GENERAL DATA PROTECTION REGULATION (GDPR) PRIVACY NOTICE

Introduction

The General Data Protection Regulation (GDPR) came into force in May 2018. The GDPR consolidates and strengthens data protection safeguards as developed under the Data Protection Act 1998 and subsequent legislation.

The attached privacy notice follows Information Commissioner’s Office (ICO) guidelines and is intended to show that Anson Care Services Limited is serious about protecting personal information it collects and processes from its service users, employees, and others, and will show how it succeeds in doing this by providing an overview of its various policies and procedures.

  1. Business details

This is the privacy notice of Anson Care Services Limited.

Our registered office is at Old Barncoose School, Chapel Terrace, Illogan Highway, Redruth, Cornwall TR15 3GD.

Our Data Protection Officer is Matthew Cross. You can contact our Data Protection Officer by writing to the Data Protection Officer, Anson Care Services Ltd, Old Barncoose School, Chapel Terrace, Illogan Highway, Redruth, TR15 3GD or via phone on 01209 708688.

Anson Care Services Limited is registered with the Care Quality Commission to provide personal care to people in their own homes/accommodation and personal care without nursing.

Anson Care Services Limited runs 5 care homes and services to people in their own homes from 1 location.

  1. What are our obligations to you in relation to how we process your personal data

We are required by law to ensure that when processing any of your personal data that it is:

  • Used lawfully, fairly and in a transparent way
  • Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes
  • Relevant to the purposes we have told you about and limited only to those purposes
  • Accurate and kept up to date
  • Kept in a form which permits you to be identified for only as long as necessary for the purposes we have told you about
  • Kept securely
  1. What personal information we collect about you

Examples of personal information we may collect from people visiting our website include:

  • Name
  • Email address
  • Telephone number
  • Address
  • IP address
  • Any other personal information that you choose to provide to us when you complete the contact forms on this website
  1. How we collect information

The primary ways we collect information from visitors to our website is through cookies and our contact forms and we use reasonable security measures to protect any personal information that is processed through our website, including SSL or “Secure Socket Layer“ encryption technology, which works by using a private key to encrypt data that‘s transferred over the SSL connection.

All personal information obtained to meet our regulatory requirements will always be treated in line with our explicit consent, data protection and confidentiality policies.

Our website and databases are regularly checked by experts to ensure they meet all privacy standards and comply with our general data protection security and protection policies.

Please note that whilst we take appropriate technical and organisational measures to safeguard the personal information that you provide to us, no transmission over the Internet can be guaranteed to be secure. Consequently, please note that we cannot guarantee the security of any personal information that you transfer to us over the Internet.

  1. What we do with personal information

All personal information obtained is used only to ensure that we provide a service, which is consistent with our purpose of providing a person-centred care service, which meets all regulatory standards and requirements. It will not be disclosed or shared for any other purpose.

For the most part we will use your personal data for one of the following lawful bases:

  • Where we need to perform the contract we have entered into with you.
  • Where we need to comply with a legal obligation.
  • Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.

There are other rare occasions where we may use your personal data, which are:

  • Where we need to protect your interests (or someone else’s interests).
  • Where it is needed in the public interest or for official purposes.

The information you provide will be stored securely on our systems for as long as your enquiry remains active and in line with our Data Retention Policy. Data will be stored and used by us in accordance with this privacy statement and also in accordance with your rights under the Data Protection Act 2018 and the General Data Protection Regulation.

  1. With whom we might share information

Personal information obtained through our website is not routinely shared. The only exceptions to this general rule would be where we are required by law to provide information, e.g. to help with a criminal investigation. Even when seeking to notify the local authority of a safeguarding matter or the Care Quality Commission of an incident that requires us to notify it, we would only do so with consent or ensure that the information provided is treated in confidence.

Where we provide information for statistical purposes, the information is aggregated and provided anonymously so that there is no privacy risk involved in its use.

At this time, we do not share any data for planning or research purposes for which the national data opt-out would apply. We review this on an annual basis and for any new processing.

  1. How long we keep information

There are strict protocols in place that determine how long the organisation will keep the information, which are in line with the relevant legislation and regulations. Details of retention periods for specific purposes are available in our data retention policy.

  1. How we keep our privacy policies up to date

The staff appointed to control and process personal information in our organisation are delegated to assess all privacy risks continuously and to carry out comprehensive reviews of our data protection policies, procedures and protocols at least annually.

  1. What rights do you have in respect of how we use your personal data?

Subject to legal limitations you have the right to:

  • Request access to your data: You can ask us to provide a copy of the personal data we hold about you.
  • Request corrections to be made to your data: If you think that your personal data is incomplete, inaccurate you can ask us to correct it.
  • Request erasure of your data: If you consider there is no lawful basis for us to continue processing your data you can ask for that data to be deleted or removed.
  • Object to the processing of your data: If our lawful basis for processing your data relates to a legitimate business interest (or third party interest) you can raise an objection to that interest.
  • Request that processing restrictions be put in place: If you believe that your information is being processed without a lawful reason or that the information is incorrect you can request that a freeze/restricting is placed on the processing of the information until your concerns are addressed.
  • Request a transfer of your personal data: You can ask us to transfer your personal data to a third party.

If you wish to exercise any of the above rights please contact our Data Protection Officer, Matthew Cross, at Anson Care Services Ltd, Old Barncoose School, Chapel Terrace, Illogan Highway, Redruth, TR15 3GD.

  1. Will I have to pay a fee?

You will not be expected to pay a fee to obtain your personal data unless we consider that your request for access to data is unfounded or excessive. In these circumstances we may charge you a reasonable fee or refuse to comply with your request.

  1. Confirmation of identity

Whenever you make a request for access to personal data, we may request specific information to confirm your identity. This is usually done to ensure that we are releasing personal data to the correct person.

  1. Important information about this privacy notice

We reserve the right to amend or update this privacy notice at any time. We will provide you with a new notice when we make any updates.

  1. How to make a complaint

To exercise all relevant rights, queries or complaints please in the first instance contact our Data Protection Officer, Matthew Cross, at Anson Care Services Ltd, Old Barncoose School, Chapel Terrace, Illogan Highway, Redruth, TR15 3GD.

If this does not resolve your complaint to your satisfaction, you have the right to lodge a complaint with the Information Commissioners Office on 03031231113 or via email https://ico.org.uk/make-a-complaint/ or at the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, England.