Data Privacy Policy | Seckford Care

Seckford Care is committed to protecting and respecting your privacy.

This policy sets out the basis on which any personal data that we collect from you, or that you provide to us, will be processed by us.

Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.

Your privacy is important to us

This notice informs you how we use the information you give us and how we protect your privacy. It also explains your rights under the UK Data Protection Act (update 2018) and the EU General Data Protection Regulations 2018.

We abide by UK Law and our data protection regulator within the UK is the Information Commissioner’s Office, detailed below.

Collecting of, and purpose for, your information

We offer services and products to our clients. To provide these, we may need to collect personal data, such as:

Name, address and contact details.
Financial information, including bank account information to enable payment of services.
Transaction data, including details of payments from you for the services that we have provided.
Information about your life, including social history, health and wellbeing, treatment and care.
Notes and reports about your health and care provision, including case assessments and medication provided.
Compliments, complaints, accidents and incidents information.

We use information held about you in the following ways:

Your information may be used to introduce you to the services that we offer, to help with ongoing administration, to contact you with any review or changes that are applicable, and/or for our own business research and analysis.
To ensure that content from our site is presented in the most effective manner for you and for your computer.
To provide you with information, products or services that you request from us, or which we feel may interest you, where you have consented to be contacted for such purposes.
To carry out our obligations arising from any contracts entered into between you and us.
To allow you to participate in interactive features of our service, when you choose to do so.
To notify you about changes to our service.

Withholding of the required data may result in an insufficient service being provided.

We may obtain data from individual customers or from employer firms.

Lawful basis for processing

By law, we need to have a lawful basis for processing your personal data.

Data is processed because:

We are required to do so in order to fulfil a contract that we have with you.
We have a legal obligation to do so.
It is necessary for the purposes of the legitimate interests pursued by us or by a third party to process your information. We can do that so long as we do not interfere with your fundamental rights or freedoms.

Some personal information is treated as more sensitive (for example information about health, sexuality, ethnic background and others – see note below for a full list^[1]). The legal basis for processing these special categories of personal information is more limited. To lawfully process special categories of personal data, we must identify a lawful basis for the processing and meet a separate condition for the processing.

We process your special category data because:

It is necessary for us to provide and manage social care services.
It is necessary due to social security and social protection law.
You have provided your consent. We will request permission and will offer you a clear choice and ask that you confirm to us that you consent.
Where we need to protect the vital interests (i.e. the health and safety) of you or another person and you are incapable of giving consent.

[1] Special categories of personal data is defined within the UK GDPR and covers racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a person’s sex life or sexual orientation.

Sharing your data

We may share your personal data with the following organisations:

We may verify your identity by searching publicly-available records held by credit reference agencies.
Business partners, suppliers and sub-contractors for the performance of any contract that we enter into with them.
Other parts of the health and social care system such as local hospitals, the GP, the pharmacy, social workers, clinical commissioning groups, and other health and care professionals.
The Local Authority.
Organisations with whom we have a legal obligation to share information, i.e. for safeguarding, the Care Quality Commission.
The Police or other law enforcement agencies, if we have to by law or court order.

We will not sell or share your information with any other third parties, unless we have obtained additional consent from you or where there is another lawful basis available to us.

How we manage your personal information

We process your personal information in accordance with the principles of UK GDPR.

We will treat your personal information fairly and lawfully and we will ensure that information is:

Processed for limited purposes;
Kept up-to-date, accurate, relevant and not excessive;
Not kept longer than is necessary;
Kept secure.

Access to personal information is restricted to authorised individuals on a strictly ‘need to know’ basis.

We are committed to keeping your personal details up to date, and we encourage you to inform us about any changes needed to ensure your details are accurate.

Your rights regarding your data

Should your data be inaccurate, we will rectify this without delay.
Should you wish us to delete your data at any point, please contact the Office, as shown further below, to make the request. This will be actioned, unless there is a lawful basis for us to retain the information; in which case, you will be advised accordingly.
Should you wish to transfer your data to another organisation, please contact the office, as below, and we will organise this for you.
You can request access to your data at any time. We will provide you with a full copy within one month of your request, unless the request is complex or repeated, in which case the deadline may be extended by a further two months.
You can withdraw consent to us holding and processing your information at any time. Please contact the Office, as below, should you wish to do this.
We may provide you with updates and bulletins, which are appropriate to your service, on an ongoing basis – this will be explained to you, if it is applicable. You can opt out of these, should you wish to – please contact us and advise us, if you wish to.
If we are processing your data as part of our legitimate interests, you have the right to object to that processing. We will restrict all processing of this data, while your objection is investigated.

Security

We have in place a full information security policy, business continuity and disaster recovery plans.

We take data security very seriously and have in place, we feel, the most secure options available in order to store and transfer your data securely. We can provide details on request.

Where we store your personal data:

The data that we collect from you may be transferred to, and stored at, a destination outside the UK. It may also be processed by staff operating outside the UK, who work for us or for one of our suppliers. Such staff maybe engaged in, among other things, the fulfilment of your order, the processing of your payment details and the provision of support services.

We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy and the UK GDPR.

Our contact details

Should you wish to contact us in relation to any issues within this notice, please contact:

Data Protection Officer
Seckford Care
Seckford Street
Woodbridge
Suffolk
IP12 4NB

You will be responded to as promptly as possible.

Your right to complain

Should you wish to make a complaint in relation to data protection issues relating to our firm, you can contact us, as above, or via our regulator as follows:

The Information Commissioner’s Office

Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Tel: 0303 123 1113 (local rate) or 01625 545 745, if you prefer to use a national rate number.

Information Commissioner’s Office (ICO)

Changes to our privacy policy

Any changes that we may make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by e-mail.

Contact

Any questions, comments and requests regarding this privacy policy are welcomed and should be addressed to enquiries@seckfordcare.org.uk