Privacy Policy

Chesterfield Care Group - Privacy Statement

Read more

WHO WE ARE

Chesterfield Care Group is committed to protecting your personal data and ensuring that this is processed in a fair, open and transparent way. The Privacy Statement is aimed at ensuring that everyone feels confident and comfortable with how their personal information is collected, used and stored.

We are a “data controller” for the purpose of the Data Protection Act 1998 and (from 25 May 2018) the EU General Data Protection Regulation 2016/679 (“Data Protection Law”). We have responsibility for, and will control the processing, of your personal data.

If you have any queries in relation to the privacy practices, please contact Carole Dunphy, our Data Protection Officer either by:

INFORMATION COLLECTED 

Personal Information

The personal information that is collected includes your name, address, telephone number, the days you attend together with the centre, whether you are co-funded or self-funded together with details of your Doctor and any medication details you provide us with. Where relevant we will hold details of your next of kin, your care agency and your key safe number. This data will be collected during an initial assessment held between you and Chesterfield Care Group. This information will not be publicly available.

We will use this information:

  • To provide day care services that you have requested
  • To ensure that transport is provided when there has been an agreement to arrange this
  • To ensure that funding is received
  • To contact, with their permission, the service user’s family, care agency or Doctor to share information.

Sensitive Personal Data

Data Protection Law recognises that some categories of personal data are sensitive. These can include information about health, race, ethnic origin, political opinions, sex life, sexual orientation and religious beliefs.

This information will only be used:

  • For the purposes of dealing with your enquiry or where it is required for the funding of the day care provision to the extent you attend a specialised group and evaluating the service we provide.
  • Where you have given your express consent that you are happy for us to share your story so that we may publish it on our website.

Details will not be passed on to anyone else without your express permission.

Right to erasure or Right to be Forgotten

The Right to be Forgotten is not an absolute right but there are circumstances where individuals can request the deletion or removal of their data where there is no compelling reason for the continued processing:

  • The data is no longer necessary for the purpose for which is was collected
  • Consent is withdrawn
  • There is no legitimate interest for the continued processing
  • The data was unlawfully processed
  • If it causes unwarranted harm or distress

A few exceptions exist to this right, such as the processing is necessary in order to comply with statutory requirements or it is required to defend a legal claim.

LEGAL BASIS

Personal data will be used to enable the Care Group to fulfil our contract with the service users. If we use data for any other purpose e.g. advertising we will seek your consent. Consent forms will be updated and renewed periodically to ensure service users maintain awareness of what information they have consented to.

There are other lawful reasons that enable us to process personal data but this will only be undertaken taking into account your rights and interests. These include dealing with complaints or complying with guidance from the Charity Commission.

Any data that the Care Group processed must be undertaken:

  • Fairly
  • Transparently
  • For a specified and legitimate purpose
  • Accurately and where necessary kept up to date
  • No longer than necessary for the specified purpose
  • Securely

SHARING INFORMATION

The personal information collected about you will mainly be used by our staff so they can support you.

We will never share or sell your personal information with organisations so they can contact you for any marketing activities.

The Care Group may share your information with our trusted partners, such as Derbyshire County Council and Community Transport for Town and County, to help us deliver the service, but processing of this information is carried out under instruction. We make sure that they store data securely, delete it when it is no longer required and will never use it for any other purpose.

KEEPING YOUR INFORMATION SAFE

The Care Group takes the looking after your information seriously. Steps have been undertaken to ensure the protection of personal information from improper access, use, alteration, destruction and loss.

Unfortunately the transmission of data using the internet is not totally secure. Although we will do our best to protect personal information we cannot guarantee the security of data transmitted.

Our website may contain a link to other sites. Please note that while the Care Group will try to link to sites that share our high standards and respect for privacy, we are not responsible for the content or privacy practices employed by other sites.

LENGTH OF TIME FOR HOLDING YOUR INFORMATION

The Care Group will hold the service user information whilst they are attending the day care. If a service user is absent for a period, such as for an operation, and it is expected that they will return the information will be kept until it is clear that the service will not return.

For service users who leave the day care the information will be retained for 4 weeks or until a successful resolution of any queries.

If a service user leaves their photograph on the website or promotional material will be maintained for 4 weeks unless there is an expressed wish for it to be deleted earlier.

YOUR RIGHTS

Access to data

You have the right to request access to a copy of the personal information we hold on you, along with information on what personal information we use, why we use it, who we share it with and how long we keep it for. The access is free of charge and the request must be made in writing, together with proof of your identity.

Right to object

You can object to our processing of information where we are relying on a legitimate interest and there is something about your particular situation which makes you want to object to processing on this ground. Please contact as above giving details of your objection.

Consent

If you have given consent for us to use your personal information you can withdraw consent at any time.

Rectification

You can ask us to change or complete any inaccurate or incomplete personal information held about you.

Erasure

You can ask us to delete your personal information where it is no longer necessary for us to use it, or you have withdrawn consent, or where we have no lawful basis for keeping it.

Restriction

You can ask us to restrict the personal information we hold about you where you have asked for it to be erased or where you have objected to us using it.

REVISION TO PRIVACY POLICY

We may update the Privacy Policy and will inform you if we do this.