Privacy statement

Privacy statement

Privacy Statement for Service Users

Why do we collect your personal information and what do we do with it?

We collect personal information from you to allow us to assess the evidence of your eligibility for our programmes and to subsequently register you if you are.

We will also use this information to; verify your identity where required (we are legally obliged to safeguard public funds so we are required to verify and check your details internally for fraud prevention), contact you by post, email or phone about the programme and to allow us to report to our funders.

The personal data that we collect at this stage is via our referral form and consists of:

• Name
• Address
• Contact details
• Immigration Status
• Education History
• Work Experience
• Other agencies you are signed up with
• Your level of English proficiency
• etc

We collect this under the lawful basis of :

(b) Contract: the processing is necessary for a contract you have with the individual, or because they have asked you to take specific steps before entering into a contract.

Once we have directed you to the programmes’ caseworker you will be asked to also provide data that is relevant to
that programme – this may include data that is considered to be “special category data” or “sensitive data” such as:

• health information,
• sexual orientation,
• criminal records,
• country of origin,
• NI insurance number
• etc.

This information is also to allow us to help you through the programme you have registered with and to importantly provide information to our funders to ensure that funding continues.

We collect this under the additional lawful basis as stated in the conditions of Article 9 of the UK GDPR of:
(d) not-for-profit bodies

Where do we store your information?

Your information is stored:

• Electronically on our in-house *data management system

• On password protected **spreadsheets

• Physically in locked cabinets (where funders request that we keep paper copies)

*Access to this database is restricted and all staff adhere to Bridges Programmes’ Confidentiality Policy.

**Access to these spreadsheets is restricted and all staff adhere to Bridges Programmes’ Confidentiality Policy.

Who do we share your information with?

We may share your personal information with other public bodies (and also receive information from these other
bodies) for fraud checking purposes.

Whilst your information is confidentially and securely held by Bridges Programmes we may share your personal
information with third parties, where required, as part of a contractual service agreement, or where we have other
legitimate interests in doing so.

These include:

• Where we are legally obliged to share certain data with other public bodies, such as HMRC (and will do so where
the law requires this).

• Where we receive requests for specific information from other regulatory and law enforcement bodies.

• Where we have partner organisations who work with us to provide services for you.

• Where we have identified other organisations who may be able to assist you e.g. Health services.

• Where we are required to provide information to funders e.g. Scottish Government.

Your data will be shared securely and a data sharing agreement with the organisation will be in place to ensure they only use your data for specific purposes and that they will not be used for anything else and that they will be held
securely by them.

Sharing Data with Glasgow City Council

Where we share Data with Glasgow City Council for the Scottish Government’s ‘No One Left Behind’ funding your data will be transferred to them securely and they will also keep your data in line with legislation.

Please see Glasgow City Council’s Economic Development and Employability Funding Privacy Statement.

https://www.glasgow.gov.uk/article/5181/Economic-DevelPropment-and-Employability-Funding-Privacy-Statement

How long do we keep your information for?

We only keep your personal information for the minimum period amount of time necessary to provide you with the services you have signed up to.

Sometimes this time period might exceed this and that can be due to some relevant legislation or the requirements of the programme you are in (because the time period is set by the funders). These timeframes are logged within our Retention Policy and Schedule which is managed by the Finance Manager who will instruct when a retention period has come to an end.

At this point all paperwork that contains your data will be confidentially shredded and electronically stored data will
either be deleted or anonymised for the purposes of reporting.

Your rights under data protection law

• Right to be informed – as an individual you have the right to be informed about the collection and use of your
personal data – this is laid out in this statement

• Right of access – as an Individual you have the right to access and receive a copy of your personal data, and
other supplementary information – you can do this by emailing us at [email protected]

• Right to rectification – as an Individual you have the right to have any inaccurate personal data held on you
rectified or completed if it is incomplete. You can do this by emailing us at [email protected]

• Right to erasure – as an individual you have the right to have any personal data held on you erased in some
circumstances. You can do this by emailing us at [email protected]

• Right to restrict processing – as an individual you have the right to request the restriction or suppression of your personal data in some but not all circumstances. You can do this by emailing us at
[email protected]

• Right to data portability – as an individual you have the right to obtain and reuse your personal data for your
own purposes across different services.

• Right to object – as an individual you have the right to object to the processing of their personal data in certain
but not all circumstances. You can do this by emailing us at [email protected]

• Rights related to automated decision making (making a decision solely by automated means without any
human involvement); including profiling (automated processing of personal data to evaluate certain things
about an individual) – not relevant to data processing carried out by Bridges Programmes

For more information on your rights please visit A guide to individual rights | ICO

Information you have given us about other people

If you have provided anyone else’s details e.g. family members, please make sure that you have told them that you have given their information to Bridges Programmes. We will only use this information to contact them in relation to the service you have requested, if applicable.

To assist you in the future we may provide information about new projects that you would be eligible for – this will be
based on personal data you have provided as per legal basis above.

Complaints & feedback

We aim to resolve any complaints made about how we handle personal information in line with our Complaints Policy.

To lodge a complaint with us about how we have handled your personal information, you can contact us at [email protected] .

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

You can find ICO contact information here Information Commissioner’s Office (ICO) or call them on 0303 123 1113.