Skip to main content

{{ root_page.title }}

Privacy notice for Family Hub Service (RBWM)


This privacy notice explains what types of personal data we may hold about you, how we collect it, how we use it and who we may share information with. We are required to give you this information under data protection law. This privacy notice should be read in conjunction with the corporate privacy notice.

Achieving for Children is registered as a controller with the Information Commissioner’s Office (ICO) (registration number ZA045069).

The Family Hub Service in Windsor and Maidenhead provides a whole family approach to supporting children, young people and families in Windsor and Maidenhead. The service is made up of two area hubs (Maidenhead and Windsor Areas) with staff also located outside of the area hubs and working across the borough. Within the Family Hub Service are Family Coaches, Family Hub Workers, Youth Workers, Parenting Workers and Substance Misuse Workers who work with children and families on a one to one basis or within groups settings.  More information about the family hub offer is published on our AfCinfo website

Families Together is a team within the Family Hub Service that provides intensive support to children and their families to ensure that they are able to stay together wherever it is safe to do so. More information about the Families Together Offer is published on our AfCinfo website

Personal data we collect

We collect the personal information below when you are referred to the Family Hub Service and during the course of working you and your family:

  • Names of all family members
  • Addresses of all family members
  • Phone number and email address of parents/carers
  • Date of birth 
  • Schools or colleges attended 
  • Housing status
  • Marital status
  • Employment status
  • Sex
  • Financial information
  • Gender
  • Children's hobbies, likes and dislikes, how you feel about things and what makes you happy or sad
  • Ethnicity and cultural background
  • Religious beliefs
  • Information about family members health
  • School attendance and exclusion information 

How we use your personal data

We use information the information we collect about you to: 

  • carry out our statutory functions and duties including safeguarding, child protection, children and young people at risk of offending and corporate parenting. 
  • carry out our statutory functions and duties including services to children and young people in care and care leavers
  • provide you and your family with early help, advice and appropriate services.
  • provide a coordinated approach to safeguarding and promoting the welfare of children to ensure you receive the right support at the right time.
  • inform targeted support and services to families, children and young people who are most in need and at risk of harm
  • support you to access relevant support and advice, services and groups, including supporting parents with parenting and with their drug and alcohol use
  • help us teach, train and monitor our staff to develop good practice in the services received.
  • evaluate and quality assure the services we provide, and improve our policies on children’s social care
  • to audit and improve our services to ensure they meet you and your child’s needs. 
  • assess performance and set targets for service improvement
  • account for our decisions and investigate complaints

Legal basis for processing your personal data

The legal basis we rely on for processing you and your child’s personal data are public task or to comply with a legal obligation. If we need to collect special category data, we rely upon reasons of substantial public interest (safeguarding of children and of individuals at risk, and equality of opportunity or treatment), for the provision of social care, or the management of social care systems or services, for social security or social protection law, and for the establishment, exercise or defence of legal claims whenever courts are acting in their judicial capacity.

These legal basis are underpinned by acts of legislation that dictate what actions can and should be taken by local authorities, including:

  • Children’s Act 1989
  • Children’s Act 2004
  • Human Rights Act 1998
  • Equalities Act 2010

How long your personal data will be kept

  • Adoption records: date of adoption order plus 100 years
  • Looked after children: date of birth of child plus 75 years
  • Children with disabilities: Until the person reaches the age of 25 years or 2 years from date of last contact, whichever is the longer
  • Child protection records: date of birth of individual plus 40 years
  • Child in need records: date of birth of child plus 25 years

Keeping your information secure

We have appropriate security measures in place to prevent personal information from being accidentally lost or used or accessed in an unauthorised way. We limit access to your personal information to those who have a genuine business need to know it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.

We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.

Who we share your personal information with

We will only share information with these organisations where it is appropriate and legal to do so. Where this is necessary, we are required to comply with all aspects of the Data Protection Act 2018.

  • Children’s Social Care Services
  • Thames Valley Police
  • Health services
  • Probation services
  • Education and schools
  • Housing services
  • Child and Adolescent Mental Health Services (CAMHS)
  • Getting Help Team
  • Youth Offending services
  • Voluntary organisations
  • Department for Education
  • Ofsted

Your rights and access to information 

Under data protection legislation you have the right to request access to the information that we hold about you. To request a copy of your data, please read the Individual Rights Requests page on this website and then submit your request using your preferred method of contact. 

You also have the right to:

  • object to processing of personal data that is likely to cause, or is causing, damage or distress
  • have inaccurate personal data rectified, blocked, erased or destroyed
  • prevent processing for the purpose of direct marketing
  • object to decisions being taken by automated means
  • In certain circumstances have inaccurate personal data rectified, blocked, erased or destroyed; and 
  • A right to seek redress, either through the ICO, or through the courts

If you have any questions or concerns about the way we process personal data, or would like to discuss anything in this privacy notice, please contact our Data Protection Officer: [email protected]

If you want to make a complaint about how we handle your personal data, we ask that you give our Data Protection Officer the opportunity to respond in the first instance but you are not obliged to do this. You can make a complaint directly to the Information Commissioner’s Office at