All services
  1. Home
  2. Your council
  3. Data protection and privacy
  4. Service privacy notices

Stop Smoking service privacy notice

1 Council contact details

1.1 North Northamptonshire Council

Registered Office:

Sheerness House
41 Meadow Road
Kettering
NN16 8TL

Tel: 0300 126 3000

1.2 The North Northamptonshire Stop Smoking Service provides specialist behavioural support to North Northamptonshire residents.

1.3 The Stop smoking service  can be contacted at [email protected]

2 Information that we hold

2.1 We currently collect and process the following information for assessment purposes:

  • Name and contact details
  • Medical information (including health conditions) & GP surgery
  • Website user stats
  • Details of race and ethnic origin
  • Demographic data (including housing status, employment status, and whether or not you pay for your prescriptions)

3 How the information is obtained

3.1 Most of the personal information we process is provided to us directly by you for one of the  following reasons:

  • To contact you, and send you nicotine replacement products
  • To provide you with a personalised service
  • To report the outcome of your quit attempt to the Department of Health (no identifiable data is shared)

We may also receive personal information indirectly, from the following sources in the following scenarios:

  • Friends or family with your consent
  • Healthcare professionals
  • Other local authorities

3.2 There are a number of reasons why we need to collect and use your personal information. Generally, we collect and use personal information where:

  • it is necessary to meet our legal and reporting obligations from the Department of Health (‘If you would like more information on the purpose, and legal basis, for the collection of data from local stop smoking services you can find it using the following URL - Local stop smoking services dataset Direction 2017 - NHS Digital’
  • you have requested a service from us
  • it is necessary to protect public health
  • we need to protect individuals from harm (in an emergency)
    or
  • it is necessary for archiving, research, or statistical purposes. For these purposes your data would be used in a pseudonymised format (name and other identifying information replaced with a unique number).

Our lawful basis for processing your personal data is:

  • To meet our statutory duties to you as outlined in legislation such as the Care Act 2014, Mental Capacity Act 2005 and Mental Health Act 1983.
  • UK GDPR Article 6 1 (e) processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
  • In respect of Special Categories of Personal Data, UK GDPR Article 9 grounds 2 (h) processing is necessary for the purposes of preventive or occupational medicine, for the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services.
  • In respect of Special Categories of Personal Data, Data Protection Act 2018 Schedule 1 Part 1, 2 Health or social care purposes and Schedule 1 Part 2 19 processing is necessary for health or social care purposes and Safeguarding of economic well-being of certain individuals.

4 What we do with the information

4.1 We use the information that you have given us in order to:

  • report non-personal quit data to the Department of Health
  • ensure we can provide a personalised service that takes your specific needs into account
  • make contact with you ourselves, and if necessary share your contact information with our suppliers upon specific instruction by you (for example – if you would like them to call you to discuss a complaint you have about their product)
  • review details of previous quit attempts you may have made with the team
    and
  • provide anonymised statistical information for improving the service for others.

The information will only be used for the purposes stated when it was collected. Information will not be sold, rented or provided to anyone else, or used for any other purpose than that for which it was originally collected unless required to by law.

4.2 We will only share your contact information if you ask us to. This is exclusively in respect of  queries you may wish to discuss with our suppliers directly.

4.3 We will share personal information with law enforcement or other authorities if required by applicable law. Any information sharing is undertaken in accordance with UK GDPR and the Data Protection Act 2018. We have mechanisms in place to share information lawfully and securely.

4.4 We do not use automated decision making for equalities processing. Automated decision-making is where decisions are made about you without any human influence on the outcome. These may affect your legal rights or have an impact on your circumstances, behaviour or choices.     

4.5 There is no profiling undertaken in relation to equalities processing. Profiling is where you analyse parts of an individual’s personality, behaviour, interests and habits to identify their preferences, make predictions or decisions about them.

5 How long we keep your information for and how we securely dispose of it after use

5.1 We keep your personal information for this purpose for 8 years, after which time it will be securely destroyed. A copy of the retention schedule can be requested through the council’s website.

5.2 We will securely dispose of your information in line with retention periods.

6 How we store your information

6.1 Your information is securely stored on the council’s systems and the Millbrook Millflow 5 system (if equipment is ordered on your behalf), in which the servers are UK based.

7 Your data protection rights

7.1 The law gives you a number of rights to control what personal information is used by us and how we can use it. For further information, please see section 15 of the council’s ‘Corporate Privacy Notice’ on our website.

7.2 Please be aware that your rights may differ depending on the lawful basis for processing your personal data.

7.3 The right to withdraw consent - You can ask that we no longer use your details for this processing. If you wish to exercise this right, please contact the Data Protection Officer detailed in section 8.1 below. Please note that exceptions to this right may be applied in line with legislation.

8 Who to contact

8.1 If you would like further information about how we use your personal information, or you wish to exercise one of your data rights or you wish to complain about the use of your personal information please contact the Data Protection Officer.

8.2 If you are still dissatisfied once you have contacted the Data Protection Officer, you have the right to complain to the ICO.

The ICO’s address:           

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113

9 Changes to this privacy notice

9.1 Privacy notices are live documents, which will be updated or revised in line with legislation.

Last updated 11 October 2022