Privacy Policy

1. Why do you collect my information?

Smokefree County Durham is provided by Thrive Tribe and commissioned by Durham County Council. We collect and process your information so that you can access our Stop Smoking Service. Our aim is to provide a comprehensive Smoking Service that will engage our service users to reduce tobacco use/nicotine dependency and its associated health impacts.

2. Who do you get my data from?

We get your information from your self-registration directly onto our website. We also receive referrals via healthcare professionals, including Primary Care and Pharmacies.

3. How does data protection law allow you to use my data?

We collect, store and process your Personal and Special Category data to enable us to deliver our service and for reporting purposes.

If you have referred yourself into our service, we use your data on the basis that you have initially given us consent to do so, and from there that we are providing you with a healthcare service, which by itself gives us a basis for using your data.

If you have been referred by a healthcare professional, we work on the understanding that they have discussed the initial referral with you and your agreement with it being made, and once it is received by us similarly, that we are providing you with a healthcare service.

We will ask for your consent before marketing or communicating to you regarding our programmes or similar initiatives.

4. Do you share my information with anyone?

To enable Smokefree County Durham to deliver our services, we may share your personal data with the following: Pharmacies for stop smoking medication allocation; our partners Direct Supply Solutions for dispatching cessation products; outcomes data with referring partners including GPs and Healthcare professionals.

We also share reports with NHS Digital and Durham County Council.

We do not allow any third-party service provider to use your personal data for their own purposes and only permit them to process your personal data for the specified purposes as provided with our instructions.

5. Does any of my information get sent outside of the UK?

No

6. How long do you keep my information?

We record, manage and retain your information in accordance with the NHS Records Management Code of Practice.

7. What about my rights under Data Protection law, how can I activate them?

Under Data Protection law you have the right to:

• Be informed how your data is used (which is what this notice is doing).
• Access to your information.
• Rectification of errors.
• Erasure (in certain circumstances).
• Restriction of processing (in certain circumstances)
• Objection to processing.
• Data Portability.
• Understand whether profiling or automated decision-making is being used.

If you would like to request or discuss any of these please contact us using the details at the end of this notice.

8. Do you use any automated decision-making or profiling on my information?

No

9. What do I do if I am concerned about how you are using my information?

In the first instance we would be grateful for the opportunity to respond to your concerns ourselves and hopefully sort out any issues for you. To help with this, please write to dpo@thrivetribe.org.uk

If you are not satisfied with the outcome of our support, you may take your complaint to the Information Commissioner’s Office, which regulates Data Protection. Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. It can be contacted by telephone on 03031231113 or by email on icocasework@ico.org.uk.