Free healthy weight support in Solihull
0121 517 5555

Privacy Policy

Healthy Active Lives - HealthyActiveLives.co.uk

Operated by DDM Health Ltd on behalf of Solihull Metropolitan Borough Council

Telephone: 0121 517 5555 | Last updated: March 1, 2026

This Privacy Notice explains how personal data is collected and used when you visit HealthyActiveLives.co.uk, use a form on the Website, contact the service, or ask to be referred or enrolled into support available through Healthy Active Lives.

HealthyActiveLives.co.uk is operated by DDM Health Ltd on behalf of Solihull Metropolitan Borough Council. We are committed to handling personal data lawfully, fairly and transparently.

1. Who is responsible for your personal data

For personal data collected through Healthy Active Lives service webpages, forms, enquiries, referral routes and enrolment requests on HealthyActiveLives.co.uk, Solihull Metropolitan Borough Council is the data controller.

DDM Health Ltd operates the Website and processes personal data on the Council's behalf in delivering this service.

If you follow a link to a third-party website or service, that third party will be responsible for its own processing under its own privacy notice.

In limited cases, DDM Health Ltd may also process personal data for its own legal, regulatory, audit, security or incident-management obligations. Where that happens, DDM Health Ltd will be responsible for that specific processing.

2. Contact details

Service website: HealthyActiveLives.co.uk

Service telephone: 0121 517 5555

Service email: contact@solihullhealthyactivelives.co.uk

Controller: Solihull Metropolitan Borough Council, Council House, Manor Square, Solihull, B91 3QB

Council privacy contact: https://www.solihull.gov.uk/about-council/data-protection

Website operator: DDM Health Ltd (company number 07975193)

DDM Health Ltd Data Protection Officer: Amar Singh, dpo@ddm.health

3. The types of personal data we may collect

Depending on how you use the Website or service, we may collect:

  • identity and contact details, such as your name, address, postcode, email address and telephone number;
  • personal details relevant to service access, such as date of birth, age, household information or relationship to a child or dependant, where relevant;
  • health, wellbeing and lifestyle information, such as height, weight, BMI, goals, risk factors, relevant medical or lifestyle details, and information about the support you are looking for;
  • demographic and equality information, such as sex, gender, ethnicity, preferred language, or accessibility and communication needs, where relevant and lawful;
  • referral information, such as who referred you, why you were referred, and notes relevant to eligibility or support;
  • records of your communications with us, including messages, forms, feedback, complaints and call or contact notes; and
  • technical information about how you use the Website, such as IP address, browser type, device information, pages viewed, cookie choices and similar usage data.

4. How we collect personal data

We may collect personal data:

  • directly from you when you browse the Website, fill in a form, request a call back, email us or speak to us by telephone;
  • from a parent, guardian, carer, advocate or another person who is authorised to act on your behalf;
  • from referrers and partner organisations, such as Solihull Council teams, GPs, NHS organisations, schools, social prescribers, community partners or other professionals, where lawful to do so; and
  • automatically through server logs, cookies and similar technologies when you use the Website.

5. Why we use your personal data

We may use your personal data to:

  • provide information, signposting and support through the Website;
  • receive, review and process enquiries, referrals and enrolment requests;
  • assess whether a service may be suitable or whether more information is needed;
  • contact you about your enquiry, referral, service request, appointments, next steps or related service administration;
  • make reasonable adjustments and support accessibility or communication needs;
  • safeguard children, young people and adults where concerns are identified;
  • administer, maintain, secure and improve the Website and related systems;
  • monitor service demand, access, quality, performance and outcomes;
  • produce statistics, management information and service evaluation reports, using anonymised or aggregated data where possible;
  • prevent or investigate fraud, misuse, complaints, incidents or legal claims; and
  • comply with legal, regulatory, contractual, audit and information-governance requirements.

6. Lawful basis for processing

We do not rely on consent for the core operation of the public health and wellbeing service simply because you use the Website or submit a form.

Depending on the purpose, we rely on one or more of the following lawful bases under UK data protection law:

Article 6(1)(e) UK GDPR - processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. This is expected to be the main lawful basis for the operation of the Healthy Active Lives service on behalf of Solihull Metropolitan Borough Council.

Article 6(1)(c) UK GDPR - processing necessary for compliance with a legal obligation, where applicable.

Where we process health or other special category data, we also rely on an Article 9 condition, usually Article 9(2)(h) (health or social care) and/or Article 9(2)(i) (public health), together with any applicable requirements under the Data Protection Act 2018.

Where you choose optional cookies or any other clearly optional processing that genuinely depends on your choice, we rely on consent and you can withdraw that consent at any time.

7. Who we may share personal data with

We may share personal data, where necessary and lawful, with:

  • relevant teams within Solihull Metropolitan Borough Council;
  • DDM Health Ltd staff, systems and approved suppliers involved in operating the Website and service;
  • health, care or community partners involved in assessing, delivering or coordinating support, such as NHS organisations, GPs, social prescribers, community providers or commissioned delivery partners;
  • IT, hosting, form, communication, analytics or security providers acting under appropriate contracts and controls;
  • regulators, auditors, insurers, legal advisers, law-enforcement bodies or safeguarding agencies where disclosure is required or justified by law; and
  • other organisations where you have asked us to share information, or where sharing is otherwise lawful and necessary.

8. International transfers

We expect personal data collected for this service to be stored and processed mainly within the UK.

If a supplier or system transfers personal data outside the UK, we will ensure that appropriate safeguards are in place, such as adequacy regulations, approved contractual safeguards, or another lawful transfer mechanism.

