Privacy Notice

Where do we obtain data from?

This study uses data from Wakefield District Housing (WDH). It is data about every customer who has been accepted onto the Mental Health Navigator Scheme, professional stakeholders with oversight of local delivery context and housing/mental healthcare stakeholders in control group areas. The data collected during Work Package 1 and 2 will include data on MHN customers that is routinely collected by WDH and SWYPFT staff. Work Package 5 will be primary data from semi-structured interviews with the above stakeholders.

What data do we hold?

The data does not contain customer names, dates of birth, addresses, phone numbers, NHS numbers, or records from primary care. Routinely collected data for Work Packages 1 and 2 will include information regarding tenants’ and their health, housing situation, ethnicity, gender, age category, geographical area, interventions they received from the Mental Health Navigators and services they have been referred to.

For Work Package 1, these data do include a unique identifier, which if combined with data held by WDH would allow identification of an individual therefore these data are classed as ‘personal data’ under the General Data Protection Regulation (GDPR).

Who will process my personal information?

Only researchers in the Mental Health Navigators Team at the University of York and key contributors from Newcastle University and the University of Manchester will process your data. We do not share the personal data for this study with anyone else. All publications and presentations will be undertaken using aggregate level data.

What is the purpose and legal basis of the processing?

Under the General Data Protection Regulation (GDPR), the University has to identify a legal basis for processing personal data and, where appropriate, an additional legal basis for processing special category data.

In line with our charter which states that we advance learning and knowledge by teaching and research, the University processes personal data for research purposes under Article 6 (1) (e) of the GDPR:

Processing is necessary for the performance of a task carried out in the public interest

Special category data is processed under Article 9 (2) (j):

Processing is necessary for archiving purposes in the public interest, or scientific and historical research purposes or statistical purposes

Research will only be undertaken where ethical approval has been obtained, where there is a clear public interest and where appropriate safeguards have been put in place to protect data.

How will you keep my data secure?

The data controllers for this study are the University of York.

The University will put in place appropriate technical and organisational measures to protect your personal data and/or special category data.

Information will be treated confidentially and shared on a need-to-know basis only. The University is committed to the principle of data protection by design and default and will collect the minimum amount of data necessary for the project.

How can I access my personal information?

Various rights under data protection legislation, including the right to access personal information that is held about you, are qualified or do not apply when personal information is processed solely in a research or archival contact. This is because fulfilling them might adversely affect the integrity of, and the public benefits arising from, the research study or project.

The full list of (qualified or inapplicable) rights is: the right to access the personal information that is held about you by the University (further details are published here), the right to ask us to correct any inaccurate personal information we hold about you, to delete personal information, or otherwise restrict our processing, or to object to processing (including the receipt of direct marketing) or to receive an electronic copy of the personal information you provided to us.

If you have any questions regarding your rights in this context, please use the contact details below.

Please note as we do not hold names or addresses for this study, we cannot remove participants from this study.

How long is my information kept?

Study datasets will be held on a secure university filestore with access limited to named individuals in the research team. Data will be kept for 10 years in line with University of York data management policies after which it will be securely destroyed.

Who can I contact?

If you have any questions about this research study, please contact the principal investigator Dr Sarah Blower sarah.blower@york.ac.uk.

If you have any general questions about how your personal information is used by the University, or wish to exercise any of your rights, please consult the University’s data protection webpages. If you need further assistance, please contact the University’s Data Protection Officer at dataprotection@york.ac.uk.

How can I complain?

If you wish to raise a complaint on how we have handled your personal data, you can contact our Data Protection Officer who will investigate the matter. If you are not satisfied with our response or believe we are processing your personal data in a way that is not lawful you can complain to the Information Commissioner’s Office (ICO).

Our Data Protection Officer is Durham Burt and you can contact him at dataprotection@york.ac.uk.

For information on reporting a concern to the Information Commissioner’s Office, please follow this link.