RSMS Ltd. – Public Data Privacy Notice
11 July 2019
What is personal data?
Personal data is information that can be used to identify an individual living person, either through use of a single or combination of data sets. You have the right of control over who uses your personal data, what it is used for, and what the legal basis for this processing is.
Who are we?
RSMS primarily develops Cognitive Behaviour Therapy (CBT) based interventions and also acts as a consultancy firm specialising in criminal justice.
How do we process your personal data?
As a training and education provider, RSMS work with both criminal justice professionals and offenders. As such the data we process and how we process it are clearly defined in to two separate categories, and for the purposes of this notice shall be referred to as such.
For Criminal Justice Staff:
Name: Of the individual making the order booking:
So that we can create a unique account for you and record courses attended and ordered, completion status for those attending the course, and any outcomes achieved.
Contact details: Of the individual making the order:
We require an email address be provided as part of our registration process so as to create a unique record for you, confirm details of your services, send any digital materials to you, and to allow us to communicate with you about the logistics of your services.
You will receive only communications relevant to your services unless you have specifically request to receive other communications.
Company name: If you are ordering training or services on behalf of your employer, we would like to know who you work for. This will allow us to tailor course materials to suit specific organisational requirements, and is necessary for invoicing and payments.
For Offenders: All offender information required for the delivery of intervention hubs is anonymous and all offender services are delivered on that basis. Randomly-generated usernames are provided to criminal justice staff so they may work with pseudonymised data; RSMS have no access to this at any time and are therefore unable to associate an identity with the limited information we hold.
What is the legal basis for processing your personal data?
Typically we operate on the legal basis of contractual necessity. The minimal data we process about you is specifically for the purpose of providing the services and platforms agreed. We will have been instructed directly by you or on your behalf by your employer to provide you with these services. The information collected will purely be for the basis of providing you with information about your service(s), delivering the content of your service, and providing and supporting resources.
Sharing your personal data?
RSMS believe that if you wanted a third party to process your data, you would provide it to them directly, therefore we do not share your personal data with any third parties.
How long do we keep your personal data for?
Once you have registered with us, we will automatically delete your data after an inactive period of 5 years from the point of data collection; inactivity being defined by never engaging with us to book or utilise further services. You are of course free to remove your details or restrict processing of your personal data at any time – please see the section below ‘How to access and control your personal data’. You will receive notification via email from us informing you that we have stopped processing of and removed your data for your own records.
How to access and control your personal data
Please visit https://www.intervention-consultancy.co.uk/rights to view and exercise your rights around your personal data; how you may submit a Subject Access Request to understand what data we hold on you and how we use it; or to lodge a complaint about our use of your data.
Use of cookies
Please visit https://www.intervention-consultancy.co.uk/cookies to read about the cookies used on our website, their purpose, and how you may manage use of them across various browsers (including blocking them altogether).
Data Protection Officer
For any questions or complaints about the processing of your personal data by RSMS or to make a subject access request, please send details of your enquiry to our Data Protection Officer, Ryan Farmer at dpo@redsnappergroup.co.uk.
Digital Intervention and the Intervention Hub are part of the Red Snapper Group. For more information on RSG please visit www.redsnappergroup.co.uk