Employment Advisors in Talking Therapies Derby and Derbyshire Privacy Notice

This Privacy Notice was last reviewed on the 1st July 2025.

How we use your information

Ingeus UK Limited is committed to protecting your privacy. This document describes how we process your personal information in accordance with the General Data Protection Regulation (GDPR) and Data Protection Act 2018. It also contains important information about your rights and how to contact us. Further information is available on the Privacy section of the Ingeus website (www.ingeus.com/uk/privacy).  

Who are we?

As part of the NHS Talking Therapies programme, the Derby and Derbyshire Integrated Care Board (DDICB) has contracted therapy services to provide psychological therapy services (“Therapy Services”) to participants in Derbyshire. Ingeus UK Ltd has been commissioned by the Derby and Derbyshire Integrated Care Board (DDICB) to provide the Employment Advisors for NHS Talking Therapies Services in Derbyshire.

Clients will be referred to Ingeus UK Limited by one of the Therapy Services and consent will have been obtained prior to this referral.

As part of the Employment Advisor provision, Ingeus UK Ltd, Employment Advisors for NHS Talking Therapies Services in Derbyshire, will support individuals who are referred to them by one of the Therapy Services to stay in work, to secure employment or to move to more suitable employment.

Ingeus UK Ltd is a Joint Data Controller for the purpose of processing personal information for this program with the Therapy Services.

What information do we collect?

We may collect information about you initially from your therapy provider and yourself. The information we collect is:  

• Name
• Physical address
• Telephone Number
• Date of Birth
• Email address, where possible
• Emergency Contact Name and Telephone Number
• Any other information considered relevant to the aims of the programme, in order to offer a service

How do we use your information?

Ingeus UK will only collect and use your information for the lawful purposes of administering the services that we are contracted to deliver on behalf of DDICB. We will collect information about you initially from your therapy provider and yourself. 

Your information will also be used for:

• Performance monitoring and analysis to help us assess the quality and standard of our services
• Conducting investigations in response to a complaint or enquiry
• Accounting and record keeping e.g. keeping accounts related to business activities and financial management
• Creating access to iWorks employability platform

Sharing your personal information

We collect and use information obtained from clients to deliver the programme and ensure the support and advice we provide is appropriate and relevant to you.

When required we may share your personal information with DDICB, the Therapy Services and other organisations as permitted in accordance with the General Data Protection Regulation and Data Protection Act 2018. We will always inform you when we are going to share you information with others.

We will share your information to support you with any work-related issues including reasonable adjustments, negotiating changes to your job role, a phased return to work and generally to support your progress on the programme with your current and prospective employers. We will also need to check the employment details we hold for you are correct on a regular basis. We may also share records such as CVs, cover letters and application forms to prospective employer for the purpose of helping you to secure employment.

Basic personal information will be shared initially for identification purposes and at most this will be your full name, address, date of birth, phone number and email. We will then share relevant information about your personal circumstances as necessary to provide support as needed. We may share information related to your physical or mental health as needed to best support you.

We will make you aware if we need to share information in the instances listed below and will only do any of these things with your consent:

• In order to support you with job applications and securing employment, we will share your personal information. This will include job application forms, cover letters and your CV.
• In order to support you with current employment we may need to share personal information, such as health disclosures or reasonable adjustment requests.
• We may engage with your GP/Health Practitioner for additional support that your Employment Advisor believes that you could benefit from.

When necessary, for example, in the unlikely event of emergencies or safeguarding concerns, it may be in your vital interest to share your information with your GP, other Health Professionals or refer to external services that will provide help. We will only share your information with others if required to do so by law or unless we obtain your consent.

We do not transfer your personal information outside the EEA.

For more information, please go to https://www.ingeus.com/privacy.

How long will we keep your personal information?

Ingeus UK have defined retention periods for the information we hold, and we will not keep your personal information any longer than we are legally and contractually required to do so. Once we are no longer required to keep your information, it will be securely destroyed, in accordance with destruction guidelines.

How the law protects you

The law protecting your personal information is the General Data Protection Regulation (GDPR) and the Data Protection Act 2018. As custodians of your personal information, Ingeus UK are committed to ensuring that your personal data is processed lawfully and respectfully, and by ensuring that we are compliant with the GDPR.

In accordance with the GDPR, Ingeus UK and its partners must have a valid lawful reason to process your information. If you want to know what the legal basis is for processing your information, please go to: https://www.ingeus.com/privacy where you can find additional information.

Right to Withdraw Consent

You have the right to withdraw your consent at any time and your Employment Advisor will explain any limitations this may place on the service we can provide. Should you wish to withdraw your consent, please tell your Employment Advisor.

Keeping your information safe

We are committed to taking all reasonable measures to ensure we maintain the confidentiality and security of personal data for which we are responsible, whether electronically or on paper.

Our staff are required to undertake data protection training and are subject to the Common Law Duty of Confidence which requires us to protect your information, inform you of how your information will be used, and to allow you in most cases to decide if and how your information can be shared.

Your rights in connection with Personal Information

You have a number of rights with regard to your personal data, including the right to:

• be informed of why and how we process your data.
• request a copy of the information we hold on you.
• have any incorrect information updated and put right;
• deletion of information, once we have no legal right to hold it.
• restrict processing in certain circumstances.
• object to unwarranted processing.

Information Requests

If you have any questions in relation to your rights, or if you would like to receive a copy of your records, correct or request erasure of your personal information, or object to the processing of your personal data, please contact the Data Protection Officer.

To make a request for information, erasure or if you’d like to object to the processing:

• You can tell your Employment Advisor who will start the process for you.
• If you would like to request information, then we suggest you write to the following address:
  The Data Protection Officer
  Ingeus UK Ltd
  Second Floor,
  Royal Pharmaceutical Building,
  London, 
  E1W 1AW
  
  
• You may also email DataProtectionOfficer@ingeus.co.uk
• If you would like to request any kind of erasure of information or you wish to object to processing, you can email DataProtectionOfficer@ingeus.co.uk

Please note: Your request will need to include sufficient information to enable us to correctly identify your records (e.g. full name, address and date of birth). A form of photo Identification will also need to be provided to ensure your request is legitimate.

Complaints and Disputes

If you raise a query or complaint in relation to your data rights, we will endeavour to respond as soon as possible. If you have requested information from us, we endeavour to provide it within 30 days.

If you are still not satisfied with how Ingeus is processing your information, you can write to the Information Commissioner’s Office at:

Information Commissioners Office,
Wycliffe House,
Water Lane
Wilmslow,
Cheshire,
SK9 5AF

Or use the complaints link on their website. It can be found on the Home page at www.ico.org.uk

Review of this privacy notice

This privacy notice will be reviewed as required, but at least annually, to ensure we keep you up to date about what we are doing with your personal information and any changes in processing.