First Steps Derbyshire collect and process personal data for a number of website analysis purposes, each justified by a GDPR lawful basis for processing.

The following sections explain in more detail what data we collect, why we collect it, and what we do with it.

Website statistics

This website is hosted by Raising IT, which collects information such as your IP address, the link from which you were redirected to our website, browser information such as brand and version, geographical location, device type, pages visited alongside the date and time you have accessed the website. 

We believe that our GDPR lawful basis for processing such personal data is one of legitimate interest.

Cookies

'Cookies' are small data files that are saved on your device when you visit our websites. We use them to remember your preferences between visits, implement 'shopping cart' functionality, and allow us to track website performance, usage, and the effectiveness of our marketing campaigns. The vast majority of websites nowadays use 'cookies' for these purposes.

The first time you visit one of our websites, we warn you of this and seek your explicit consent.

If you don't like the idea of 'cookies', then you can use your browser in 'private mode' to temporarily prevent them being stored, or change your browser settings to permanently disable them. To find out how to do this, please see the user guide for your specific browser. Be aware, however, that if you disable 'cookies', our websites might not function as intended.

We believe that our GDPR lawful basis for processing such personal data is one of consent.

Google Analytics

When someone visits our websites we use a third-party service, Google Analytics, to collect aggregated visitor information and behaviour patterns. We do this so we can can broadly see the types of people that visit our websites, the technology they use to access them, how they find us, and what they do once they are there. We use this information in order to make the websites more useful, relevant, easier to find, and simpler to use. This is a very common industry practice across a huge number of the websites that you are likely to already visit. The tracking information is only processed in a way which does not personally identify anyone.

For further details, please see the Google Analytics privacy policy.

We use MailChimp and LinkedIn in order to communicate with both service users and professionals. This is a common practice amongst the industry.

We believe that our GDPR lawful basis for processing such personal data is one of legitimate interest.

Beacons

'Beacons' are file requests that are embedded within our emails and websites that are used in conjunction with 'cookies' to track website usage and the effectiveness of our marketing campaigns. This is a very common industry practice.

If you don't like the idea of beacons, then you can disable those within emails by instructing your email program to not load externally hosted images, or to not display emails sent in HTML format.

We believe that our GDPR lawful basis for processing such personal data is one of legitimate interest.

Our newsletter

Should you opt in to receiving our newsletters, you agree to being contacted by First Steps Derbyshire regarding matters relating to eating disorders. You may unsubscribe from our newsletter or any updates from First Steps Derbyshire at any time. Your email address will be shared with MailChimp, Inc but will not be used for marketing purposes from third parties including MailChimp, Inc.

We believe that our GDPR lawful basis for processing such personal data is one of legitimate interest.

Service Provision

Our websites also collect personal data in order to provide you with services that you explicitly request from us. For example, should you use our self-referral programme, we will collect your personal details and process these in accordance with legislation. First Steps Derbyshire will use the information you provide to us in the form, so as to contact you to begin the referral process. If you submit this form, we will collect personal informaiton including your name, email address, date of birth, gender, student status (if applicable), mobile telephone number, your GP's information and an account of the difficulties with eating, equality monitoring data and emergency contact information. We require similar information from professionals referring people with eating disorders and difficulties to us.

This information is then processed into our database for the purposes of ensuring that First Steps can provide a service to service users (you) and so that outcomes can be anonymised for our commissioning services, such as NHS England.

We believe that our GDPR lawful basis for processing such personal data is one of consent.

Further Guidance

First Steps Derbyshire will not pass on your personal information to any outside organisation except for those listed above as a result of using this website.

First Steps Derbyshire will always endeavour to offer completely private services to its service users. We therefore recommend discussing with us in a session or by contacting us to discuss what happens to that data, how it is collected, and how it is safely disposed after a period of seven years.

Your Rights

Under GDPR, you have rights to access, amend, or delete any personal data that we, or our third-party data processors, hold about you.

If you'd like to do this, please contact us.