Privacy Policy

Privacy and data protection statement

Your rights relating to use of your personal data changed in May 2018, with the ‘General Data Protection Regulation’ or GDPR, and the Data Protection Act 2018, coming into force.

This Privacy Statement explains in plain English how and why Recovery Partners processes your personal data under these new laws.

If you have a query about this Privacy Statement please contact the Data Protection Officer at the contact details below.

How we use your personal data

Recovery Partners collects personal data about you in order to provide services and keep in touch. 

What we collect about you and how we do this depends on what Recovery Partners services you might use, and how much personal data about you we need to provide these services. These are explained below.

Services

If you choose to use Recovery Partners’ mental health, suicide prevention or other services, we collect and use personal data to provide this service to you. 

This personal data will include your name, address, and basic details about your situation. Recovery Partners may also collect and use further personal data required for your case, including sensitive personal data (for example medical information, or racial/ethnic origin) if this is needed.

Recovery Partners uses this personal data to contact clients and to support them. Your personal data may also be used by Recovery Partners staff, and partner organisations.   

Personal data from a contact with us is kept for 6 months after the last contact with either a client or referrer, or 6 months from when the case is closed, whichever comes first.  A client’s name, employers name and Conciliation case number are kept for a further six months before being deleted.

Telephone calls to us are not recorded.

Training services

If you choose to book onto or arrange a training course, workshop or project offered by Recovery Partners trainers, we collect and use personal data to provide this service to you.

When you make a booking we collect your name, address, telephone number, e-mail address and workplace details in order to process your request. You may also volunteer any special needs you may have (such as dietary requirements if food is required for a training course). As Recovery Partners sometimes charges for its training services, we may retain personal data collected for this purpose for up to seven years.

Recovery Partners may use the personal data collected for the provision of training services, to also provide you with Recovery Partners mailings for marketing purposes, to check that our services meet our customer’s needs, or to inform you of changes to our services.

Use of personal data for internal Recovery Partners research

We may use personal data collected as part of the services we offer, to also conduct research into employment trends and on the performance of Recovery Partners in meeting user’s needs. You will be informed of this when signing up to use our services.

If you receive our emails or use our website, we may additionally ask if you are willing to take part in Recovery Partners research, for example as part of a user survey. If you agree we will collect personal data from you e.g. contact details, for this purpose.

Where we do use personal data for research purposes, as far as possible we will try to make this unidentifiable before we use it. This is to help ensure that your privacy is respected when personal data is used by Recovery Partners staff for research purposes, or by those providing research services to us.

We may share personal data to be used for research purposes, such as email addresses, with external research companies that have been employed by Recovery Partners to carry out research and analysis on our behalf. Where this happens, we will ensure that use of your personal data complies with the law and is kept secure at all times.

Making a Freedom of Information (FOI) or Subject Access Request

If you wish to make an FOI or Subject Access Request, your contact details and case history will be collected to process your request and will be kept for two years.

If you wish to make a complaint to the Information Commissioner’s Office (ICO) regarding a decision on a FOI or Subject Access Request, Recovery Partners is legally obliged to share your case records, which includes personal data, with the ICO in order to progress your complaint. You may withdraw your complaint at any time.

Sensitive Personal Information

Some of the information you provide to us may be sensitive personal data, such as medical history, criminal convictions or racial/ethnic origin.

We will only ever use sensitive personal data where this is essential to provide a service. We may also use medical information you provide to make reasonable adjustments to help you access our services, or to ensure dietary requirements can be met where needed.

Confidentiality, storage and security of personal data

Recovery Partners views the confidentiality and privacy of those using its services as paramount. Any personal information you provide will be held securely, and your personal information will not be sold or traded to another organisation or company.

In order to carry out our functions and respond to enquiries effectively, we may sometimes need to share information with the emergency services, law enforcement agencies, and public authorities.  However, we will only do this in an emergency and where it is permitted by law.

Where Recovery Partners might share personal data with an external company or service that we employ as part of our work, we ensure that personal data that we may pass on to them will be held securely, and used by them only to provide the services or information that you have requested.

Recovery Partners safeguards the information you provide to us using physical, electronic and management procedures on use of personal data. Industry-standard Secure Sockets Layer (SSL) encryption is used on web pages where we collect personal information electronically over an internet connection.

Lawful basis for processing

Under data protection law, Recovery Partners must have a ‘lawful basis’ to justify our collection, storage and use of your personal data. Where sensitive personal data is used, we also need to have a second lawful basis to justify our use of your sensitive data.

The purpose of most activities where Recovery Partners processes personal data, relates to our services.  Our lawful basis for processing of personal data, including for marketing of our charged-for training services, is therefore that it is necessary:

“for the performance of a task carried out in the public interest, or in the exercise of official authority vested in the data controller” (Article 6(1)(e) of the GDPR).

Where we process sensitive personal data, our additional lawful basis to do this depends on the service that Recovery Partners requires this for.

Your rights under data protection law

You have a right to request a copy of the information that Recovery Partners holds about you. You have the right to have any inaccuracies corrected.

You may also have the right to have your personal information erased; to restrict our use of your personal data; to object to our processing of your personal data; and to obtain and reuse your personal data for your own purposes across different services (‘data portability’).

You may also have rights in relation to automated decision making and profiling.

You have the right to complain to the national authority on the use of information, which in the UK is the Information Commissioner’s Office

Please address requests (with a return e-mail address where possible) to:

The Data Protection Officer
Recovery Partners
18 Wyde Feld
Bognor Regis
West Sussex
PO21 3DH

Email: info@recovery-partners.org.uk

Use of our website and Social Networking

When you visit our website, we collect your Internet Protocol (IP) address as a unique identifier. We also collect the following:

• data about how you use the Recovery Partners Website
• information about your computer (including your IP address and browser type)
• demographic data
• if you visited the Website by clicking on a link from a different website, we collect the URL of that website
• information about your online activity, such as the pages you have viewed and the purchases you have made.

Our website offers you the opportunity to ‘like’ or ‘share’ information about Recovery Partners on your social media networks. We also maintain pages on some of the largest social media networks.

Sharing your personal data with a social media network may result in that information being collected by the social network provider or result in that information being made publically available.

Recovery Partners cannot control or endorse any policies or practices of external social media networks whose functionality you may access through our website. You should always read the privacy policy, and check your privacy settings, on any social media network through which you might share information over.

Cookies are small pieces of data sent to your computer when you visit the website and which enable us to collect information about you. They are stored in the cookie directory of your hard-drive, and do not necessarily expire at the end of your session. Session cookies are automatically deleted when you close your browser.

The Recovery Partners website contains links to other websites, mainly other voluntary sector organisations, but also to those of other third parties. These websites are not covered by this Privacy Statement and Recovery Partners is not responsible for the privacy practices within any of these other websites. You should be aware of this when you leave the website and we encourage you to read the privacy statements of other websites.

Data transfers

Territories outside the European Economic Area (EEA) may not have laws which provide the same level of protection for personal information as those inside the EEA. However, if we process your personal information on servers or use third party service providers based in such territories, we will endeavour to ensure that your personal information is afforded the same level of protection as in the EEA.

Changes to this Privacy statement

If this privacy statement changes in any way, we will place an updated version on this webpage. If you do not agree with the changes we make please do not continue to use the website. Regularly reviewing this webpage ensure you are always aware of what information we collect, how we use it and under what circumstances, if any, we will share it with other parties.