Criminal Justice Rehabilitative and Resettlement Interventions privacy notice

What personal information is being processed and what for

Change Grow Live (CGL) is the substance misuse Provider and Data Processor for these services. Personal information that is collected is used to help make decisions about you and your progress. This includes but is not limited to:

• name and address
• telephone number
• date of birth
• gender
• ethnic origin
• details of any offences
• including previous convictions
• information about court orders and licence conditions.

Why we are allowed to use your information

Cheshire East Council works closely with the North West Probation Service (NWPS) and  CGL to provide a range of interventions designed to address your misuse of substances and addiction and prevent re-offending.

The personal information that is collected is used to help  CGL make decisions about you and your progress. There is lawful duty to prevent and detect crime and the collection and use of your personal information is also necessary to enable us to comply with the contract we have with the  NWPS to provide better outcomes for offenders and ex-offenders.

The GDPR conditions which cover this processing are:

Article 6(1)(e) – public task. It is an official function of the local authority to provide support to you to address your substance misuse or addiction and prevent re-offending. The Children Act 2004 provides the power to the local authority and the Offender Management Act 2007 provides the power to the Probation Service.

Article 9(2)(c) – vital interests. We will use your personal data in situations where you or someone else is at risk of immediate and serious harm.

Article 9(2)(h) – provision of health or social care or treatment.

Article 9(2)(g) – substantial public interest. As detailed above, the Children Act 2004 and the Offender Management Act 2007 provide the legislative authority for  CEC and the  NWPS to process your personal data. Schedule 1, Part 2 of the Data Protection Act 2018 lists the substantial public interest conditions. Schedule 1, Part 2, paragraph 6 (Statutory etc and government purposes) and paragraph 18 (Safeguarding of children and of individuals at risk) support this processing.

Who we will share your information with

There may be occasions where we need to share personal information collected with relevant agencies such as the Police and Social Services for example if it is to keep a child or individual at risk safe from neglect or physical, emotional or mental harm, or if it is protecting their physical, mental, or emotional well-being.

Where necessary we will comply with all aspects of the Data Protection legislation in particular the Data Protection Act 2018. There will be occurrences where  CGL will need to share some information about you with the  NWPS as per the conditions of the contract.

Relevant and necessary information may be shared with other health professionals for direct care purposes. This information will only be shared to inform and improve decisions about your health and care and only to those who are delivering care to you or supporting your care.  You can object to this but this may limit the interventions our provider  CGL are able to offer.

If we, the  NWPS or our provider  CGL is concerned about your or someone else’s safety, we may need to share information to keep someone safe.

On occasion, we may be asked to share information to help improve services and research. We will ask for your consent to share this information where possible and will take steps to reduce the level of information that is shared (such as pseudonymising the data).

We will always strive to ensure that they treat your information with dignity, respect and privacy.

Where we get your information from

Other than directly provided by you your personal data will come from NWPS and CGL

How long we will keep your personal information

Change Grow Live will normally retain your personal data for seven years after you complete treatment and will delete your files after this period.

All information held in this regard is subject to strict data protection principles to ensure the security, consistent management and compliance to the Information Commissioners Office (ICO) standards are maintained at all times due to the confidential nature of the data filed.

How your information is stored

Our provider  CGL will store all personal data on their CRiiS electronic case management system.  This system can only be accessed by authorised users and is protected by passwords.  Data is also encrypted in transit and at rest in dedicated servers.

What happens if you don’t provide us with your information

Page last reviewed: 16 May 2023