Privacy Notice for Project 6 Services

Project 6 is committed to protecting and respecting your privacy and the personal information we hold about you.

This privacy notice sets out how we use and protect any of your personal data we collect when we provide you with a service.

Policy reviewed: 02/06/26

Who we are

We are Project 6, a service that supports people with drug, alcohol, and related issues.

We are responsible for your information (this means we are the data controller).

Contact details:

  • Airedale Voluntary Drug and Alcohol Agency, trading as Project 6
  • 11–19 Temple Street, Keighley, BD21 2AD
  • 01535 610180
  • info@project6.org.uk

For data protection questions:

What information we collect

When you use our services, we may collect:

Basic details

  • Your name, date of birth, and contact details
  • Your NHS number

About your support

  • Appointments and attendance
  • Your history with our services
  • Referrals made to or from other services

About your circumstances

  • Housing and employment status
  • Education or training

Sensitive information (needs extra protection)

We may also collect:

  • Physical and mental health information
  • Substance use information
  • Gender, ethnicity, religion, or sexual orientation
  • Criminal offence information where relevant

We only collect what we need to support you.

How we collect your information

We get information:

  • Directly from you
  • From professionals referring you (e.g. GP, social worker)
  • From partner organisations we work with

We may collect this:

  • In person
  • By phone, email, or forms

Why we use your information

We use your information to:

  • Provide you with support and services
  • Arrange and manage appointments
  • Keep records of your care and progress
  • Make referrals on your behalf
  • Help keep you and others safe
  • Work with other services supporting you
  • Improve our services

We may also contact you about:

  • Your appointments
  • Changes to services you use

We will not send unwanted marketing.

Our legal reasons (lawful bases)

Data protection law says we must have a valid reason to use your data.

We rely on:

  • Public task – to provide services in the public interest
  • Legitimate interests – to provide, deliver and improve our services
  • Legal obligation – when the law requires us to share information
  • Vital interests – in emergencies to protect life

Using sensitive information

Because we use health and similar data, we also rely on:

  • Health and social care purposes
  • Research and service improvement (using anonymised data where possible)

We only use this information when it is necessary and we protect it carefully.

Criminal offence data

Sometimes we process information about criminal offences.

We do this only where necessary, for example:

  • Working with probation or prison services
  • Keeping people safe

Sharing your information

We only share your information when necessary.

We may share with:

  • NHS and healthcare providers
  • Social services and local authorities
  • Police or criminal justice services
  • Housing and support services
  • Partner organisations

When we may share without telling you first

There are rare situations where we may need to share information without informing you beforehand, for example:

  • If someone is at risk of harm
  • To protect children or vulnerable people
  • To prevent crime
  • Where the law requires us to do so

We only share the minimum information needed.

Keeping your information safe

We protect your data by:

  • Using secure systems
  • Limiting access to staff who need it
  • Training staff in data protection
  • Monitoring and managing incidents

If there is a serious data breach affecting you, we will:

  • Tell you promptly
  • Report it to the ICO (data protection regulator)

How long we keep your information

We keep your data only as long as necessary:

  • Adults (18+): usually 6 years after your last contact
  • Under 18s: until age 25

Sometimes we may keep information longer, for example:

  • Safeguarding concerns
  • Legal requirements
  • Ongoing investigations

After this, your data is securely destroyed.

Your rights

You have rights over your information, including:

  • Access – see the information we hold about you
  • Correction – fix incorrect details
  • Erasure – ask us to delete your data (in some cases)
  • Restriction – limit how we use your data
  • Objection – object to how we use your data
  • Data portability – receive your data in a usable format

Some rights may not apply in all situations, but we will always explain our decision.

Important to know

  • If we delete your data, we may not be able to continue your support safely
  • Please tell us if your details change so we can keep them accurate

International data transfers

We do not usually transfer your data outside the UK.

If we ever do, we will ensure it is protected properly.

How to contact us

To ask about your data or exercise your rights:

Or speak to a member of staff.

12. How to complain

If you are not happy with how we use your data:

  1. Contact us first – we will try to resolve it, complaints@project6.org.uk.
  2. You can also contact the Information Commissioner’s Office (ICO):