Test and trace support payments privacy notice
1. Council contact details
1.1. West Northamptonshire Council
One Angel Square
Tel: 0300 126 7000
1.2. For more information regarding the Test and Trace Support Payment Scheme please visit the GOV.UK website.
2. Information that we hold
2.1. We collect and process the personal data that you provide to us when completing your application for a self-isolation support payment, which may include:
- full name
- full residential address
- contact information (e.g. email address, mobile telephone number, home telephone number)
- proxy applicant details (as above where you may nominate someone else to complete this application on your behalf)
- employer name and address
- NHS notification number (the unique reference you will be given by NHS Test and Trace Service to self-isolate) for you or your child
- bank account details
- your National Insurance Number
- proof of self-employment eg recent business bank statement (within the last two months), most recent set of accounts or evidence of self-assessment
- financial Information such as household income and expenditure
- health data
3. How the information is obtained and why
3.1. Most of the personal information we process is provided to us directly by you for one of the following reasons:
- to assess your eligibility for a Track and Trace Support Payment
We also receive personal information from the following sources in the following scenarios:
- from the NHS Test and Trace Service to confirm that you have either tested positive for COVID-19 or you have been in close contact with someone who has tested positive for COVID-19
- from your nominated representative in relation to your application for a self-isolation payment
3.2. There are a number of reasons why we need to collect and use your personal information.
For the purposes of dealing with Track and Trace Support Payments our lawful basis for processing is based on the Council’s obligations under the following legislation:
- Public Health, England. The Health Protection (Coronavirus, Restrictions) (Self-Isolation) (England) Regulations 2020
- COPI Notice: Covid-19 – Notice under Regulation 3(4) of the Health Service Control of Patient Information Regulations 2002
Where we use personal information to confirm that someone is eligible for a self-isolation payment, the articles of the UK GDPR that apply are:
- GDPR Article 6(1)(e) – processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
- GDPR Article 9(2)(b) – processing is necessary for the purpose of carrying out the obligations of the controller or of the data subject in the field of social security
4. What we do with the information
4.1. What we use your personal data for
We use your data to:
- assess your entitlement to Test and Trace Support Payments, both mandatory and discretionary
- award or process the payment of any entitlement
- carry out checks with the NHS Test and Trace Service and the Department for Work and Pensions (DWP), for verification purposes
- carry out checks with Her Majesty’s Revenue and Customs (HMRC), for tax and National Insurance purposes
- potentially carry out checks with your employer to validate your application
4.2. We may share your data with the following organisations:
- HMRC – for tax and National Insurance purposes
- your employer – for verification checks
- education or care providers – for verification checks
- National Audit Office
- Cabinet Office
- Police or other government agencies for the prevention and/or detection of crime and/or to protect the public purse or where the law permits
5. How long we keep your information for and how we securely dispose of it after use
5.1. We keep your personal information for the purpose of Test and Trace Support Payments in line with the council’s retention schedules.
We will only keep your personal data for as long as it is needed for the purposes of the COVID-19 emergency, and for audit and payment purposes.
5.2. We will securely dispose of your information in line with retention periods.
6. How we store your information
6.1. Your information is securely stored in electronic format on the council’s systems.
7. Your data protection rights
7.1. The law gives you a number of rights to control what personal information is used by us and how we can use it. Please see section 15 of the council’s Corporate Privacy Notice for further information.
7.2 Please be aware that your rights may differ depending on the lawful basis for processing your personal data.
8. Who to contact
8.1. If you would like further information about how we use your personal information, or you wish to exercise one of your data rights or you wish to complain about the use of your personal information please contact the Data Protection Officer.
8.2. If you are still dissatisfied with how we have used your data once you have made a complaint through the council’s Data Protection Officer you have the right to complain to the Information Commissioner’s Office.
The ICO’s address:
Information Commissioner’s Office
Helpline number: 0303 123 1113
This privacy notice was completed on 25 March 2021.
The privacy notice review date is March 2022.