Canolfan Abbey Road Privacy Notice 9th April 2025

Introduction
We treat privacy and confidentiality very seriously. We use personal information on a day-to-day basis to fulfil our purpose of supporting better wellbeing and mental health for people aged 18 and over. Our use of personal information allows us to provide people with the right service and support, to achieve our purpose.  

We have developed this privacy notice in order to be as transparent as possible about the personal information we collect and use.  We comply with all aspects of the UK’s data protection legislative framework, which includes the European General Data Protection Regulation (GDPR) and the UK’s own legislation, including the Data Protection Act 2018

About Us

As an organisation, we support better wellbeing and mental health for people aged 18 and over from our base in the heart of Bangor, Gwynedd.  We offer a variety of activities for wellbeing and creativity that are proven to support us to manage better mental health. People can access counselling, complimentary therapies, support for dependency and a variety of therapeutic approaches at Canolfan Abbey Road directly through us, or through one of the organisations who offer their services from the centre.

What this Privacy Notice Covers?

We ask that you read this privacy notice carefully as it contains important information about how we collect and use Personal Data about you. It is drafted in compliance with Data Protection Law.  We will comply with Data Protection Law which state that the Personal Data we hold about you must be:

 

• Used lawfully, fairly and in a transparent way

• Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes

• Adequate and relevant to the purposes we have told you about and limited only to those purposes

• Accurate and kept up to date

• Kept only as long as necessary for the purposes we have told you about

• Kept securely

 

Legal Basis

We take our obligations for data handling very seriously and it is therefore important for you to know the lawful basis for us processing your information: 

• We process data to meet our contractual duties to you and provide you with the required services. 

• We process data because you give us your consent, specifically for the purpose of providing you with mental health support. 

• We also process data in the legitimate interests of Canolfan Abbey Road.  These legitimate interests are determined through an assessment made by weighing our requirements against the impact of the processing on you. Our legitimate interests will never override your right to privacy and the freedoms that require the protection of your personal data. 

 

The types of Personal Data we hold about you

We may collect, store, use and process the following Personal Data or categories of Personal Data about you:

 

• Full Name, Address, Telephone Numbers, Email address and Date of Birth

• GP details and contact details of other agencies  that support you and information about your health

• Your In Case of Emergency Contact (ICE)

• To which gender identity do you most identify

• Your care arrangements, if you have any and your Carer’s age, if you have one

• Your Ethnicity

• Who you live with, or if you live alone

• Carer Age

 

Special Category Personal Data

Certain types of personal information are in a special category under data protection laws, as they are considered to be more sensitive. Examples of this type of data include information about health, race, religious beliefs, political views, trade union membership, sex life or sexuality and genetic/biometric information. We only collect this type of information about you to the extent that there is a clear reason for us to do so or where you make it public or volunteer it to us. This kind of information is required by our main funders Betsi Cadwaladr University Health Board and/or Cyngor Gwynedd.

 

Personal Data is collected in the following ways:

 

• From the information you give us when you contact us to request support or access to a service or activity

• From third parties, such as your GP; Community Mental Health Team or any other Referring Agency

 

How we will use Personal Data about you

 

• We hold your personal details for our own records only.

• We will not share your personal details with any other Third Party without seeking your prior consent – unless we have a legitimate reason for doing so (by this we mean that there may be times when we need to make a referral on your behalf to other Health or Wellbeing agencies in the furtherance of our support and information services to you for your own safety or the safety of others where required by law).

 

Data Security and Data Breaches

 

We have put in place appropriate security measures to prevent your Personal Data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your Personal Data to those employees and other third parties who have a need to know. They will only process your Personal Data on our instructions, and they are subject to a duty of confidentiality.

 

Removing Personal Data-Personal Data will be removed from our system if it has been superseded by other relevant or up to date information, if it is out of date, irrelevant or no longer necessary.

Any removal of Personal Data will be subject to the principles of Data Protection Law, compliance with the Lawful Basis for processing as well as other statutory rights and obligations.

​

Your Rights in Relation to your Personal Data-Under Data Protection Law you have the right to:

• Request access to your Personal Data (commonly known as a “data subject access request”). This enables you to receive information about the Personal Data we hold about you.

• Request correction of the Personal Data that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.

• Request erasure of your Personal Data. This enables you to ask us to delete or remove Personal Data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your Personal Data where you have exercised your right to object to processing

• Object to processing of your Personal Data where we are relying on a legitimate interest for processing (or a legitimate interest of a third party) and there is something about your particular situation which makes you want to object to processing on this ground.

• Request the restriction of processing of your Personal Data. This enables you to ask us to suspend the processing of Personal Data about you, for example if you want us to establish its accuracy or the reason for processing it.

• Request the transfer of your Personal Data to another party.​

Who to contact if I have any questions or concerns?  Our Chief Executive Officer ensures oversight of our data processing activities and can answer questions you may need about this privacy notice or about use of your personal data. 

email: arc@abbeyroadcentre.co.uk / 01248 354 888