Catch22 is a national organisation that works across England and Wales delivering services in a variety of settings. These include schools, colleges, social care, victim services, family support, prisons, apprenticeships and employment support.
We have been around for over 200 years and our focus is about making a difference to people by delivering our 3Ps – having good people around, having a good place to live/study/work, and having good purpose in life. Different services will focus on different aspects, but we aim to address those three elements to support people to thrive.
What does this service do?
Catch22’s Suffolk Positive Futures aims to transform young people lives and make a significant impact on reducing crime and youth violence in local communities while promoting positive emotional wellbeing. Staff work with you in your community at times when you need the support most.
What information do we collect?
Below is a list of the personal information and special category data that we will process in the course of our contact with you and the lawful basis that applies to each processing activity.
- Full name
- Age
- Address
- Contact details
- The background to your situation and any issues that Catch22 needs to be aware of (accessibility issues, support workers, health and safety concerns etc).
- Information for monitoring purposes such as sexuality, ethnicity, disabilities, health issues, employment status, housing status, whether you have had contact with the Criminal Justice System or Children’s Services, immigration status (all of which is stored anonymously)
- We take emergency contact details of all young people on their first session with us and then for any young person under 16 we also issue them with a parental consent form to take home.
If you are referred to us from another agency, the person referring you will ask your permission to do this before they send us your information.
If we support you to gain a qualification, the awarding body requires us to collect and send them the following information in order to send us your certificate:
- Your name
- Your date of birth
- Your ethnicity
- Your gender
- Your language
What law applies and which bits set out the legal basis for us to collect and hold your personal information?
The two main pieces of law that apply are:
- The UK General Data Protection Regulation
- The Data Protection Act 2018
We do have to have a legal basis for processing your personal information and this is:
- performance of a contract (UKGDPR Article 6.1b)
- public task (UKGDPR Article 6.1e)
- individual consent (UKGDPR Article 6.1a)
In addition, Schedule 1 part 2(6) of the DPA2018 which relates to statutory and government purposes.
The ‘special category data’ that we collect must meet even more of a legal test and our legal basis for collecting this is:
- explicit consent (UKGDPR Article 9.2a).
- necessary for reasons of substantial public interest, (UKGDPR Article 9.2.g)
The Information Commissioner’s Office has given further guidance that sets out when these conditions can be used as the legal basis for processing your information and this can be supplied to you if you wish to see it.
Where did we get your data from?
The data we collect comes from you or from the person referring you to us. They are required to obtain consent from you to pass on that information and for us to contact you.
Who will we share your information with?
We will provide the person and/or referring agency who referred the case to us with updates about how the support is going, along with copies of the agreement of work and review of work forms mentioned above.
Where we wish to share any information to help us support you with any other agencies, we will ask you for your consent.
We may have to share information if we are legally obliged to do so, for example:
- when it’s required by law or for the purposes of safeguarding you or others,
- where you disclose information that poses a risk to yourself or others,
- in the interests of safeguarding children or vulnerable adults,
- pursuant of the Terrorism Act 2000, or
- where it is required for the purposes of crime prevention or detection.
Normally we will tell you if we want to share your information for these purposes but there may be circumstances where this is not possible if it’s not safe or appropriate to do so.
We also use the information to inform you of other projects delivered by Suffolk Positive Futures which you may like to be involved with.
In order for us to continue offering successful and effective support services, it is vital that we collect and learn from the feedback our service users, partners and referrers share with us.
The feedback also helps us to show other people what our service users say about us (which we share anonymously).
Your information will be kept digitally on a secure drive and only people that will have access to your information are staff within Catch22 Suffolk Positive Futures Service.
How long will we hold on to your information for?
Data relating to you will be held from your date of birth plus 25 years unless you are a looked after child where it will then be date of birth and 75 years. Sometimes there may be legal reasons we have to retain the information for a longer specified period of time and there may also be circumstances where it is appropriate within legal and best practice requirements to retain the information for a longer period but you will be informed of this.
What happens if the information in the records is wrong?
You will need to be specific about what information you think may be wrong and why, along with what you think we should do to correct it. If we cannot amend your record in the way you would like, we will explain the reason for this. We will always mark disputed records to show that the record is disputed. You will be able to see a copy of your amended record.
What rights do you have over the information that we hold on your behalf?
You have a number of rights over your data that we are required by law to uphold. You have the following rights:
- The right to be informed – how we will use your information
- The right of access – how to access information we hold about you
- The right to rectification – request that information that is held about you and is inaccurate or incomplete be rectified
- The right to erasure – requests that under special circumstance information held on you may be removed or deleted if applicable
- The right to restrict processing –block or suppress processing of information about you
- The right to data portability – obtain and re-use information held about you for your own purposes across different services if applicable
- The right to object – object to processing of information about you
- The right to withdraw consent – at any time where your information is being processed based on that consent.
- The right to lodge a complaint with the Information Commissioners Office (ICO)
If you would like to request a copy of the information we hold about you, please contact DPO@catch-22.org.uk
If you think the information we hold on you is wrong, please contact us on DPO@catch-22.org.uk .
If you have any questions about this privacy policy or of our treatment of your personal data, email DPO@catch-22.org.uk or write to Data Protection Officer, Catch22, 27 Pear Tree Street, London, EC1V 3AG
If you feel we have not processed your data correctly and in accordance with GDPR and the Data Protection Act 2018, you have the right to make a complaint to the Information Commissioners Office (body that regulates Data Protection). Please visit https://ico.org.uk/ or call 0303 123 1113 in order to lodge a complaint with the regulator.
Last updated:
We may need to update this privacy notice periodically, so we recommend that you revisit this information from time to time. This version was last updated January 2021.