Action in Mind is a charitable company, limited by guarantee, registered with the Office of the Scottish Charity Regular, No SC016267 and Companies House (SC377159).
We support people, their families and carers affected by mental ill-health through a range of community-based social care services and work towards tackling stigma and discrimination related to mental health.
Action in Mind is committed to protecting the privacy of people whose personal information we collect from or about, and to meeting our obligations under the General Data Protection Regulation (GDPR) 2018 and the Data Protection Act (DPA) 2018.
We are registered with the UK Information Commissioner Office (ICO). Our registration number is Z2124165.
What is meant by the following terms?
What information do we collect about you?
Personal information is what identifies and relates to a living person. This can include any personal information that when put together with other information can identify a person. This includes:
Special categories of personal information, are what may be sensitive about any one individual and which they may not wish to be widely known. This includes:
age, disability, gender reassignment, race, religion or belief, sex, sexual orientation, marriage and civil partnership and pregnancy and maternity.
Why we collect and use your personal information?
We process personal information for one or more reasons:
How we protect your personal information?
We are committed to ensuring that your right to privacy is respected and that your personal information is secure and only available to those who have a right to see it. We do not sell personal information to anyone.
We will only disclose information about you to third parties if we are legally bound to or where we need to in order to comply with our contractual responsibility to you, such as HR, payroll or pension, or where we need to comply with contractual obligations to our statutory service commissioners and funders or regulatory bodies such as the Care Inspectorate.
We have adopted a number of measures to ensure that we protect and secure your personal information. These include:
Sharing your personal information when using our support services
As a mental health service provider we are obliged by our statutory commissioners, local authorities and Health and Social Care Partnerships, to hold clients’ files in good order and make them available in the event of any routine inspections.
We are registered with the Care Inspectorate which is the independent regulator of social care and social work services across Scotland, formed under the Public Services Reform (Scotland) Act 2010. As the scrutiny and improvement body for social care and social work services across Scotland, the Care Inspectorate has powers under Part 5 of the Public Services Reform (Scotland) Act 2010 to collect and process personal information about people experiencing care and the people who provide, manage, and work for care services.
The main legal basis the Care Inspectorate has to process your personal data is so that it can perform its public duty as a regulator and to ensure high standards of care are delivered. It does this through unannounced inspections of registered service providers.
We are registered with the Care Inspectorate as we operate services that must be regulated. We are therefore subject to unannounced inspections by their officers who, as part of this process, may review how well we manage client files and secure client confidentiality. For the last inspection report and further information refer to www.careinspectorate.com
In the event of an emergency we will contact your named contact as provided by yourself. Should we have any concerns about your wellbeing we will follow our policy and procedures which may involve exercising our duty to report to the police or social work these concerns.
Any third party we receive your personal information from or with whom we share your personal information is also legally required to be compliant with the General Data Protection Regulations (GDPR) 2018. Action in Mind does not accept responsibility for any transmission of a person’s information until we actually receive it from the original source, nor do we accept responsibility for how any third party handles the information received from us.
How long do we keep your personal information?
We will only keep your personal information for as long as we consider necessary to ensure our compliance with the General Data Protection Regulations 2018 or as stipulated by our statutory commissioners and funders. How long we hold your personal information may depend on the purposes for which we process this and the sensitivity of the contents.
At the end of this period your personal information will be securely and confidentially destroyed with certification given by our approved shred it supplier.
Anonymising and password protection
We are not able to use the encryption systems of statutory commissioners and funders as we have not been granted shared protocols when receiving or sharing a client’s personal information. Therefore, when we store and transmit your personal information electronically to third parties we do so by the use of passwords.
When collecting information about people who use our support services, website or social media, for monitoring and evaluation purposes we anonymise their personal information.
Using our website and social media
We have Twitter and Facebook accounts that are managed by our social media staff group to largely promote the work of the charity and to support activities of others committed to similar charitable objectives. We use disclaimers to protect the charity’s reputation should there be any adverse comment published.
When you use our website or Facebook to obtain information or help for yourself or someone else, to enquire about employment, volunteer, student placement or internship, to fundraise or make a donation, we will collect personal information about you.
We will only use this for the purpose it was intended and retain your personal information for only as long as required.
Under the General Data Protection Regulation (GDPR) 2018 there are a number of new rights relating to data protection. These include:
Action in Mind does not use any automated decision-making or profiling systems.
You can find more information about these rights on the UK Information Commissioner’s website at ico.org.uk
Access to your personal information
To request a copy of what personal information we hold about you – whether to be informed about what information we hold, to correct information that is inaccurate, to delete or withdraw your consent or unsubscribe from receiving any information about our services or newsletter you should contact:
The Data Controller Officer
Action in Mind
19 Dean Crescent, Riverside, Stirling FK8 1UR
Tel: 01786 451 2013 Email: firstname.lastname@example.org
Should you wish to make a complaint about Action in Mind’s collection or use of your personal information, you can contact the UK Information Commissioner’s Office at ico.org.uk
Changes to our privacy notice
We will review our policy on a regular basis and post updates on our website.
Action in Mind needs your support to make the places where you learn and study or the local communities and neighbourhoods where you live to become better informed about and understanding of mental health. Together, we can make a real and positive difference to people’s lives by bringing an end to mental health stigma and discrimination by creating a pathway of positive mental wellbeing for everyone.
For more information about The Collective AiM and how you can become involved click Join Us, email email@example.com or call 01786 451203 (office hours)