Why we collect your personal data
You have voluntarily provided your information to the Council when you registered to have a Lateral Flow Test (LFT). You gave your consent to the Council to use your personal data in order for you to have a LFT at a pharmacy or other testing site and to assist in the control of the coronavirus pandemic.
The lawful basis for processing your personal data and special category data is consent (Articles 6(1)(1)(a) and 9(2)(a) GDPR).
You may withdraw consent at any time. If you withdraw consent all processing of your data up until the point of withdrawal is lawful and no further processing will be carried out.
What data we collect from you
- Date of Birth
- Occupation - keyworker, voluntary and community sector staff member, volunteer or a carer
- Email address
- Mobile number
- Landline number
- NHS number
We also collect Special Category data including:
- Ethnic group and background
- Information relating to health - where the LFT will be taken; date and time of where the test will be taken; and confirmation that you are not displaying coronavirus symptoms
Data about you from other sources
The LFT is administered by yourself and will be supervised by a staff member at a pharmacy or other testing site, it will be confirmed that the test has been completed. The result of the test is confidential and will not be shared with the Council.
Who we share your data with
Healthcare Providers and staff who supervise the LFT
Department of Heath and Social Care
NHS Test and Trace
How long we keep your data for
Your personal data will be retained for up to 8 years, in accordance with the Records Management Code of Practice for Health and Social Care 2016, but will be disposed of sooner if it's appropriate to do so.
Your data protection rights
- Access – you can request copies of any of your personal information
- Rectification – you can ask any incorrect information to be corrected.
- Deletion – you can ask for your personal information to be deleted. This can be refused if there is a lawful reason to keep the information.
- Portability – you can ask for your personal data to be transferred to different organisations or to you.
- Right to object or restrict processing – you have the right to object to how your data is being used and how it is going to be used in the future.
- Right to prevent automatic decisions – you have the right to challenge a decision that affects you that has been made automatically without human intervention, for example an online form with an instant decision
- If you have any requests, queries, concerns or complaints on how we handle your personal data contact DPO@merton.gov.uk
- If you are not satisfied with the way your personal data has been handled by us you can contact the Information Commissioner at https://ico.org.uk/make-a-complaint/your-personal-information-concerns/
Automatic decision making
We do not carry out any automatic decision making