Privacy Policy
Privacy Notice for the Greater Manchester Victims’ Service website (Victims’ Gateway) (August 2024 onwards)
If user data only stored on the Greater Manchester Victims’ Service website (personal data retained solely by GMCA):
| Data controller | Greater Manchester Combined Authority, Churchgate House, 56 Oxford Street, Manchester M1 6EU |
|---|---|
| ICO registration reference | Z2751067 |
| Customer enquiries contact details | officeofdpo@greatermanchester-ca.gov.uk |
If user data shared with the Greater Manchester Victims’ Service (GMVS) case management system (personal data held on GMVS website hosted by GMCA and shared with Catch22 for them to use for their own purposes):
| Data controller | GMVS (Catch22) |
|---|---|
| ICO registration reference | Z1473239 |
| Customer enquiries contact details | Dpo@catch-22.org.uk |
1. Who we are
The Greater Manchester Combined Authority (GMCA) is made up of the ten Greater Manchester councils, the Greater Manchester Fire and Rescue Service, and the Mayor of Greater Manchester. We work with other local services, businesses, communities, and other partners to improve the city-region.
Catch22 provides needs-focused services to empower victims and witnesses to cope and recover from the impact of crime and anti-social behaviour, by providing a range of support including emotional and practical guidance, advocacy, and advice. Victim services | Catch22 (catch-22.org.uk)
2. Summary of the use of the service
The GMVS website allows users to create an account and complete a self-referral to request support from the GMVS. Referrals are then managed by Catch22.
The website aims to empower victims of crime to be able to access information and request support, in a way that suits them.
3. What information we will collect from you (the purpose and legal basis for processing information)
To allow you to create an account on the GMVS website, you will be asked to provide:
- Your email address
- A password
- A user name
If you wish to request support from the GMVS via one of our referral forms, you will be asked to complete the following information to allow a Victims Care Co-ordinator to create a case file for you and make contact with you to start your support journey:
Fields marked with an asterisk are required. We’re kept these to a minimum to make the process as straightforward as possible.
All referral types collect the following:
- User consent – disclaimer* (tick box to confirm you consent to sharing information with GMVS)
- Surname*
- First Name*
- Known as preferred name
- Greater Manchester borough*
- Title
- Address and postcode
- Email address
- Phone number
- Preferred contact method*
- Preferred contact time*
- Date of birth*
- Gender
- Ethnicity
- Religion
- Disability
- First language spoken
- English speaking (Yes/No)
- Crime type*
- Description of incident*
- Crime reference number (if known)
- Date crime committed*
- Date crime reported to police (if applicable)
Partner referral additionally collects:
- Referring partner first name, last name and email*
- Relationship with person*
- Has the person given consent for this referral*
Family or friend referral additionally collects:
- Referring person first name, last name and email*
- Relationship with person*
- Has the person given consent for this referral?*
Your profile additionally holds
- Telephone number
- Pronouns
- Marital status
- Sexual orientation
- Disabilities (learning, mental, mobility, sensory, other)
The legal basis for collecting and using your personal data will be:
- Article 6, 1(a) – you have given consent to the processing of your personal data for one or more specific purposes.
The legal basis for collecting and using special category data (information relating to health, ethnicity and religion) will be:
- Article 9, 2(a) – you have given explicit consent to the processing of your personal data for one or more specific purposes.
Withdrawal of consent
At any point, you can withdraw your consent. Please contact us using the details below and we will take appropriate action:
GMCA: officeofdpo@greatermanchester-ca.gov.uk
Catch22: dpo@catch-22.org.uk
Please keep a copy of this privacy notice so you have access to this information in the future.
4. How we ensure the security of your data
We are committed to providing the appropriate levels of security to the information we collect and use reasonable measures to prevent unauthorised access to that information. We are required to demonstrate that our solutions meet the required level of personal, procedural, policy, data and technical security. We will only process personal information for the purposes it has been collected or subsequently authorised.
5. Information retention
From creation of your account, the GMCA will keep your information for 12 months after your last use of the GMVS website.
User accounts will be disabled if they are dormant for 180 days / 6 months, and then deleted after a further 6 months if the account is not accessed. An account holder can also contact the GMCA at any time to request that their account be deleted.
Any data shared with the Catch22 will be held on Catch22’s internal case management system in line with Catch22’s retention schedule. This is typically for 6 years (informed by the Limitations Act 1980).
6. Transferring data
All data collected as part of the GMVS will remain in UK.
7. Data sharing
If you give consent via any of our referral forms, data will be shared from the GMVS website to Catch22’s case management system.
No data will be shared with Catch22 unless you have expressly given consent.
Any findings/reports produced to assess the performance of the GMVS website would be anonymised.
8. What rights do individuals have?
We must comply with the UK General Data Protection Regulations (UK GDPR) and the Data Protection Act 2018.
Under data protection law, your rights include:
- Your right of access – You have the right to ask us for copies of your personal information.
- Your right to rectification – You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
- Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
- Your right to restriction of processing – You have the right to ask us to restrict the processing of your information in certain circumstances.
- Your right to object to processing – You have the right to object to the processing of your personal data in certain circumstances.
- Your right to data portability – You have the right to ask that we transfer the information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
If you wish to make a request, please contact us at:
Email the GMCA: officeofdpo@greatermanchester-ca.gov.uk
Post the GMCA: Office of the DPO of the GMCA, Churchgate House, 56 Oxford Street, Manchester, M1 6EU
Email Catch22: dpo@catch-22.org.uk
Post Catch22: Data Protection Officer, 27 Pear Tree Street, London, EC1V 3AG
9. How can I make a complaint?
If you are not satisfied with how we are using the information we hold about you, please contact our Data Protection Officers by emailing:
The GMCA: officeofdpo@greatermanchester-ca.gov.uk
Catch22: dpo@catch-22.org.uk
If you are still not satisfied with the GMCA’s or Catch22’s response to any request to exercise your individual rights or if you believe that the GMCA or Catch22 is not processing your personal data in accordance with the law, you can contact the Information Commissioners’ Office:
Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF
Telephone: 0303 123 1113