Mid-Sussex privacy policy

Scope and overview

This is a joint privacy notice issued on behalf of the Acacium Group and all its group companies, the controllers Pulse Healthcare Limited trading as Xyla and Mid Sussex District Council.

A full list of Acacium Group companies and their trading names can be found here, all reference to the Acacium Group refers to these companies. If you require a printed copy of this privacy notice of our group companies, please contact us using the details below.

When we mention “we”, “us” or “our” in this privacy notice, we are referring to Acacium Group, Xyla and/or Mid Sussex District Council.

It has been agreed that Xyla will be your point of contact. Please contact us using the details below if you have any questions about this privacy notice or personal data we use about you:

• by email to: dpo@acaciumgroup.com; or
• by writing to: Data Protection Officer, Acacium Group, 9 Appold Street, London, EC2A 2AP

If you have any concerns about the personal data we use about you, you have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues, by contacting them at www.ico.org.uk. We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please feel free to contact us in the first instance.

We regularly review this privacy notice and will update it where necessary. We will notify you of any significant changes and provide you with a copy. This privacy notice was last updated on 06/04/2020.

1. When will this privacy notice apply?

This privacy notice will apply to personal data we collect from you when:

• You are referred or register onto the Mid Sussex Wellbeing Coaches service

We are committed to ensuring that your privacy is protected. If you provide us with personal data, you can be assured that it will only be used in accordance with this privacy notice.

2. What is the lawful basis for using your personal data?

As joint controllers, it means that Xyla and Mid Sussex District Council will both use your personal data and will jointly determine how is it is used.

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data for purposes below. These are commonly called the lawful basis for processing.

• Processing is necessary for the performance of a public task carried out in the public interest or in the exercise of official authority vested in the controller by processing your data we are able to provide the public task of health promotion and disease prevention.
• Legitimate Interests – processing is necessary for the purpose of the legitimate interests pursued by us or a third party, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data.
• Consent – you have given your consent to the processing of your personal data for the processing detailed in this privacy notice.

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose in this privacy notice.

Please note you will not be subject to any automated decision making.

The table below sets out the personal data that we collect and use about you and the lawful basis we will rely on as set out above.