We process data in accordance with the Data Protection Act, recognizing the General Data Protection Regulations.
Types of Data Processed Include:
- Customer/Carer personal details
- Employee records
- Health records
- Daily records/notes
We need to process this data and retain it in line with appropriate retention periods to ensure that we are able to provide a holistic care service, run an effective business, and make well-informed decisions in relation to day-to-day and strategic planning for our service provision.
Our Lawful Basis for Processing This Data Is:
- Health and Social Care grounds (art.9 (2)(h))
You Have the Right To:
- Be informed
- Access
- Rectification
- Erasure
- Restrict processing
- Data portability
- Object
- Rights in relation to automated decision-making and profiling
As part of the initial assessment or recruitment process, you will be asked to provide sensitive data and for your consent to us using it appropriately. Although we will always seek to obtain further consent for each specific transmission of personal data, from time to time we may need to transmit data without your knowledge. Examples of this would be in a medical emergency or where we are obliged to by law.
Should you make a subject access request, we will do our best to respond without delay. However, this could take up to 1 month, and where the request is particularly sizable, it may take longer. All requests will always be handled within 3 months, and you will be kept informed of time periods.
Any data breaches will be reported appropriately to the Information Commissioner’s Office and any affected parties within 72 hours. Where required, CQC, Adult Social Care, and/or the local police force may also be informed:
ICO Helpline - 0303 123 1113