Privacy Policy for North Edinburgh Drug and Alcohol Centre

Updated: July 2024

1. Introduction

North Edinburgh Drug and Alcohol Centre (NEDAC) is committed to protecting the privacy and confidentiality of individuals who access our services. This Privacy Notice explains how we collect, use, store, and share your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What Information We Collect

We collect and process the following types of personal data:

• Personal Details – Name, date of birth, address, contact details, and emergency contacts.
• Medical Information – Health records, medication details, treatment history, referrals, and discharge notes.
• Support Needs – Information on substance use, mental health, housing, financial support, and social circumstances.
• Appointments and Attendance Records – Details of appointments, case management sessions, and engagement with our services.
• Safeguarding and Risk Information – If relevant, information required for legal or safeguarding purposes.

3. Why We Collect Your Data

Your personal data is collected and used to:

• Provide personalised support and treatment plans.
• Monitor progress and engagement with services.
• Work with healthcare and support professionals to ensure continuity of care.
• Comply with legal, regulatory, and safeguarding responsibilities.
• Improve our services through anonymised data analysis and reporting.

4. How We Use and Share Your Data

We will only share your information where necessary, relevant, and lawful. This may include sharing with:

• Healthcare Providers – NHS services, GPs, mental health teams, and addiction specialists.
• Social Services & Support Agencies – Housing, financial support, and rehabilitation services.
• Legal & Safeguarding Authorities – Police, probation services, and child/adult safeguarding teams (only when required by law).
• Internal Staff – Only authorised personnel will access your data for service delivery and case management.

All data transfers are carried out securely, using encrypted systems and NHS-approved communication channels where applicable.

5. How Long We Keep Your Data

We will only keep your data for as long as necessary to provide services and comply with legal obligations. Retention periods vary depending on the type of information, but we will securely delete or anonymise your data when no longer needed.

6. Your Data Protection Rights

Under UK GDPR, you have the following rights:

• Right to Access – You can request a copy of your data.
• Right to Rectification – You can ask us to correct inaccurate or incomplete data.
• Right to Erasure – You can request the deletion of your data (unless required by law to retain it).
• Right to Restriction – You can ask us to limit how we use your data.
• Right to Object – You can object to data processing in certain circumstances.
• Right to Data Portability – You can request to transfer your data to another organisation.

To exercise these rights or raise concerns, please contact us using the details below.

7. How to Contact Us

If you have any questions about this Privacy Notice or how your data is handled, you can contact our Service Manager:
Email: [stuartanderson@nedac.co.uk]
Phone: [07885613647]
Address: North Edinburgh Drug and Alcohol Centre, [15a Pennywell Court, Edinburgh, EH4 4TZ]

If you are not satisfied with our response, you can also contact the Information Commissioner’s Office (ICO): www.ico.org.uk

8. Updates to This Privacy Notice

We may update this Privacy Notice from time to time to reflect changes in legislation or service provision. The latest version will always be available on our website or upon request.