Privacy Statement

1. Who is the data controller for the information we collect

This Privacy Notice is provided to meet the requirements of the UK General Data Protection Regulation (GDPR) and the Data Protection Act 2018 (DPA) to explain how we process your personal data in delivering Well Wave Services.
Leeds City Council is the data controller for the purposes of the Data Protection Act 2018 and other regulations including the UK General Data Protection Regulation, which means it determines what your data is used for and why it is collected. The purpose of this privacy notice is to tell you about what information we collect about you when you use our service, how we use that information and who we may share it with. The contact details of the data controller are Leeds City Council, Merrion House, 110 Merrion Way, Leeds, LS2 8BB.

2. The data we will collect

To deliver the Well Wave Service we will process data on

  • Name (if provided)
  • Email Address

3. How do we collect information about you

We collect information about you from you directly (e.g. by asking you to complete one of our forms. This can be done online, via the telephone, through our contact centre or face-to-face).

4. Why we process your data

We use your information to:

  • To reply to your query and signpost you to our service map to find a relevant Well Wave point or to signpost you to other services.

All the data collected will be treated in strict confidence and in accordance with the requirements of the Data Protection Act 2018 and UK General Data Protection Regulation (UK GDPR). The data provided by you will only be used for the purpose(s) specified.

5. Lawful basis for processing

We will process your data in accordance with UK GDPR Article 6(1). The processing shall be lawful only if and to the extent that the following applies:

Article 6(1)(a) - the data subject has given consent to the processing of his or her personal data for one or more specific purposes;

6. Withdrawing your consent

You can withdraw consent via Well Wave on the contact form or by contact us via Phone: 0113 378 3085

Email: wellwave@leeds.gov.uk.

7. Data retention, storage and destruction

Our data retention policies and procedures are designed to help ensure that we comply with our legal obligations in relation to the retention. This means that your information will be kept for 1 years after we cease to provide a service to you unless the law says that we need to hold it for longer or if there is a business requirement to do so. After this, your information will be deleted or archived.

8. Who can we share your data with

We share your data with agencies shown below as follows:

  • Well Wave who will use this information to reply to your query and signpost you to other services if required
  • Well Wave who administers the scheme will receive your name if provided and email address.

In addition, we will share your personal data:

  • where such disclosure is necessary for compliance with a legal obligation to which we are subject;
  • in order to protect your vital interests or the vital interests of another natural person;
  • for the purposes of security and prevention of fraud and other criminal activity;
  • where such disclosure is necessary for the establishment, exercise, or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure.

9. Automated decision making

Your data will not be used for any automated decision making, including profiling.

10. Your rights

The following rights under data protection law are applicable for this processing:

  • the right to access – you can ask for copies of your personal data
  • the right to rectification – you can ask us to rectify inaccurate personal data and to complete incomplete personal data
  • the right to erasure - where you can ask us to erase your personal data
  • the right to data portability (where you can ask that we transfer your personal data to another organisation or to you)
  • the right to object to processing (where you can object to the processing of your personal data)
  • the right to complain to a supervisory authority – you can complain about our processing of your personal data
  • the right to withdraw consent (to the extent that the legal basis of our processing of your personal data is consent), you can withdraw that consent

These rights are subject to certain limitations and exceptions. You can learn more about your rights through the ‘Your individual rights page on the right, and the Information Commissioner's Office external link.

You may exercise any of the above rights in relation to your personal data by writing to us, using the contact details provided below.

11. When your data gets sent to other countries

The information you provide will not be transferred to another country outside of the UK.

12. Contact us

Any queries in relation to this Privacy Notice should be forwarded to:

Name: Public Health (Sexual Health), Health Improvement Specialists

Phone: 0113 378 3085

Email: wellwave@leeds.gov.uk

13. Data Protection Officer

Aaron Linden

Head of Information Management and Governance - Data Protection Officer

Leeds City Council

Merrion House

110 Merrion Way

Leeds

LS2 8BB

DPO@leeds.gov.uk

The Council privacy notice is available to view Privacy Notice for Leeds City Council | Leeds.gov.uk

14. Complaints

If you are unhappy with the way in which your information has been handled you should speak with the specific service in the first instance. Any data protection complaints about how the council has processed your personal data, will be handled in accordance with the council’s Complaints Policy. You can find out how to submit a complaint by visiting this link. If we cannot resolve your complaint, you can refer to the Information Commissioner if you consider that there has been an infringement of data protection legislation. Further details can be found on the Information Commissioner’s website.

15. Changes to this notice

We keep our privacy notice under regular review. We will notify you of significant changes to this notice by email or other means as appropriate. This privacy notice was last updated May 2025.