Children & Young People's Improved Access to Psychological Therapies (CYP IAPT) Programme privacy notice

Children & Young People's Improved Access to Psychological Therapies (CYP IAPT) Programme

Privacy notice

Introduction

At the Early Years Alliance (EYA), we are committed to ensuring that your personal data is protected in accordance with data protection laws and used in line with your expectations.

This privacy notice and consent form explains why we are seeking your consent, how we use it, your right to withdraw consent over your and your and your child’s personal data and the procedures we have in place to protect them.

When we refer to “we”, “us” or “our”, we mean the PSLA. Our full legal information as a data controller, is:

EYA is the Pre-school Learning Alliance, a charity registered in England Wales (number 1096526) and a company incorporated in England and Wales (number 4539003) with its registered office address at 50 Featherstone Street, London, England, EC1Y 8RT.

What personal information would we like to collect and how will it be used?

We would like to take the following types of information:

Name, address, date of birth, ethnicity, religion, information on support requested, needs identified, results of assessment, results of tests, answers to questionnaires, onward referrals made and Session Attendance Data.

With your consent we may also need to undertake the following activities:

  • Filming group or individual sessions as part of the ongoing professional development of our staff.
  • Sharing video with managers and supervisors to ensure that we are delivering well and to improve our practice by reflecting on our work.
  • Video/Audio recording of group or individual discussions or interviews which may form part of the evaluation/feedback process.

What is the legal basis for collecting it?

Your explicit consent is required for us to obtain your data and use video/audio recordings of you and/or your child as well as to be able to share your data and you and/or your child’s images with the below organisations

We collect this information will enable us to monitor progress, analyse our outputs and outcomes, assess our effectiveness, publicise the offer to parents/communities and plan future services so we can continually improve the service we offer. Some of the information collected is reported nationally to give a picture of services delivered across the country.

Who we share the data with?

  • London Borough of Lewisham via a secure database system called EISi.
  • Lewisham Children & Family Centres partners including Lewisham & Greenwich Trust and Lewisham CAMHS.
  • NHS Digital
  • We may engage with third parties to help us gather this data for us to be able to evidence the success of the project by creating infographics and reports on our behalf, these parties will be subject to a duty of confidentiality and obligated to comply with data protection laws.

How do we protect your data and videos?

We take the security of your personal data and you and/or your child’s videos/audio seriously. We have internal policies and strict controls in place to try to ensure that your data and the original digital images of you and /or your child is not lost, misused and to prevent unauthorised access.

Where do we store your data and videos?

All data you provide to us is stored on secure computers or servers located within the UK or European Economic Area. We may also store paper records in locked filing cabinets.

Our third party processors will also store your data on secure IT systems which may be situated inside or outside of the European Economic Area. They may also store data in paper files.

How long do we retain your data?

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Your rights with respect to your data and videos

As a data subject and/or a parent or guardian of a data subject, you have a number of rights. You can:

  • request to access, amend or correct the personal data we hold about you and/or your child;
  • request that we delete or stop processing your and /or your child’s personal data and images, for example to withdraw your consent or where the data is no longer necessary for the purposes of processing; and
  • request that we transfer you and your child’s personal data to another person.

If you wish to exercise any of these rights at any time please contact VAL POPE at val.pope@eyalliance.org.uk or on 020 8695 5955.

Complaints

If you have a concern about how your child’s images are being used, please raise a complaint with our compliance team at dataprotection@eyalliance.org.uk or on 020 7697 2593.

If you are concerned about the way your child’s images are being handled and remain dissatisfied after raising your concern with our privacy team, you have the right to complain to the Information Commissioner Office (ICO). The ICO can be contacted at Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF or .

July 2023


How the NHS and care services use your information – National data opt-out

Through its (CYP IAPT) Programme, the Early Years Alliance is one of many organisations working in the health and care system to improve care for patients and the public). 

Whenever you use a health or care service, such as attending Accident & Emergency or using Community Care services, important information about you is collected in a patient record for that service. Collecting this information helps to ensure you get the best possible care and treatment. The information collected about you when you use these services can also be used and provided to other organisations for purposes beyond your individual care, for instance to help with:

  • improving the quality and standards of care provided
  • research into the development of new treatment
  • preventing illness and diseases
  • monitoring safety
  • planning services

This may only take place when there is a clear legal basis to use this information. All these uses help to provide better health and care for you, your family and future generations. Confidential patient information about your health and care is only used like this where allowed by law.

Most of the time, anonymised data is used for research and planning so that you cannot be identified in which case your confidential patient information isn’t needed.

You have a choice about whether you want your confidential patient information to be used in this way. If you are happy with this use of information you do not need to do anything. If you do choose to opt out your confidential patient information will still be used to support your individual care.

To find out more or to register your choice to opt out, please visit .  On this web page you will:

  • See what is meant by confidential patient information
  • Find examples of when confidential patient information is used for individual care and examples of when it is used for purposes beyond individual care
  • Find out more about the benefits of sharing data
  • Understand more about who uses the data
  • Find out how your data is protected
  • Be able to access the system to view, set or change your opt-out setting
  • Find the contact telephone number if you want to know any more or to set/change your opt-out by phone
  • See the situations where the opt-out will not apply

You can also find out more about how patient information is used at:

(which covers health and care research); and

(which covers how and why patient information is used, the safeguards and how decisions are made)

You can change your mind about your choice at any time.

Data being used or shared for purposes beyond individual care does not include your data being shared with insurance companies or used for marketing purposes and data would only be used in this way with your specific agreement.

Health and care organisations are required to put systems and processes in place so they can be compliant with the national data opt-out and apply your choice to any confidential patient information they use or share for purposes beyond your individual care. Our organisation compliant with the national data opt-out policy.