Data Protection Notice
Data Controller Details
Ifield Park Care Home Limited are committed to complying with the Data Protection Act 2018 and the General Data Protection Regulation for the protection of personal data. If you nave any questions about this privacy notice or how we use your personal data, please contact us:
Data Protection Officer
Ifield Park Care Home
West Sussex, RH11 0JE
Tel: 01293 594200 firstname.lastname@example.org
What data is being collected and processed?
For us to be able to supply you with marketing information, process care residency applications for you and for you to be able to enter into our service agreement we collect, store and use the following personal data or information:
Name and title
Contact information including email address and phone numbers
Date of birth
Income and expenditure in relation to ability to meet our fees
Other information to support your application required by our registration governance
The processing of this personal data is a contractual requirement and is necessary in order for us to be able to provide the quotations and services that you have requested from us.
Where necessary we will ask your consent to collect and process your personal data. Any personal data we collect from you will not be transferred outside of the European Economic Area.
Email marketing communications/ vacancies and tracking
If you have chosen to opt-in to our waiting list and marketing communications, we will use your information to tell you about services available from us which may be of interest to you.
We will keep your information on a confidential database to which the Manager of the home has access. You will be deleted from this marketing database upon becoming a resident here or if you ask us to remove you from the list at any time. You have the right to opt-out of our email marketing communications at any time. You can opt-out by informing the Manager of the home with which you are registered.
Social Media Use
Ifield Park Care Home Ltd uses social media for the purposes of promoting and communicating our services, products and offers. \by signing up to, liking, following or using any of our social media pages, the user is subject to the data and privacy policies of these organisations, not Ifield Park Care Homes’.
Data Retention Period
We will not store any personal data for longer than necessary and we will delete data that is no longer required for the purposes for which it is collected or otherwise processed, or if you have withdrawn consent for its processing and retention.
If you have entered into a contract with us we will store the data for a period of six years for compliance with our general legal obligations and for the exercise or defence of any legal claims.
Under the GDPR, you have the right to ‘block’ or request the deletion or removal of personal data to prevent further processing. The right to erasure is also known as ‘the right to be forgotten’. Specific circumstances in which you can request the deletion or remoc=val of personal data includes:
Where the data is no longer necessary for the purposes for which it was collected or otherwise processed
Where you withdraw consent
When you object to the processing and there is no overriding legitimate interest for continuing the processing
Where the personal data was unlawfully processed(i.e. otherwise in breach of the GDPR)
Where the personal data has to be erased in order to comply with a legal obligation
In case a deletion is not possible due to legal, statutory or contractual retention periods, or if it requires disproportionate efforts or prejudices your legitimate interests, the data will be blocked instead of deleted.
Sharing of data with other data controllers
In order to administer your contract we may need to share some of your personal information with other data controllers. This processing is necessary for the purposes of delivering our services to you. You agree that we can share or use your personal data with any of our professional healthcare partners or suppliers to allow us to provide you services and products required for your care, such as to process requests for services such as dentistry, chiropody, speech and language therapy or GP services or for the supply of products such as profiling beds. This list is not exhaustive. Other data controllers which we may share this information with may also but not exclusively include
The Care Quality Commission
The Health and Safety Executive
We will only share personal data with other controllers outside when:
You have given us your consent to do so
It is necessary for the performance of an agreement of which you will be made aware
In order to obtain professional advice (e.g. legal advice)
We or other need to investigate or prevent a crime (e.g. to fraud prevention agencies)
The law permits or requires it
Regulatory or body requests or requires it, even without your consent, or
There is a duty to the public to reveal the information
If you give us false or inaccurate information and we identify that fraud has taken place, fraud prevention agencies will be informed. The following are examples of information that could be shared with other organisations in order to prevent money laundering
Claiming benefits/ care fees/ NHS funding inappropriately
Debt recovery (non-payment of fees to which we are entitled)
Applications and claims for all types of insurance
Employment applications or information gained during the course of your employment with us
In addition, law enforcement agencies may access and use this information.
Keeping your data secure
Personal data collected by us is kept as safe as possible and all of our systems arepassword protected and encrypted to comply with the latest regulations. All of our staff are aware of our company data and confidentiality policy and have received training in GDPR compliance.
Whilst we will use all reasonable efforts to safeguard such personal data, you acknowledge that the use of the internet is not entirely secure and for this reason we cannot guarantee the security or integrity of any personal data which is transferred from you or to you via the internet. You therefore agree that the use of the internet is entirely at your own risk.
Updating your personal data
If you believe the personal data we hold about you is inaccurate or incomplete, you have the right to rectification. Please let us know about any changes or inaccuracies. Where possible, we will also inform any third parties to whom we have disclosed the personal data in question so they can rectify their records.
Subject Access Requests
You have the right to request access to a copy of the personal data that we hold about you. This information is provided to you free of charge, however we can refuse to respond or charge a ‘reasonable fee’ of £10 including VAT when a request is manifestly unfounded, excessive or repetitive.
If for any reason you believe that your privacy has been breached by s or would like to submit a subject access request, please contact us at the address at the beginning of this notice.
Ifield Park Care Home Ltd may change this policy from time to time by updating this statement. You should check this page on our website from time to time to ensure that you are happy with any changes. This policy is effective from 25 May 2018.