Think Family Contact KBSP Leave This Site

Privacy Notice

Data protection information

Bristol City Council is the data controller for the Keeping Bristol Safe Partnership for the purposes of the Data Protection Act 2018 and other regulations including UK General Data Protection Regulation, which means it determines what your personal data is used for and why it is collected.

The purpose of this privacy notice is to tell you about how we collect and use personal data in connection with our service. We may update this privacy notice from time to time. When we do this, we will communicate any changes to you and publish the revised privacy notice on our website.

Our main address is City Hall, College Green, Bristol, BS1 5TR and our contact details can be found on Bristol City Website.

This Privacy Notice covers three data processing activities of the Keeping Bristol Safe Partnership Board:

  • Child Safeguarding Practice Reviews, Safeguarding Adult Reviews, Domestic Homicide Reviews, and Ofsted Serious Incident Notifications
  • Quality Audits, Complaints, Escalations, Safeguarding
  • Learning, Development and Partnership Services for Safeguarding Professionals and Organisations

Activity 1 – Serious Case reviews, Learning Reviews and Ofsted Serious Incident Notification

What data we need to collect and use?

To provide this service, we will collect and use some or all of the personal information below:

  • Name
  • Date of birth
  • Addresses
  • Records from professionals who have worked with you or your children including
    • health records
    • criminal records
    • social care files

When we collect your personal data, we rely on the following legal bases:

  • Article 6(1)(e) – processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
  • Article 6(1)(c) – processing is necessary for compliance with a legal obligation to which the controller is subject.

When we collect your ‘special categories of personal data’, (such as health, race, ethnicity, sexual orientation) we rely on the following legal bases:

  • Article 9(2)(g) - processing is necessary for reasons of substantial public interest (safeguarding of children and of individuals at risk (statutory purposes))
  • Article 9(2)(h) - processing is necessary for the provision of health or social care or treatment or the management of health or social care systems and services

We rely on the following conditions under Schedule 1 of the Data Protection Act 2018 when relying on Article 9(2)(g) Substantial Public Interest

  • statutory and government purposes,
  • safeguarding of children and individuals at risk

We rely on the following conditions under Schedule 1 of the Data Protection Act 2018 when relying on Article 9(2)(h) Health or Social Care

Article 10  - processing of criminal offence data is necessary for statutory and government purposes and is carried out under the responsibility of professionals who are subject to an obligation of professional secrecy.

We rely on the following conditions under Schedule 1 of the Data Protection Act 2018 when relying on Article 10 Criminal Offence Data

  • Employment, Social Security & Social Protection
  • Health or Social Care
  • Statutory & Government Purposes
  • Safeguarding of children and individuals at risk

We are collecting this data because it is necessary to carry out Child Safeguarding Practice Reviews, Safeguarding Adult Reviews, and Ofsted Serious Incident Notifications as required under the Children Act 2004, Safeguarding Adult Reviews under The Care Act 2014, and Domestic Homicide Reviews under the Crime and Disorder Act 1998.

How long we will keep your data for:

We will hold this information for as long as it is needed, or if we are required to do so by law. We will hold this information for 25 years after the publication date of the Serious Case Review or Ofsted Notification date. After this, your information will be deleted.

Why we need to collect your data:

We will use this information for informing Ofsted of Serious Incidents or undertaking Statutory learning reviews.

Who we share your data with and why:

This data will be shared with commissioned review authors, Keeping Bristol Safe Partnership Members, and Professional Members of the review panel.

We only share what information is essential to the effective delivery of our services. We share this information to allow us to undertake statutory functions efficiently and effectively, and to provide services appropriate to individual users and to help us to monitor and improve the services we offer.

Where we have received your data from a third party:

We get this data from professional organisations in the city who have provided a service to you or your children. The data we have is not publicly available although the final Learning Review report may be. You will be given the opportunity to read this report and provide factual accuracy points before it is published.

Will my personal data be sent outside the UK?

No personal information is routinely sent or held outside the UK. Should the transfer of personal information outside the UK become necessary, it will only take place if permitted by law, and then only where there are appropriate safeguards in place to protect the data.

