Login

Sign Up

After creating an account, you'll be able to track your payment status, track the confirmation.
Username*
Password*
Confirm Password*
First Name*
Last Name*
Email*
Phone*
Contact Address
Country*
* Creating an account means you're okay with our Terms of Service and Privacy Statement.
Please agree to all the terms and conditions before proceeding to the next step

Already a member?

Login

Privacy policy

Data Protection Privacy Notice 

Norfolk and Suffolk Victim Care Service (NSVCS) 

What does Catch22 do? 

Catch22 is a national organisation delivering services across England and Wales in education, social care, justice, and victim support. Our mission is to support individuals to thrive by ensuring they have good people around them, a safe place to live or work, and a sense of purpose. 

What does this service do? 

The Norfolk and Suffolk Victim Care Service (NSVCS) is a free, independent, and confidential support service for victims of crime in Norfolk and Suffolk. We support people of all ages by offering emotional and practical support, advocacy, and referrals to specialist services where needed. 

What information do we collect and why do we need it? 

To provide you with support, we need to collect and process some personal information. This may include: 

  • Full name  
  • Date of birth  
  • Address  
  • Contact details (email, phone)  
  • Crime type and incident details  
  • Needs assessment responses  
  • Preferred contact method and safe contact details  

We may also ask for sensitive information (special category data), such as gender, ethnicity, religion, sexual orientation, or disability status. This helps us tailor our support and ensure inclusivity, but you are not required to provide it. 

We collect this information to: 

  • Contact you and provide support 
  • Maintain accurate records of your case 
  • Ensure continuity of care if you return for further support 

What law applies and what is the legal basis for processing your data? 

We process your data in accordance with: 

  • The UK General Data Protection Regulation (UK GDPR) 
  • The Data Protection Act 2018 

Our lawful bases for processing your personal data are: 

  • Consent (Article 6.1.a) 
  • Performance of a contract (Article 6.1.b) 
  • Public task (Article 6.1.e) 

For special category data, we rely on: 

  • Explicit consent (Article 9.2.a) 
  • Substantial public interest (Article 9.2.g) 
  • Provision of health or social care (Article 9.2.h) 

We may also process data under the Data Protection Act 2018 Schedule 1, Part 2, Paragraph 14 for the provision of confidential counselling or support. 

Where do we get your data from? 

Most information comes directly from you. We may also receive referrals from: 

  • Norfolk and Suffolk Police (via Automatic Daily Transfer) 
  • Action Fraud 
  • NHS services 
  • Other partner agencies 

We only accept referrals where you have given explicit consent to be contacted. 

Who will we share your information with? 

We only share your information: 

  • With your consent, to refer you to other support services 
  • Where legally required (e.g. safeguarding concerns, risk of harm, or law enforcement investigations) 

Examples of organisations we may share with include: 

  • Social Services 
  • Police or emergency services 
  • Specialist support agencies (with your consent) 

How long will we keep your information? 

We retain your data while your case is active and for up to 6 years after your support ends. This allows us to: 

  • Provide continuity if you return for support 
  • Meet reporting requirements from our commissioners 

In some cases, legal obligations may require us to retain data for longer. 

What happens if the information is wrong? 

If you believe any information we hold is inaccurate, please contact us. We will review and, where appropriate, correct the data. If we cannot make the change, we will explain why and ensure your concerns are recorded. 

What rights do you have? 

You have the following rights under data protection law: 

  • Right to be informed – about how your data is used 
  • Right of access – to see the data we hold about you 
  • Right to rectification – to correct inaccurate data 
  • Right to erasure – to request deletion of your data 
  • Right to restrict processing – to limit how your data is used 
  • Right to data portability – to move your data to another provider 
  • Right to object – to certain types of processing 
  • Right to withdraw consent – at any time 
  • Right to lodge a complaint – with the Information Commissioner’s Office (ICO) 

To exercise any of these rights, contact: 
📧 DPO@catch-22.org.uk 
📮 Data Protection Officer, Catch22, 27 Pear Tree Street, London, EC1V 3AG 

If you are unhappy with how we handle your data, you can contact the ICO at https://ico.org.uk or call 0303 123 1113.