Privacy & Cookie Use

We are committed to protecting and respecting your privacy and promise to collect, process and share your data safely and securely.  We will protect the confidentiality, accuracy and availability of the information we collect about you. This Privacy Notice tells you how we do this and what your rights are. Any personal data processed in line with our Privacy Notice is controlled by us (Barod Project), as the Data Controller. Introduction Everyone has rights with regard to the way in which their personal information is handled. During the course of our activities, we will collect, store and process personal information about individuals and we recognise that the correct and lawful treatment of this data will maintain confidence in the organisation.

This Privacy Notice explains in detail the types of personal data we may collect about you when you interact with us. It also explains how we’ll store and handle that data and keep it safe.  This Privacy Notice also sets out the basis on which any personal information we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal information and how we will treat it. For simplicity throughout this notice, ‘we’ and ‘us’ means Barod Project.

How we collect Information About You: We collect information about you when you register with us or when you are referred to us by GP or other Partner agencies. We also collect information when you voluntarily complete surveys or provide feedback.

What information do we collect about you: As part of you engaging with our services, we will need to collect specific information about you. The information that we will need to collect from you could include Your Name; Your Address; Contact Details (eg. Mobile phone number); Your Date of Birth; Your NHS number, Details of your drug or alcohol use; Details of any dependents or family members; Details of any other person who may be relevant.  We may also collect Sensitive Personal Data about you, which may include details of your Race; Ethnic origin; Religion; Health; Sex life; Sexual Orientation etc.  You must give your explicit consent for us to collect this type of data from you.

How we will use the information we hold about you:  We collect information about you to provide you with the support and services that you receive from us. The information we hold on you may also be shared with trusted third parties, specifically to fulfil reporting and/or audit requirements of statutory authorities.

Lawful Basis for processing your data: We must have a Lawful Basis for processing your data.  The law on data protection sets out a number of different reasons for which we may collect and process your personal data, including:

1. Consent – We can collect and process your data where you agree to us using your information in this way. When collecting your personal data, we’ll always make clear to you which data is necessary in connection with the service that you want to receive from us.

2. Contractual obligations – Your personal information is processed in order to fulfil a contractual arrangement, which would be to fulfil the service that you receive from us.  We will also use your address details to send you appointment letters.

3. Legal compliance – Where there is statutory or other legal requirement to share your information, which would be when we have to share your information.

4. Legitimate interest – In specific situations, we require your data to pursue our legitimate interests in a way which might reasonably be expected as part of operating our services and provide you with the best service in the most secure and appropriate way, which does not materially impact your rights, freedom or interests.

Some of these grounds for processing your personal data overlap, so there may be several reasons which justify us processing your personal information.  In those circumstances where you have expressly given your consent to us to process your personal data, you are free to revoke/withdraw  your consent at any time. However, please be aware that we may have the right to continue to process your information if it can be justified on one of the other lawful bases mentioned above.

How long will we retain the information that we hold on you:  Whenever we collect or process your personal data, we’ll only keep it for as long as is necessary for the purpose for which it was collected.  At the end of that retention period, your data will either be deleted completely or anonymised, for example by aggregation with other data so that it can be used in a non-identifiable way for statistical analysis.

International Transfers: We will only share your information with trusted partners and we will not share your information with any other organisation outside of the European Economic Area.

Marketing:  We will not use your information for marketing purposes and we will not sell or share your information with any other organisation for the purpose of direct marketing.

Websites and Social Media Cookies: These are text files placed on your computer to collect standard internet log information and visitor behaviour information. This information is used to track visitor use of the website and to compile statistical reports on website activity. For further. You can set your browser not to accept cookies, or for further information visit www.aboutcookies.org or  www.allaboutcookies.org.  Our website may contain links to other websites. This Privacy Notice only applies to this website so when you link to other websites you should read their own Privacy Notices

Access to your Information and Correction: You have the right to request a copy of the information that we hold about you. If you would like a copy of some or all of your personal information, please email or write to us at the address below. We want to make sure that your personal information is accurate and up to date. You may ask us to correct or remove information you think is inaccurate. Under normal circumstances, we do not charge a fee for providing you with a copy of the information that we hold about you.

In order to process a request from you, we will need to verify your identity, so please provide your full name; a description of the data that you are requesting including a date range; a copy of your current and valid photo ID; proof of your address in the form of a photocopy of a utilities or service provider bill.

1. The right to be informed – You have the right to be informed about the collection and use of your personal data, including the purpose for processing personal data, retention periods for that data and who it will be shared with.  This information is included within this Privacy Notice.

2. The right of access – You have the right to access your personal data and supplementary information, which will allow you to verify the lawfulness of the processing.

3. The right to rectification – You have the right to have inaccurate personal data rectified, or completed if it is incomplete.  Requests for rectification can be verbally or in writing and we must respond to you within one calendar month.  Please note that there are certain circumstances when we can refuse a request for rectification.

4. The right to erasure – This is also commonly known as ‘The Right to be Forgotten’.  Requests for erasure can be verbally or in writing and we must respond to you within one calendar month.  Please note that this right is not absolute and can only apply in certain circumstances.

5. The right to restrict processing – You have the right to request the restriction or suppression of personal data, whereby we are permitted to store your personal data, but not use it.  Requests for restriction can be verbally or in writing and we must respond to you within one calendar month. Please note that this right is not absolute and can only apply in certain circumstances.

6. The right to data portability – This right allows you to obtain and reuse your personal data for your own purposes across different services. This information will be provided free of charge and in a structured, commonly used machine readable format.

7. The right to object – You have the right to object to us processing your personal data, which must be based on grounds relating to your particular situation.  We must then stop processing your personal data unless we can demonstrate compelling legitimate grounds for the processing, which override your interests, rights and freedoms.

8. Rights in relation to automated decision making and profiling – Automated individual decision-making is a decision made by automated means without any human involvement.  We do not conduct any automated decision making and/or profiling.

Changes to our Privacy Notice: We will need to review and update this Privacy Notice from time to time. We’ll notify you of any significant changes and we will place any updates on our website.

How to contact us:  We hope this Privacy Notice will answer any questions you have, but if not, please do get in touch with us. If you have any questions about our Privacy Policy, including any requests to exercise your rights, please contact us: by email:  privacy@barod.cymru  or you can write to us at:  Barod Project, 73/74 Mansel Street, Swansea, SA1 5TR