GDPR (General Data Protection Regulation)
Families and Babies (FAB) Guarantee
Families and Babies (222-224 Tonge Moor Road, Bolton, BL2 2HN) is a data controller. This means that we are responsible for deciding how we hold and use personal information about you. We are required under data protection legislation to notify you of the information contained in this privacy notice.
To ensure we comply with the General Data Protection Regulation (GDPR) we have updated our data protection policies.
Below you will find some information about the GDPR legislation:
We have appointed a Data Protection Officer (DPO) to oversee our compliance under the General Data Protection Regulation and our responsibilities as a service provider. If you have any questions about this privacy notice or how we handle your personal information, please contact the DPO at INFO@FAMILIESANDBABIES.ORG.UK.
What do we hold?
We collect, hold and use personal information about mothers and their babies to provide breastfeeding support. This information includes, but is not restricted to:
- Contact details including mother’s name, address, telephone number and e-mail address;
- Date of birth of mothers and babies;
- NHS number;
- Your family circumstances;
- Your occupation;
- Registration dates;
- Feeding plan;
- Record of support;
- Feeding method;
- Feeding plan;
- Smoking status;
- Details of our visits with you; and
- Details of our correspondence with you.
We may also collect, hold and use the following “special categories” of more sensitive personal information:
- Information about your race and ethnicity; and
- Information about your health and the health of your baby.
Where do we collect your personal information from?
Lancashire FAB peer supporters will gain direct consent from you on the maternity ward to offer ongoing community breastfeeding support and this consent can also be given to a midwife or maternity support worker. You will be asked to share your contact details so we can provide on-going support after you are discharged. We use a consent form which you will be asked to sign and there are two copies – one for you and one for FAB. This information is then telephoned through to the trained FAB peer support administrator, based at Leyland.
Mid York’s Hospital Trust will pass the contact details of eligible mothers to the Wakefield FAB peer support service at discharge. This transfer of data is via a secure NHS email system. You can choose not to have your details shared by speaking to your midwife or a member of the FAB team.
Dorset, Bournemouth & Poole
Local Hospital Trusts will pass the contact details of eligible mothers to the trained FAB peer support administrator based at Dorset. This transfer of data is via a secure NHS email system. You can choose not to have your details shared by speaking to your midwife or a member of the FAB team.
Legal reasons for using your personal information?
The legal reasons we rely on for collecting, holding and using your personal information are for one or more of the following reasons:
- You have given us consent to do so;
- The information is necessary for us to provide our service to you;
- The information is necessary for us to comply with a legal obligation;
- In order to protect your vital interests or the vital interests of someone else; or
- It is necessary for our legitimate interests.
The legal reasons we rely on for collecting, holding and using “special categories” of your personal information are for one or more of the following reasons:
- You have given us your explicit consent to do so;
- Where we need to carry out our legal obligations and in accordance with our data protection policy;
- Where it is needed in the public interest, such as for equal opportunities monitoring and in line with our data protection policy;
- Less commonly, we may use this information where it is needed in relation to legal claims or where it is needed to protect your interests (or someone else’s interests) or where you have made the information public.
How will we use your personal information?
We will use your personal information to fulfil our commissioned service specifications we are required as an organisation to collect from mothers who have given birth and who have initiated breastfeeding in order to contact them to offer breastfeeding support. This includes:
- Using your information to identify and communicate with you;
- Provide our service to you;
- Keep records in relation to our contact with you and the support we have provided to you;
- Comply with our legal requirements;
- Carry out quality control and request feedback; and
- Comply with our contractual requirements with our commissioners and local authorities (including providing anonymous data about users of our services so that they can understand local needs in communities).
- We will use your “special categories” of information in the following ways:To consider whether we need to make appropriate adjustments to the service we provide to you; and
- For equal opportunities monitoring.
Do we share your information?
We will not normally share your information with anyone else without your consent and we will never use your information for marketing. However, there are certain circumstances where we will be required to share your information with other organisations (for example where we are concerned about yours or someone else’s health, safety or welfare). When we are required to share your information we will comply with the GDPR and the Data Protection Act 2018. The organisations we may be required to share your information may include:
- Health and social welfare organisations;
- The Police;
- Professional advisers and consultants;
- Courts and tribunals;
- Suppliers and service provides;
- Insurers; and
- Professional bodies.
How do we store your information?
We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.
Your personal information will be stored on our secure encrypted FAB database and information on that database will only be accessed by the FAB peer support community team to allow for on-going community support. All paper records are disposed of through a confidential waste system.
We have in place procedures to deal with any suspected data security breach and will notify you and the Information Commissioner’s Office of a suspected breach where we are legally required to do so.
How long do we keep your information for?
We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. This is usually a period of 6 years from the date your file with us is close, in line with our retention policy.
You can withdraw your consent to our services at any time by contacting FAB. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law.
Under certain circumstances, you also have the right to:
- Request access to your personal information (commonly known as a "data subject access request"). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.
- Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
- Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
- Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes.
- Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.
- Request the transfer of your personal information to another party.
If you want to review, verify, correct or request erasure of your personal information, object to the processing of your personal data, or request that we transfer a copy of your personal information to another party, please contact our Data Protection Officer in writing by e-mailing firstname.lastname@example.org. Please note, there are some specific circumstances where these rights do not apply and we can refuse to deal with your request.
We take any complaints we receive about the collection and use of personal information very seriously. We would encourage you to bring it to our attention if you think that our collection or use of information is unfair, misleading or inappropriate. You can make a complaint at any time by e-mailing our Data Protection Officer at email@example.com or by contacting us (see contact details on the front page of our website).
If you think our collection or use of personal information is unfair, misleading or inappropriate or if you have concerns about the security of your personal information, you also have the right to make a complaint to the Information Commissioner’s Office. You can contact the Information Commissioner’s Office at the following address:
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.