Test and trace support payments privacy notice

1. Council contact details

1.1. West Northamptonshire Council

Registered Office:

One Angel Square
Angel Street
Northampton
NN1 1ED

1.2. For more information regarding the Test and Trace Support Payment Scheme please visit the GOV.UK website.

2. Information that we hold

2.1. We collect and process the personal data that you provide to us when completing your application for a self-isolation support payment, which may include:

full name
full residential address
contact information (eg email address, mobile telephone number, home telephone number)
proxy applicant details (as above where you may nominate someone else to complete this application on your behalf)
employer name and address
NHS notification number (the unique reference you will be given by NHS Test and Trace Service to self-isolate) for you or your child
bank account details
your National Insurance Number
proof of self-employment eg recent business bank statement (within the last two months), most recent set of accounts or evidence of self-assessment
financial Information such as household income and expenditure
health data

3. How the information is obtained and why

3.1. Most of the personal information we process is provided to us directly by you for one of the following reasons:

to assess your eligibility for a Track and Trace Support Payment

We also receive personal information from the following sources in the following scenarios:

from the NHS Test and Trace Service to confirm that you have either tested positive for COVID-19 or you have been in close contact with someone who has tested positive for COVID-19
from your nominated representative in relation to your application for a self-isolation payment

3.2. There are a number of reasons why we need to collect and use your personal information.

For the purposes of dealing with Track and Trace Support Payments our lawful basis for processing is based on the Council’s obligations under the following legislation:

Public Health, England. The Health Protection (Coronavirus, Restrictions) (Self-Isolation) (England) Regulations 2020
COPI Notice: Covid-19 – Notice under Regulation 3(4) of the Health Service Control of Patient Information Regulations 2002

Where we use personal information to confirm that someone is eligible for a self-isolation payment, the articles of the UK GDPR that apply are:

GDPR Article 6(1)(e) – processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
GDPR Article 9(2)(b) – processing is necessary for the purpose of carrying out the obligations of the controller or of the data subject in the field of social security

4. What we do with the information

4.1. What we use your personal data for

We use your data to:

assess your entitlement to Test and Trace Support Payments, both mandatory and discretionary
award or process the payment of any entitlement
carry out checks with the NHS Test and Trace Service and the Department for Work and Pensions (DWP), for verification purposes
carry out checks with Her Majesty’s Revenue and Customs (HMRC), for tax and National Insurance purposes
potentially carry out checks with your employer to validate your application

4.2. We may share your data with the following organisations:

HMRC – for tax and National Insurance purposes
your employer – for verification checks
education or care providers – for verification checks
DWP
National Audit Office
Cabinet Office
Police or other government agencies for the prevention and/or detection of crime and/or to protect the public purse or where the law permits

5. How long we keep your information for and how we securely dispose of it after use

5.1. We keep your personal information for the purpose of Test and Trace Support Payments in line with the council’s retention schedules.

We will only keep your personal data for as long as it is needed for the purposes of the COVID-19 emergency, and for audit and payment purposes.

5.2 We will securely dispose of your information in line with the council's retention schedules.

6. How we store your information

6.1. Your information is securely stored in electronic format on the council’s systems.

7. Your data protection rights

7.1. The law gives you a number of rights to control what personal information is used by us and how we can use it. Please see section 15 of the council’s Corporate Privacy Notice for further information.

7.2 Please be aware that your rights may differ depending on the lawful basis for processing your personal data.

8. Who to contact

8.1. If you would like further information about how we use your personal information, or you wish to exercise one of your data rights or you wish to complain about the use of your personal information please contact the Data Protection Officer.

8.2. If you are still dissatisfied with how we have used your data once you have made a complaint through the council’s Data Protection Officer you have the right to complain to the Information Commissioner’s Office.

The ICO’s address:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113

9 Changes to this privacy notice

9.1 Privacy notices are live documents, which will be updated or revised in line with legislation.

Last updated 06 July 2023