Introduction

As part of the services we offer, we are required to process personal data about our service users and, in some instances, relatives of our service users. “Processing” can mean collecting, recording, organising, storing, sharing or destroying data.

We are committed to being transparent about why we need your personal data and what we do with it. This information is set out in this privacy notice. It also explains your rights when it comes to your data.

What data do we have?

So that we can provide a safe and professional service, we need to keep certain records about you. We may process the following types of data:

• Your basic details and contact information e.g. your name, address, date of birth and next of kin;

We also record the following data which is classified as “special category”:

• Health and social care data about you, which might include both your physical and mental health data.

Why do we have this data?

We need this data so that we can provide high-quality care and support. By law, we need to have a lawful basis for processing your personal data.

We process your data because:

We have a legal obligation to do so – generally under the Health and Social Care Act 2012 or Mental Capacity Act 2005.

We process your special category data because:

• It is necessary due to social security and social protection law (generally this would be in safeguarding instances);
• It is necessary for us to provide you with a service.

We may also process your data with your consent. If we need to ask for your permission, we will offer you a clear choice and ask that you confirm to us that you consent. We will also explain clearly to you what we need the data for and how you can withdraw your consent at any time.

Where do we process your data?

So that we can provide you with high quality care and support we need specific data. This is collected from or shared with:

1. You or your legal representative(s);
2. Third parties.

We do this face to face, via phone, via email, via our website.

Third parties are organisations we might lawfully share your data with. These include:

• Other parts of the health and care system such as your GP, NHS eating disorder services, other VCSE mental health services
• The Local Authority;
• Your family or friends – with your permission;
• Organisations we have a legal obligation to share information with i.e. for safeguarding
• The police or other law enforcement agencies if we have to by law or court order.

Disclosure of personal information

Eating Matters will not pass on any of your details for marketing purposes.

Website

When you visit our website standard internet log information and visitor behaviour patterns are collected by Google Analytics, a third-party service. This information is processed in a way which does not identify individuals. We also use Google Analytics to help maintain the security and performance of our website and any data processed is secure and encrypted. This privacy notice does not cover the links to any other websites; the privacy notice for these should be read separately.

Cookies

Our website uses Cookies to distinguish you from other users on our website. This helps us to provide you with a good experience when you browse our website and allows us to improve our site. For detailed information on the cookies we use and why we use them, please see our Cookie Policy.

Your Data

Eating Matters uses a third party, Anglian Internet, to provide Anti-Virus software and Stuart Hutcheson Computer Services, to provide networking, storage and technical support. The back-up storage we use is within the UK.

Access to Information

You have a right to a copy of the information which is held about you. This is known as a Subject Access Request. You can ask us for this information verbally or in writing (details below)

You can contact us using the information below to:

• Request access to your information
• Ask that we update, complete or correct your information
• Ask that we erase or restrict our use of your information
• Provide you with a copy of your data in a ‘commonly used’ format, (this is known as the right to data portability).

If you are unhappy with how we have handled your request, then please contact us or make a complaint directly to the Information Commissioner (ICO) via their website www.ico.org.uk/global/contact-us

Contact

Questions, comments and requests regarding this policy should be addressed to director@norfolkeda.org.uk or in writing to Eating Matters, Chalk Hill Cottage, 19 Rosary Road, Norwich, NR1 1SZ

Eating Matters is registered with the ICO, registration reference: ZB300000

Changes to Our Privacy Policy

Any changes we make to our privacy policy will be updated on this page. Please check frequently for any changes.