03000 11 55 55 Cover your tracks Free downloadable resources

Login

Sign Up

After creating an account, you'll be able to track your payment status, track the confirmation.
Username*
Password*
Confirm Password*
First Name*
Last Name*
Email*
Phone*
Contact Address
Country*
* Creating an account means you're okay with our Terms of Service and Privacy Statement.
Please agree to all the terms and conditions before proceeding to the next step

Already a member?

Login

Privacy policy

 Hertfordshire Beacon Victim Care  

Privacy Notice (Joint Notice )  

Last updated: 05 February 2026 

  1. Who we are 

Hertfordshire Office of the Police and Crime Commissioner (OPCC)  

The Hertfordshire Office of the Police and Crime Commissioner (OPCC) is a Data Controller for the Hertfordshire Beacon Victim Care Service. The OPCC commissions the service and is responsible for ensuring that personal data is processed lawfully, fairly and transparently.  

Catch22 Charity Ltd.  

Catch22 Charity Ltd. delivers the Beacon Victim Care Service on behalf of the OPCC.  

Depending on the activity:  

  • Catch22 acts as a Data Controller for personal data it processes to provide direct victim support services; and  
  • Catch22 acts as a Data Processor where it processes personal data strictly on the OPCC’s instructions.  

Joint Data Controllers  

Where the OPCC and Catch22 jointly decide the purposes and means of processing personal data, they act as Joint Data Controllers under Article 26 UK GDPR. A joint controller arrangement is in place.  

In summary:  

  • The OPCC is responsible for commissioning, strategic oversight, and statutory reporting.  
  • Catch22 is responsible for daytoday service delivery and case management.  
  • Individuals may exercise their data protection rights with either organisation.  
  1. What does the Beacon Victim Care Service do? 

Beacon provides free, independent and confidential support to anyone in Hertfordshire affected by crime, regardless of when the crime occurred or whether it was reported to the police.  

Support may include:  

  • Emotional and practical support  
  • Advocacy and liaison with the police and other agencies  
  • Help navigating the criminal justice process  
  • Needs assessments and safety planning  
  • Onward referrals to specialist organisations  
  1. What information we collect 

To provide tailored support, we may collect the following:  

Personal data  

  • Name  
  • Date of birth  
  • Address  
  • Contact details  
  • Crime or incident details  
  • Needs assessment responses  
  • Safe or preferred contact methods  

Special category data  

Where necessary, this may include:  

  • Gender  
  • Ethnicity  
  • Disability or health information  
  • Age  
  • Religion or belief  
  • Sexual orientation  

You are not required to provide special category information. Where collected, it helps ensure services are inclusive, appropriate and safe.  

  

  1. Why we use your information 

We use personal data to:  

  • Contact you and provide support  
  • Assess needs and risks  
  • Record the support you receive  
  • Help you access other relevant services  
  • Meet contractual, safeguarding and statutory reporting obligations   
  1. Lawful basis for processing 

Article 6 UK GDPR  

In most cases, we process personal data under Article 6(1)(e) – Public Task, as the service supports victims of crime under statutory and commissioning duties.  

We may also rely on:  

  • Article 6(1)(a) – Consent, for specific activities such as referrals to external support services  
  • Article 6(1)(b) – Contract, where applicable  

Where consent is relied upon, this will be clearly explained, and consent can be withdrawn at any time.   

Special category data (Article 9 UK GDPR)  

We process special category data under one or more of the following conditions:  

  • Article 9(2)(a) – Explicit consent (where clearly explained)  
  • Article 9(2)(g) – Substantial public interest  
  • Article 9(2)(h) – Provision of health or social care or support  

We may also process offender-related information provided by you under Schedule 1, Part 2, Paragraph 14 of the Data Protection Act 2018 for the provision of confidential counselling and support.  

  1. Where your information comes from 

Most information is provided directly by you.  

We may also receive referrals from:  

  • Hertfordshire Constabulary (including Athena, officer referrals, or secure referral spreadsheets)  
  • Report Fraud  
  • NHS or safeguarding partners  
  • Other agencies, where appropriate and lawful  
  1. Who we share your information with 

We only share your information:  

  • With your consent, for referrals to partner support services; or  
  • Where required by law, including safeguarding concerns, risk of serious harm, or compliance with court or statutory obligations.  

Where safeguarding or legal concerns arise, information may be shared with Hertfordshire Constabulary, which acts as a separate Data Controller in these circumstances.  

Potential recipients may include:  

  • Social care services  
  • Police or emergency services  
  • Specialist support organisations   

Data processing partners  

The OPCC and Catch22 use contracted IT providers, including Connektivity (case management system), under strict data processing agreements to ensure security and confidentiality.  

  1. How long we keep your information 

We retain personal data:  

  • While your case is open; and  
  • For up to six years after support ends.  

This supports continuity of care, contractual compliance and statutory reporting. Retention periods align with OPCC retention schedules and are reviewed regularly.  

In some circumstances, legal or safeguarding requirements may require longer retention.  

 

  1. Accuracy of your information 

If you believe information we hold about you is inaccurate or incomplete, please contact us. We will correct it where appropriate or record your concerns if changes cannot be made.  

  1. Your data protection rights 

Under UK GDPR, you have the right to:  

  • Be informed about how your data is used  
  • Access your personal data  
  • Rectify inaccurate data  
  • Request erasure (the “right to be forgotten”)  
  • Restrict processing  
  • Data portability  
  • Object to certain processing  
  • Withdraw consent (where consent is relied upon)  
  • Complain to the Information Commissioner’s Office (ICO)  

Some rights may be limited where processing is necessary for safeguarding, public task functions, or legal obligations.  

  1. Automated decision making 

We do not use automated decision making or profiling that produces legal or similarly significant effects.  

  1. Contact details 

Hertfordshire Office of the Police and Crime Commissioner  

Website: https://www.herts-pcc.gov.uk/privacy-policy  

Email: dataprotection@beds.police.uk  

Address: Information Management, Bedfordshire Police, Woburn Road, Kempston, MK43 9AX  

Catch22 Data Protection Officer ,  

Email: DPO@catch-22.org.uk  

Address: Catch22, 27 Pear Tree Street, London, EC1V 3AG  

Information Commissioner’s Office (ICO)  

Website: https://ico.org.uk  

Telephone: 0303 123 1113