In the pub or leisure trade and opening soon?

In the pub or leisure trade and opening soon? Government guidance says you should assist the NHS Test and Trace service by keeping a record of your customers and visitors.

Going to be keeping more information about people than usual? Here are some things to consider:

Privacy – If you don’t already, you will need to tell people why you are collecting their information, what you are going to use it for, who you might share it with and how long you are going to keep it. You may need a privacy statement if you don’t have one or you may need to update your existing information. Remember you cannot use the information you gather for marketing unless you have collected specific consent to do so.

Security – How will you keep information secure? Who will see the information – do all your staff need to see everyone’s details? Make sure you have procedures for accessing the information and that you have secure passwords if you are using an app. How will you store paper-based information? If you intend people to sign in then you should consider infection risk as well as how you will prevent people from seeing each other’s information.

Retention – How long do you need to keep the information? Current guidelines say you should keep the details for 21 days to provide to NHS Test and Trace if necessary. Make sure you have a procedure for securely deleting / destroying the information after this time.

Scams – make sure you and your staff are on the lookout for scams appearing to be from NHS Track and Trace trying to get the customer data. Check email and website domain names to make sure they come from a legitimate source – if you’re not sure then DON’T send information or click on links.

Processing – If you are taking bookings though an app, check that information is not stored or otherwise processed outside of Europe or you may need to check you have special clauses to protect the information

Get in touch if you would like advice or guidance – or call +44 1482 762 392