What information do we use?
To deliver the Crisis and Resilience Fund, we collect and process personal information about you.
This may include:
- personal details such as your name, address, date of birth and National Insurance number
- contact details such as your phone number or email address
- household and demographic information, such as employment status, benefit status, disability or health information, and ethnicity
- financial information, including details about your income, expenditure and financial circumstances
- information about support provided, including the reason for applications, awards made and their value
Some of the information we collect (such as disability or ethnicity data) is classed as special category data under data protection law.
This information may be provided directly by you, or by organisations supporting you.
Why do we use this information?
We use your information to deliver the Crisis and Resilience Fund and to meet our legal responsibilities.
This includes:
- processing applications and administering payments
- assessing eligibility for support
- making referrals to other services that may help you (“no wrong door” approach)
- monitoring and improving services to ensure they meet local needs
- completing required reporting to central government (Department for Work and Pensions), using anonymised or aggregated data
- preventing and detecting fraud or misuse of public funds
- carrying out equality monitoring and impact assessments
- responding to safeguarding concerns where necessary
- meeting our legal obligations, including audit and accountability requirements
We process your information under the following lawful bases:
- Public task – to deliver services in the public interest
- Legal obligation – to comply with legislation and funding requirements
- Vital interests – where necessary to protect you or others (for example safeguarding)
How will your information be kept secure?
We take the security of your information seriously and have measures in place to protect it from loss, misuse or unauthorised access.
These include:
- secure IT systems and case management systems (such as Mosaic)
- restricted access so only authorised staff can view your information
- secure file transfer methods including encrypted and password-protected files
- staff training in data protection and confidentiality
- policies and procedures to manage and report any data breaches
Your information will be stored in line with Derbyshire County Council’s retention policies and securely deleted when it is no longer needed.
Who do we share your information with?
We may share your information with partner organisations involved in delivering the Fund, where it is necessary and lawful to do so.
This may include:
- Derbyshire County Council services
- district and borough councils
- Derbyshire Carer’s Association
- Age UK Derby and Derbyshire
- Citizen’s Advice Derbyshire Districts
- Rural Action Derbyshire
- Marches Energy Advice
- Derbyshire Community Bank
- Derbyshire Voluntary Action
We also share information with government departments (such as the Department for Work and Pensions – DWP), typically this is in anonymised or aggregated form.
Information may be shared:
- to process your application or deliver support
- to refer you to relevant services
- to monitor services and funding
- to prevent fraud or safeguard individuals
All organisations we share information with are required to keep it secure and only use it for agreed purposes.
What are your rights to the personal information we hold about you?
Under data protection law, you have rights over your personal information.
These include:
- the right to be informed about how we use your data (this notice)
- the right of access to the information we hold about you
- the right to rectification if your information is inaccurate or incomplete
- the right to erasure (in some circumstances)
- the right to restrict processing in certain situations
- the right to object to how your information is used
- the right to data portability (where applicable)
To exercise your rights, you can contact Derbyshire County Council’s Data Protection Officer.
If you are unhappy with how your data is being used, you can also complain to the Information Commissioner’s Office (ICO).
Contact details
For questions about this privacy notice or how your information is used, please contact:
You also have the right to contact the Information Commissioner.
We will keep this privacy notice under regular review and update it as necessary.