Privacy Policy

Who we are

Choose You is a service delivering smoking cessation and weight management programmes in Bedford Borough, Central Bedfordshire and Milton Keynes. The service will be delivered by the Public Health Department of Central Bedfordshire Council.

Central Bedfordshire Council, Milton Keynes City Council and Bedford Borough Council will be joint data controller for all the personal information used to deliver the service.

What information do we collect?

In order to deliver services to you we will ask you to provide information about yourself. This may include:

  • basic personal identifiers (name, address, date of birth)
  • contact details (email address, mobile number, landline number)
  • occupation
  • gender
  • preferred language
  • special category data such as:
    o ethnicity
    o disability
    o religion
    o sexual orientation
    o health information

For Smoking Cessation:

  • smoking history

For Weight Management:

  • Height and weight to calculate BMI

In addition, we may record details of your sessions with us and the outcomes of those sessions.

Why we process this data

The information you provide to us and which we record will only be used to deliver the services you have requested and will not be used for any other purpose.

Our legal basis for processing this data is:

Article 6: (e) Public task: the processing is necessary to perform a task in the public interest or for our official functions, and the task or function has a clear basis in law.

Because we need to process special category data (such as information about your health) we also need a basis under Article 9 GDPR. This is:

Article 9(2)(h): processing is necessary for reasons of public interest in the area of public health.

Who do we share your information with?

The information we use to deliver the Choose You service is held on a customer management system called Theseus provided and hosted by Cyber Media UK. Cyber Media may, on occasion, access personal information for the purposes of maintenance and support.

Cyber Media are a data processor and is bound by strict contractual obligations to process your information in accordance with this privacy notice and not to share, sell or use your data for any other purpose.

To support the delivery of smoking cessation services, including the provision and monitoring of Nicotine Replacement Therapy (NRT), relevant personal and health information may also be shared with authorised pharmacies to record the supply of NRT and supports the administration and payment of services. Information will be shared with Pharmacies through a secure system called PharmOutcomes supplied by Optum UK. Optum UK acts as a data processor on behalf of the joint data controllers and is subject to the same contractual and information governance requirements.

If you are a resident of one of our housing or local authority partners, relevant information may be shared securely with the public health stop smoking adviser linked to your landlord or support provider, where necessary to provide appropriate services.

For residents of Amplius housing, stop smoking support may be delivered by an adviser employed by Amplius.

We may recommend a third-party app to help you with your weight loss. If you choose this option, you will sign up with the digital provider, who will become the data controller of the information you provide to them. They will provide Choose You with information to allow us to monitor.

The data will be processed by the Public Health Evidence and Intelligence Team at Bedford Borough Council to monitor and evaluate the programme. The statistical information will be shared with Bedford Borough and Milton Keynes City Council to monitor and evaluate the success of the service. No personal data will be shared with any other third parties.

Where will information be stored?

All information will be stored securely by Central Bedfordshire Council, Bedford Borough Council, and/ or Cyber Media UK, Optum UK and Second Nature within UK data centres and will not be processed or stored overseas.

How long will the information be kept?

Your information will be retained for 2 years from the date of your last contact with the service.

Your rights

More information about your rights in relation to the information about you which is held by councillors or the Council, and who to contact if you have any concerns, can be found in the Council’s main privacy notice. Read Central Bedfordshire Council’s main privacy notice.