The London Borough of Merton is data controller for the purposes of the Data Protection Act 2018 and other regulations including the UK General Data Protection Regulation (UK GDPR), which means it determines what your personal data is used for and why it is collected.

The purpose of this privacy notice is to tell you about how we collect and use personal data in connection with the Catch 22 Risk and Resilience service, which is commissioned by the London Borough of Merton. We may update this privacy notice from time to time. When we do this, we will communicate any changes to you and publish this revised privacy notice on our website.

What data we need to collect and use?

We will collect and use some or all of the personal information below:

  • Your personal details including name, age, gender, date of birth, address details, disability status and ethnicity
  • Your Next of Kin and/or emergency contact
  • Where you live, who you live with and who you spend time with
  • Your social situation, including relationships with friends and family
  • Whether you are a parent, pregnant, details of any children you have or live with and any involvement with Social Services
  • Your school and education needs and education history
  • Your risk information, both to yourself and to others
  • Your health information, including past and current substance use, mental and physical health, medications
  • Any past and present offending
  • A record of your sessions with treatment and support providers

We get most of this information from you and from what we learn about you through your use of The Catch 22 Risk and Resilience Service , but we may also get some information about you from:

  • Our Youth Offending Service
  • Our Children Social Care services
  • Risk Panel Registers 

How do we use your personal information?

We use this information for one or more of the following reasons:

  • meet your needs and make sure that you receive the most appropriate support and treatment
  • monitor and improve the Risk and Resilience service provided by Catch 22
  • ensure improvements to drugs and alcohol services in the future.
  • It also means that you don’t have to repeat yourself to different workers or organisations.

Who else might we share your personal information with?

Sometimes we may need to share your information, but we will only do so where we have a valid legal basis to share data. We will only share the minimum information for each circumstance. We may share some of your personal information with one or more of the following:

  • Commissioned partners (Catch 22)
  • other providers of physical and mental health care

We may also share your information with our partners to deliver national government programmes and initiatives and evaluation data to evidence their impact, including the Supporting Families programme, in which the London Borough of Merton is a participant.

What is the legal basis for our use of your personal information?

The information below shows the legal bases we are relying on to use your personal or special category (sensitive) personal information.

You can see a list of the full legal bases we may rely on by looking at our main privacy notice.

Our legal bases for using your personal information are to meet our legal obligations under:

  • Children Act 2004
  • Care Act 2014
  • Childcare Act 2006
  • Crime and Disorder Act 1998
  • Digital Economy Act 2017
  • Health and Social Care Act 2015
  • Domestic Abuse Act 2021

We will also exercise our statutory duties as a local authority under ‘Public Task’.

Special category (sensitive) personal information/criminal offence personal information

Our additional legal bases for using your special category information are:

  • the delivery of health and social care services
  • social security and social protection.

Where do we keep this information?

  • On the Council’s secure database called Sharepoint and in folders in a secure file system.
  • On the Council’s case management system called Mosaic which can only be accessed by allocated social workers and their managers and those involved with ensuring your safety and welfare
  • the Council’s Youth Offending service case management system if you are known to the service.
  • We will only share information that is relevant and for these purposes.

How long do we keep your information?

This will depend on the type of outcome you receive but it will usually be for six years after you have exited the service.

Do you have a right to see what we keep about you?

Yes - You have a right to view your files and can request this at any time.

If you have any questions, please visit the London Borough of Merton’s website for more information about the rights you have over that way we use your personal information.

https://www.merton.gov.uk/legal/privacy-and-cookies

https://www.merton.gov.uk/legal/privacy-and-cookies/childrens-services-and-education-privacy-notice

More information can be found about your rights and privacy at: www.ico.org.uk and https://ico.org.uk/your-data-matters/