Last updated: 6th November 2023
Champs Public Health Collaborative is a private organisation who conduct qualitative and quantitative behavioural research to inform projects, for health and social care, community and voluntary sectors. The data controller for all research studies is Champs Public Health Collaborative. A data controller determines how and why personal data can be processed. Kaleidoscope has been commissioned by Champs Public Health Collaborative to conduct the research on their behalf.
We also conduct research on behalf of other clients. In these situations we will either be a joint controller with the other client or data processor acting on behalf of the other client. Where this is the case, you’ll be notified in the information sheet for specific projects.
This privacy notice gives you general information on how we handle research data at Champs Public Health Collaborative. For more details about a specific piece of research, you can refer to the information sheet provided when you’re invited to take part in that project. This should also include contact details for the researcher and their team in case you have any further questions.
- Why we need your data
We need information about you when inviting you to take part in research to ensure that:
- you meet the criteria for this piece of research
- we are including a wide range of people
We need to collect data during the research activities to ensure that we have an accurate record of what happened and what was said. This is important, because we then analyse this information and use it to elicit key themes/ draw conclusions about what should happen next.
- Our legal basis for using your data
We use your data because you have consented for us to do so for a particular piece of research.
- What data we collect from you
4.1 When inviting you to take part
The personal data we collect from you at this stage could include information about your:
- disabilities/ conditions
- job title
- email address
- phone number
We may collect additional characteristic information if it is relevant for a particular research study. For example, if we’re conducting research and want to engage gay men, we might want to know about your sexual orientation.
We may collect additional topical information, based on the specific topic being researched. For example, if we’re conducting research about a specific service, we might want to know whether you’ve used this service in the past.
4.2 During the research session
In most cases, we’ll collect personal data during the research activities. This could be in the form of:
- audio recordings
- video recordings
- screen recordings
- written notes
- What we do with your data
5.1 Collecting and analysing
Our dedicated research team carry out all research activities and will have access to your data. We may also use the following third-party tools and services to collect, transcribe or analyse your data:
- survey tools
- online collaboration tools including Microsoft Teams and Zoom
- transcription services, including automatic transcription and analysis tools
- consent management tools
If we do any of the above, we will monitor and limit the access that people outside Champs Public Health Collaborative have to your data. The privacy policies of these external organisations will also apply.
5.2 Reporting the results
When using your responses in reports or presentations, or sharing with other departments, we will make sure you cannot be identified from your data. Each person taking part in a piece of research will be assigned a unique number, and any names or other personal and identifiable data will be removed.
Only researchers working at Champs Public Health Collaborative will have access to the full original recordings and to your personal information. The only exception to this is during the transcription and analytics phase (described above) when transcription and analytics services may be used.
If we do any of the above, we will monitor and limit the access that people outside Champs Public Health Collaborative to have to your data. The privacy policies of these external organisations will also apply.
- Legal obligations
We will share your data if we’re required to do so by law – for example, by court order, or to prevent fraud or other crime. We will also share your data in the event of a serious safeguarding concern – for example, if we are concerned about the welfare of a child or vulnerable adult.
We will not:
- sell or rent any of your data to third parties
- share your data with third parties for marketing purposes
- Where your data is processed and stored
Your personal data will be stored on our IT systems, which are provided by third party email, document management and storage service providers.
Your personal data may be transferred outside the United Kingdom while being processed by Champs Public Health Collaborative. If this happens, it will be subject to equivalent legal protection through the use of adequacy decisions. If no relevant adequacy decision exists, standard contractual clauses will be used instead.
- How long we keep your data
The data collected when we invite you to take part will be held for a maximum of 6 months after the study has finished. After this point, we will delete this but will keep a record of consent, your name, and the data gathered during the research activities.
We will hold the data from research sessions, your name, and a record of consent for a maximum of 3 years after the study has finished. After this point, we will delete all personal data relating to you, but we might retain reports that contain your anonymised quotes.
- How we protect your data and keep it secure
We are committed to doing all that we can to keep your data secure. We have set up systems and processes to prevent unauthorised access to or disclosure of the data we collect about you. For example, we protect your data using varying levels of encryption. All third parties that process personal data for Champs Public Health Collaborative are also required to keep that data secure.
- Your rights
You have the right to withdraw consent to the processing of your personal data – for example original recordings and notes where you can be identified. If a report with anonymised quotes has been published (internally or externally) we will not be able to remove this as it does not constitute personal data.
You also have the right to request:
- information about how your personal data is processed
- a copy of that personal data
- that this copy be provided in a structured, commonly used and machine-readable format
- that anything inaccurate in your personal data is corrected without delay
- that your personal data is erased if there is no longer a justification for holding it
- that the processing of your personal data is restricted in certain circumstances (for example, where accuracy is contested)
If you have any of these requests, please contact us using the details in the information sheet provided to you, or the contact details listed below.
- Questions and complaints
If you have questions about research that you’ve been invited to participate in, you can contact the researcher named on the information sheet provided to you.
Contact the Champs Public Health Collaborative Privacy Team if you:
- have any questions about anything in this document
- think that your personal data has been misused or mishandled
- want to make a subject access request (SARS)
The data controller for your personal data is Champs Public Health Collaborative. The contact details for our Data Protection Officer are:
Champs Public Health Collaborative
PO Box 290
CH27 9FQThe Data Protection Officer provides independent advice and monitoring of Champs Public Health Collaborative use of personal information.
You can also complain to the Information Commissioner, who is an independent regulator.
Information Commissioner’s Office
Contact form https://ico.org.uk/glo…
Telephone 0303 123 1113
Textphone 01625 545 860
Changes to this privacy notice
We may change this privacy notice. When we make changes, the ‘last updated’ date at the top of the page will also change.
Any changes to this notice will apply to you and your data immediately. If these changes affect how your personal data is processed, we will take reasonable steps to make sure you know.