Privacy notice for the Baby Bundles programme.
Baby Bundles Wales is a Welsh Government programme aimed at supporting families and tackling inequality. The programme will provide a Baby Bundle on a targeted basis to every expectant family living within a core Flying Start area. Midwives will also be able to offer a Baby Bundle to some families who need additional support, but do not reside in Flying Start areas, through Outreach support. The Baby Bundle includes a range of items to help babies and families at an important stage in their lives.
Allied Publicity Services (APS) manages the supply and delivery of Baby Bundles, on behalf of Welsh Government.
As part of this programme, APS will be gathering information through registration forms. APS and its subcontractors will use this information to verify your eligibility for the scheme and to deliver the right type of bundle to you at the right time. The information you provide will also be used for the purpose of monitoring and evaluation of the programme.
The Welsh Government is the data controller for the research and will receive a copy of the data collected by APS for evaluation and research purposes.
Your participation in this programme is completely voluntary.
The contact for this programme is Allied Publicity Services (APS)
E-mail address: Baby.bundles@case-uk.co.uk
Telephone number: 0800 2545324
What personal data do we hold and where do we get this information?
You will complete the registration form with your midwife at your 25-28 week antenatal appointment, should you choose to receive a bundle.
As part of this programme, we will be collecting the following personal information about the expectant parent:
- Name, address, phone number, email and date of birth
- Baby/babies expected due date and number of babies
- Date of birth of last child.
- Customer’s preferred contact method
- Ethnicity and disability status (optional)
- Customer’s secondary nominated contact (if needed)
- Eligibility – either residing in core Flying Start areas or referred through Outreach arrangements
Digital signature (tick box)
What is the lawful basis for using your data?
In our remit as the data controller, the lawful basis for processing information in this data collection is UK GDPR article 6(e) to perform a task in the public interest; that is, exercising our official authority to undertake the core role and functions of the Welsh Government. Some of the data we are collecting are called ‘special category data’ (in this case Ethnicity and Disability) and the lawful basis for processing this information is article 9(j) for Archiving, research and statistics purposes to monitor and target funding and to monitor the performance effectively.
Participation is completely voluntary.
Who do we share your information with?
The contractor, APS, will share your data with Welsh Government for the purpose of monitoring and evaluating the programme. The special category data will be anonymised.
APS will share data with Digital Health and Care Wales (DHCW) for a period of six months to allow the data linking of SAIL databank. SAIL databank will anonymise the data on secure servers for research to improve health wellbeing and services.
How secure is your personal data?
Personal information provided to APS is stored on a secured server and limits access to authorised staff. APS holds cyber essentials plus certification. APS host the software Agility Cloud.
Any data stored by Welsh Government or Digital Health Care Wales is stored on secure servers and limits access to authorised staff.
Any data breaches will be reported to Welsh Government and relevant authorities.
How long do we keep your personal data?
APS will hold personal data during the contract period for up to four years following delivery of the bundle. The four years is needed to ensure that eligibility criteria are met for any parents that may have another child and therefore eligible for another bundle.
APS will provide Welsh Government with a full Customer Data File, (the special category data will be anonymised) on a bi-annual basis for evaluation and research purposes and Welsh Government will keep this data for four years.
Individual rights
Under UK GDPR, you have the right to:
- Access a copy of your data
- Correct inaccurate data
- Object to or restrict processing (in certain cases)
- Request data deletion (in certain cases)
- Complain to the Information Commissioner’s Office (ICO) who is the independent regulator for data protection.
The contact details for the Information Commissioner’s Office are: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Phone: 0303 123 1113. Website: www.ico.org.uk
Further Information
If you have any further questions about how the data provided as part of the Baby Bundles Programme will be used by the Welsh Government or wish to exercise your rights using the UK General Data Protection Regulation, please contact:
E-mail address: babybundles@gov.wales
The Welsh Government’s Data Protection Officer can be contacted at:
Welsh Government, Cathays Park, Cardiff, CF10 3NQ, Email: DataProtectionOfficer@gov.wales.