Skip Navigation LinksMerton Council ❮ Legal ❮ Privacy ❮ 

Lateral flow test registration privacy notice

Why we collect your personal data

You have voluntarily provided your information to the Council when you registered to have a Lateral Flow Test (LFT). You gave your consent to the Council to use your personal data in order for you to have a LFT at a pharmacy or other testing site and to assist in the control of the coronavirus pandemic.

The lawful basis for processing your personal data and special category data is consent (Articles 6(1)(1)(a) and 9(2)(a) GDPR).

You may withdraw consent at any time. If you withdraw consent all processing of your data up until the point of withdrawal is lawful and no further processing will be carried out.

What data we collect from you

  • Date of Birth
  • Name
  • Gender
  • Address
  • Occupation - keyworker, voluntary and community sector staff member, volunteer or a carer
  • Email address
  • Mobile number
  • Landline number
  • NHS number

We also collect Special Category data including:

  • Ethnic group and background
  • Information relating to health - where the LFT will be taken; date and time of where the test will be taken; and confirmation that you are not displaying coronavirus symptoms

Data about you from other sources

The LFT is administered by yourself and will be supervised by a staff member at a pharmacy or other testing site, it will be confirmed that the test has been completed. The result of the test is confidential and will not be shared with the Council.

Who we share your data with

Healthcare Providers and staff who supervise the LFT

Department of Heath and Social Care

NHS Test and Trace 

How long we keep your data for

Your personal data will be retained for up to 8 years, in accordance with the Records Management Code of Practice for Health and Social Care 2016, but will be disposed of sooner if it's appropriate to do so.

Your data protection rights

  • Access – you can request copies of any of your personal information
  • Rectification – you can ask any incorrect information to be corrected.
  • Deletion – you can ask for your personal information to be deleted. This can be refused if there is a lawful reason to keep the information.
  • Portability – you can ask for your personal data to be transferred to different organisations or to you.
  • Right to object or restrict processing – you have the right to object to how your data is being used and how it is going to be used in the future.
  • Right to prevent automatic decisions – you have the right to challenge a decision that affects you that has been made automatically without human intervention, for example an online form with an instant decision

Contact

Automatic decision making

We do not carry out any automatic decision making