9. Automated tools and decision-making

The Website may include calculators, eligibility checks, triage tools or similar digital features. These tools are used to provide guidance, streamline enquiries or route people to suitable support.

They are not intended to make the final decision about your care or a legally significant outcome without human involvement, unless we clearly tell you otherwise.

10. Cookies and similar technologies

The Website uses cookies and similar technologies such as pixels, scripts, local storage or tags. Some are needed for the Website to function and others may help us understand how the Website is used, remember preferences or support embedded services.

Further details are set out in our Cookie Policy, including how to manage your choices.

11. How long we keep personal data

We keep personal data only for as long as necessary for the purposes for which it was collected, and in line with Solihull Council retention schedules, contractual requirements, applicable public health or care record requirements, and other legal obligations.

12. Security

We use technical and organisational measures designed to protect personal data, such as access controls, role-based permissions, secure systems, supplier controls, staff training and, where appropriate, encryption.

No Website, email system or internet transmission can ever be guaranteed completely secure, so you should avoid sending unnecessary sensitive information unless the relevant form or channel has been provided for that purpose.

13. Children and young people

Some Healthy Active Lives services may relate to children, young people or families. Where personal data about a child or young person is collected, we will only process it where relevant and lawful.

If you provide information on behalf of a child or young person, you must have authority to do so. We may ask for confirmation of parental responsibility, legal authority or referral authority where appropriate.

14. Your rights

Subject to data protection law, you may have rights to:

  • request access to your personal data;
  • ask for inaccurate or incomplete personal data to be corrected;
  • request erasure of personal data in certain circumstances;
  • ask for processing to be restricted in certain circumstances;
  • object to certain types of processing, including processing carried out on public task grounds in some cases;
  • receive a portable copy of personal data, where that right applies;
  • withdraw consent for optional processing where consent has been used; and
  • ask for human review of certain automated decisions, where relevant.

15. Third-party websites and services

If you use a third-party website, app, social media platform, mapping service, video host, form provider or similar service linked from this Website, that third party may process your personal data under its own terms and privacy notice. We recommend that you read those notices.

16. Complaints

If you have a question or complaint about how your personal data has been handled, please contact the service or the relevant privacy contact first using the details above.

You also have the right to complain to the Information Commissioner's Office (ICO):

Website: https://ico.org.uk

Telephone: 0303 123 1113

17. Changes to this Privacy Notice

We may update this Privacy Notice from time to time. The latest version will be published on the Website with the revised "Last updated" date.

‍

Cookie Policy

Healthy Active Lives - HealthyActiveLives.co.uk

Operated by DDM Health Ltd on behalf of Solihull Metropolitan Borough Council

Telephone: 0121 517 5555 | Last updated: March 1, 2026

This Cookie Policy explains how HealthyActiveLives.co.uk uses cookies and similar technologies when you visit the Website.

HealthyActiveLives.co.uk is operated by DDM Health Ltd on behalf of Solihull Metropolitan Borough Council.

1. What cookies and similar technologies are

Cookies are small text files placed on your device when you visit a website. Similar technologies can include pixels, scripts, tags, web storage and other technologies that store or access information on your device.

2. How we use cookies and similar technologies

We may use cookies and similar technologies to:

  • make the Website work and keep it secure;
  • remember choices you make, such as cookie settings, accessibility or language preferences;
  • understand how people use the Website so that we can improve content, navigation and performance;
  • support forms, embedded media, maps or other third-party tools used on the Website; and
  • measure the effectiveness of Website features or content where lawful to do so.

3. The categories of cookies we may use

Strictly necessary cookies

These cookies are required for core Website functions such as security, session management, load balancing, form handling or remembering your cookie choices.

Analytics or statistical cookies

These help us understand how visitors use the Website so that we can improve the service. Depending on how they are configured and the legal rules that apply at the time, these may require consent or may be used under a legal exemption where the conditions for that exemption are met.

Preference or appearance cookies

These remember settings such as language, accessibility or display preferences. Depending on how they are configured and the legal rules that apply, these may require consent or may be used under a legal exemption where the conditions for that exemption are met.

Embedded content and third-party service cookies

If the Website includes videos, maps, forms, social media features or other third-party tools, those services may store or access information on your device when you interact with them. Their own privacy and cookie notices will also apply.

Advertising or retargeting cookies

If these are ever used on the Website, they should only be used in line with legal requirements and should be clearly listed in the detailed cookie inventory below.

4. Consent, exemptions and your choices

Where consent is required for a cookie or similar technology, we will ask for your choice before using it.

Where the law allows an exemption, for example because a technology is strictly necessary or another specific exception applies, we may use the technology without asking for consent, but we will still provide clear information and any required means to object or manage your settings.

Using the Website or accepting the Website Terms and Conditions does not by itself mean that you consent to non-essential cookies.

You can usually update your preferences at any time through: [COOKIE LINK]

You can also manage cookies through your browser settings, although blocking some cookies may affect how the Website works.

5. Detailed cookie inventory

See a list of cookies here: [COOKIE LINK]

6. Third-party services

If you choose to use third-party content or services made available through the Website, such as a video player, map, social media button or external form provider, that third party may use its own cookies or similar technologies. Please read the relevant third party privacy and cookie notices.

7. Changes to this Cookie Policy

We may update this Cookie Policy from time to time. The latest version will be published on the Website with the revised "Last updated" date.

8. Contact

Website: HealthyActiveLives.co.uk
Telephone: 0121 517 5555
Email: contact@solihullhealthyactivelives.co.uk
DDM Health Ltd Data Protection Officer: Amar Singh, dpo@ddm.health