This privacy notice provides information on how Norfolk County Council (the County Council) uses your personal information in respect of the Early Childhood and Family Services we provide to you. By ‘use’ we mean the various ways it may be processed, including storing and sharing the information.
In summary this document:
The County Council is the "data controller" for the personal information held about you by the Early Childhood and Family Service in Norfolk. This means that we are responsible for deciding how we “process” (that is, collect, hold, use and disclose) your personal information.
Our address is Norfolk County Council, County Hall, Martineau Lane, Norwich NR1 2DH.
The County Council’s Data Protection Officer (DPO) is Helen Edwards.
The County Council has responsibility for providing the ECFS but we have arranged for Action for Children to run this service on our behalf. Action for Children (AfC) uses your personal information as data processor on behalf of the County Council and the County Council has entered in to a contract with AfC to ensure that your information is kept safely and securely as required by the General Data Protection Regulation (GDPR).
We collect information from you and your family.
We may also receive information about you from agencies and organisations that you have been involved with including:
The types of information we may receive from people and organisations includes:
We may also collect information about:
This information is classed as “special category data” under the GDPR. We may only collect and use these types of data when it is relevant and such data will be collected as part of the case work records and information we hold as part of the referral / assessment / case work records and information we hold.
The GDPR includes safeguards to protect the use of your special category data. Further details can be found on our website in the document named ‘Special category data and criminal offences data policy’ which sets out our procedures for compliance with the principles of the GDPR and the retention and erasure of this information.
We use your personal information to provide services to you and your children aged 0 to 5 years.
The services include:
We provide more details of the services on our website at www.norfolk.gov.uk/earlychildhood
We also use this information to assess the quality of our services to families and to evaluate and improve our policies and procedures.
We may also use information in other ways compatible with the above. This will include supporting the work of other public bodies providing services to families with children aged 0-5 years.
There must be a lawful basis (or justifiable reason) for us to collect, store, use and disclose your personal information. We have legal grounds to process this information as it is reasonable and necessary for the fulfilment a public task under section 537A of the Education Act 1996 and section 83 of the Children Act 1989.
We have legal grounds to process special category data where it is in the exercise of a statutory function and it is in the necessary for reasons in the substantial public interest. The statutory functions are section 537A of the Education Act 1996 and section 83 of the Children Act 1989.
We may disclose your personal information to your family including persons with parental responsibility as well as public bodies and other organisations, in particular:
We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
In some circumstances we may anonymise your personal information so that it can no longer be associated with you, in which case we may use such information without further notice to you.
Once you are no longer require services from us, we will retain and securely destroy your personal information in accordance with our information retention schedule.
The information is stored electronically on Norfolk County Council servers.
We do not transfer your information to other countries outside of the European Economic Area.
We do not make automated decisions about you.
You have the following rights to (but note, these rights do not apply in all circumstances):
If you want to exercise any of these rights, please contact the Information Compliance Team by:
If you have any questions about this privacy notice or how we handle your personal information, you can write to the DPO by letter to the DPO, Norfolk County Council, County Hall, Martineau Lane, Norwich NR1 2DH or by email to email@example.com
You also have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues. The ICO can be contacted:
Where this notice applies to information collected or processed on a website, please note this privacy notice only applies to the County Council’s website and ceases to apply when you leave our pages. If you follow links to other organisations websites, even if you follow a link which we have provided, it is suggested you take the time to read the privacy notices on the websites you visit.
We keep this privacy notice under regular review and we will provide you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal information.
This notice was last updated in September 2019.