Activity 2 – Quality Audits, Complaints, Escalations, Safeguarding

What data we need to collect and the legal basis for processing it:

To provide this service, we will collect and use some or all of the personal information below:

  • Name
  • Date of birth
  • Addresses
  • Records from professional who have worked with you or your children including
    • health records
    • criminal records
    • social care files

When we collect your personal data, we rely on the following legal bases:

  • Article 6(1)(e) – processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
  • Article 6(1)(c) – processing is necessary for compliance with a legal obligation to which the controller is subject.

When we collect your ‘special categories of personal data’, (such as health, race, ethnicity, sexual orientation) we rely on the following legal bases:

  • Article 9(2)(g) – processing is necessary for reasons of substantial public interest (safeguarding of children and of individuals at risk (statutory purposes))
  • Article 9(2)(h) – processing is necessary for the provision of health or social care or treatment or the management of health or social care systems and services

We rely on the following conditions under Schedule 1 of the Data Protection Act 2018 when relying on Article 9(2)(g) Substantial Public Interest

  • statutory and government purposes,
  • safeguarding of children and individuals at risk

We rely on the following conditions under Schedule 1 of the Data Protection Act 2018 when relying on Article 9(2)(h) Health or Social Care

Article 10 - processing of criminal offence data is necessary for statutory and government purposes and is carried out under the responsibility of professionals who are subject to an obligation of professional secrecy.

We rely on the following conditions under Schedule 1 of the Data Protection Act 2018 when relying on Article 10 Criminal Offence Data

  • Employment, Social Security & Social Protection
  • Health or Social Care
  • Statutory & Government Purposes
  • Safeguarding of children and individuals at risk

We are collecting this data because we are responsible, under the Children’s Act 1989 and 2004, Working Together to Safeguard Children 2018, and the Care Act 2014, for arranging quality audits and assurance work, and because we store records of safeguarding decisions made.

How long we will keep your data for:

We will hold this information for as long as it is needed, or if we are required to do so by law. The period of time that we will hold this data for will depend on the use. Personalised data used for audits will be deleted after the anonymous audit report is written. Details of escalations, complaints or safeguarding discussions will be stored for 10 years. After this, your information will be deleted or archived.

Why we need to collect your data:

We collect this information for undertaking safeguarding assurance activities such as audits or determining compliance with safeguarding policies and processes, and to ensure that appropriate learning takes place from both good and poor practice.

Who we share your data with and why:

This data will be shared with professionals who are involved in the audit or compliance activity.

We only share information that is essential to the effective delivery of our services. We share this information to allow us to undertake statutory functions efficiently and effectively, and to provide services appropriate to individual users and helps us to monitor and improve the services we offer.

Where we have received your data from a third party:

We get this data from other organisations in the city who are Board members. The data we have is not publicly available.

Will my personal data be sent outside the UK?

No personal information is routinely sent or held outside the UK. Should the transfer of personal information outside the UK become necessary, it will only take place if permitted by law, and then only where there are appropriate safeguards in place to protect the data.

Activity 3 – Learning, Development and Partnership Services for Safeguarding Professionals and Organisations

What data we need to collect and the legal basis for processing it:

To provide the training service, KBSP will process data for professionals attending including:

  • name
  • work email
  • Job role, organisation, and sector
  • telephone number
  • address

We collect the above data from information which you provide when you apply for a training place or agree to represent your organisation at the partnership

When we collect this data we are relying on the following legal basis:

  • Article 6(1)(b) – processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract

We are collecting this data because it is necessary to deliver the training programme and strategic KBSP Business plan, provide you with course materials and minutes, and monitor compliance with inter-agency training requirements and attendance.

How long we will keep your data for:

This information is held for 6 years after the course dates for the purpose of anonymous learning and development reports and as a record of when people attend training. This period supports delegates CIPD period. After 6 years, your personal information will be deleted.

Who we share your data with and why:

This data will be shared with your organisation’s training department, your manager or your organisation’s commissioner so that they can monitor compliance with training, meeting attendance and process payments for training. If you are a partnership Member or Subgroup Member your name and professional role will be publicly available in our annual reports. If you give consent at application, we will use your contact details to send you information about upcoming training and conference.

Will my personal data be sent outside the UK?

No personal information is routinely sent or held outside the UK. Should the transfer of personal information outside the UK become necessary, it will only take place if permitted by law, and then only where there are appropriate safeguards in place to protect the data.

Activity 4 -  Prevention of Crime and Disorder

What data we need to collect and use?

