappy you can write to the DPO at Norfolk County Council by letter, Norfolk County Council, County Hall, Martineau Lane, Norwich NR1 2DH or by email to firstname.lastname@example.org.
Links to other websites
Norfolk SEND Partnership may provide links to other websites, we assume no responsibly for the content of these external websites accessed through ours, and it is suggested you take the time to read the privacy notices on the websites you visit before disclosing any personal information.
Changes to this privacy notice
We keep this privacy notice under regular review and we will provide you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal information.
This notice was last updated in September 2018.