We keep the YorWellbeing Privacy Notice under review. It was last reviewed and updated in August 2018.
If you have any questions about this Privacy Notice, contact the council’s Data Protection Officer.
View the Privacy and transparency information for all of the City of York Council (CYC).
The amount and type of data we ask for will depend on the content of your health check and whether you attended an appointment. It is likely this will include background information about you (such as your name, date of birth and postcode), your lifestyle and habits (such as smoking status, alcohol consumption, exercise and diet), your medical history (such as any current diagnosis) and the results of some medical tests (such as your blood pressure and cholesterol levels).
We will also ask which GP practice you attend and your contact details such as: phone number, email address and/or postal address.
We only use your personal data with your explicit and informed consent for the purposes described/as set out in this Privacy Notice.
See further details about how we define personal data and non-personal data.
Collecting personal data
We will collect personal data you give us during your use of our YorWellbeing service (as detailed above). This will include when you use our online health checker tool, during a health check appointment, and any correspondence relating to this.
See further details about the steps we take when we collect your personal data.
Using personal data
We will only use your personal data in accordance with data protection and privacy legislation to provide you with a health check delivered by the YorWellbeing Service. This will mean your personal data will be held by us, and will only be shared with individuals in other teams at City of York Council, or external partners, agencies and contractors involved in delivering or evaluating our health check service.
If you attend a health check appointment, we will share your personal data and the results of your health check with your GP practice in writing, which will be held on your medical records.
Even if you are encouraged to have a health check by your employer, your personal data will not be shared with your manager and cannot be used in a HR process, for example, to assess attendance or capability at work.
Anonymised data may be used to provide statistical and demographic information, for example, to report on and evaluate our health check service. This may involve your anonymised data being shared with individuals in external organisations who are assisting us in evaluating our service.
See further details about how we use your personal data.
Sharing data under Data Protection legislation
We may be required or permitted, under data protection legislation, to disclose your personal data without your explicit consent, for example, if we have a legal obligation to do so, such as for:
- law enforcement
- fraud investigations
- regulation and licensing
- criminal prosecutions
- court proceedings
We must protect public funds and may use personal data and data-matching techniques to detect and prevent fraud, collect taxes and ensure public money is targeted and spent in the most appropriate and cost-effective way. To do this, your personal data may be shared with other bodies responsible for auditing or administering public funds, including the Department for Work and Pensions, HM Revenue and Customs, the Police and other local authorities.
Retaining personal data
We only ask for whatever information is necessary to offer you a full and comprehensive health check. We will protect your personal data and make sure nobody has access to it that shouldn’t have. We will store your personal data in accordance with our Retention Schedule requirements, and will delete or destroy it securely when we no longer need to keep it.
At the end of the retention period, we may pass any relevant information to the City Archives where it is required or appropriate to do so.
Further processing of personal data
If we wish to use your personal data for a new purpose, not covered by this Privacy Notice, then we'll provide you with a new notice.
The new notice will:
- explain this new use before we start the processing
- set out the relevant purposes and processing conditions
Where and whenever necessary, we'll seek your consent to the new processing, if we start to use your personal data for a purpose not mentioned in this Privacy Notice.
See further details about the further processing of personal data.
Your rights relating to personal data
When we collect your personal data we'll tell you how we are going to use it. Where we process your personal data, you have a number of rights under data protection law.