To provide this service, we will collect and use some or all of the personal information below:

  • Name
  • Date of birth
  • Addresses
  • Records from professionals who have worked with you or your children including
    • health records
    • criminal records
    • social care files

When we collect your personal data, we rely on the following legal bases:

  • Article 6(1)(e) – processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
  • Article 6(1)(c) – processing is necessary for compliance with a legal obligation to which the controller is subject.

When we collect your ‘special categories of personal data’, (such as health, race, ethnicity, sexual orientation) we rely on the following legal bases:

  • Article 9(2)(g) - processing is necessary for reasons of substantial public interest (safeguarding of children and of individuals at risk (statutory purposes))

We rely on the following conditions under Schedule 1 of the Data Protection Act 2018 when relying on Article 9(2)(g) Substantial Public Interest

  • statutory and government purposes,
  • safeguarding of children and individuals at risk
  • prevention of crime and disorder

We rely on the following conditions under Schedule 1 of the Data Protection Act 2018 when relying on Article 9(2)(h) Health or Social Care

Article 10  - processing of criminal offence data is necessary for statutory and government purposes and is carried out under the responsibility of professionals who are subject to an obligation of professional secrecy.

We rely on the following conditions under Schedule 1 of the Data Protection Act 2018 when relying on Article 10 Criminal Offence Data

  • Employment, Social Security & Social Protection
  • Health or Social Care
  • Statutory & Government Purposes
  • Safeguarding of children and individuals at risk

We are collecting this data because it is necessary for the purposes of preventing Crime and Disorder under the Crime and Disorder Act 1998

How long we will keep your data for:

We will hold this information for as long as it is needed, or if we are required to do so by law. We will hold this information for 25 years after the publication date of the Serious Case Review or Ofsted Notification date. After this, your information will be deleted.

Why we need to collect your data:

For the purposes of preventing Crime and Disorder

Who we share your data with and why:

We only share what information is essential to the effective delivery of our services. We share this information to allow us to undertake statutory functions efficiently and effectively, and to provide services appropriate to individual users and to help us to monitor and improve the services we offer.

Where we have received your data from a third party:

We get this data from professional organisations in the city who have provided a service to you or your children. The data we have is not publicly available. You will be given the opportunity to read this report and provide factual accuracy points before it is published.

Will my personal data be sent outside the UK?

No personal information is routinely sent or held outside the UK. Should the transfer of personal information outside the UK become necessary, it will only take place if permitted by law, and then only where there are appropriate safeguards in place to protect the data.

General

It is a statutory requirement to publish the findings from the Local Child Safeguarding Practice Reviews and all reports are fully anonymised to protect the identity of the children and families involved.

Your rights as a data subject:

The law gives you a number of rights to control what and how personal information is used by us, including the right to access a copy of your personal information and withdraw your consent when we rely on your permission to use your personal data.

Full details about how we use and share your data and your rights can be found on our Corporate Privacy Notice  . If you are unable to access our digital Privacy Notice, please contact Citizens Services who will be able to send a hard copy.

To update or correct your information if it is inaccurate, please contact Citizens Services.

To access a copy of your personal information, more details and how to make a request can be found on the data protection subject access requests page on the council website.

You can exercise any of these rights, ask questions about how we use your personal data or complain by contacting us at data.protection@bristol.gov.uk or by writing to our data protection officer at:

Data Protection Officer

Information Governance

Bristol City Council

City Hall

PO Box 3399

Bristol

BS1 9NE

If you think we have dealt with your information inappropriately or unlawfully, you have the right to complain to the ICO at: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF Website: https://ico.org.uk/

Surveys

From time to time we will conduct surveys to establish information to assist us in gaining your direct thoughts and opinions on our public services.

Each Survey will invite you to participate; this will be classed as asking for your consent to participate; your information gathered at the time of the survey will be only used for that purpose of the survey and will not assume consent for any other purpose. Where Consultant companies (3rd parties) are used by Bristol City Council for a specific survey, these will be specified in the Survey’s purpose statement.

Details of the purpose and scope of the Survey will be made clear for each Survey we may ask you to participate in, this will provide you with the details for you to clearly decide if you want to consent to participate in the Survey.

Personal data collected during the survey will be deleted upon the completion of the survey analysis and will not be stored or used for any other purpose. Each Survey will request your consent each time you participate.

Participation in our surveys will not impact or influence any future mailing preferences in the future and unless otherwise stated your participation will be anonymous.