Our Scheme's in partnership with Aurum Housing CIC. Richmond Road is conveniently located in Olton Solihull with easy access to local amenities. The scheme contains 8 single bedroom self-contained flats with the ground floor being adapted to meet the needs of people with physical disabilities. The scheme benefits from a private rear garden and extensive parking facilities. Richmond Road has access to care and support 24 hours a day 7 days a week.
DATA PROTECTION PRIVACY NOTICE
Introduction: This privacy notice lets you know what happens to any personal data that you give to us, or any information that we may collect from you or about you from other organisations. This privacy notice applies to personal information processed by or on behalf of the Scheme Operator, the Auxilio Care Ltd. The General Data Protection Regulation (GDPR) and the Data Protection Act 2018 (DPA 2018) became law on 25th May 2018. The GDPR is a single EU-wide regulation on the protection of confidential and sensitive (special) information, the DPA 2018 deals with elements of UK law that differ from the European Regulation, both came into force in the UK on the 25th May 2018, repealing the previous Data Protection Act (1998). For the purpose of applicable data protection legislation (including but not limited to the General Data Protection Regulation (Regulation (EU) 2016/679) (the "GDPR"), and the Data Protection Act 2018 the Scheme responsible for your personal data is Auxilio Care Ltd. This Notice describes how we collect, use and process your personal data, and how in doing so, we comply with our legal obligations to you. Your privacy is important to us, and we are committed to protecting and safeguarding your data privacy rights.
HOW WE USE YOUR INFORMATION AND THE LAW.
Auxilio Care Ltd will be what’s known as the ‘Controller’ of your personal data. We collect basic personal data about you and location-based information. This does include name, address and contact details such as email and mobile number etc. We will also collect sensitive confidential data known as “special category personal data”, in the form of health information, religious belief (if required in a healthcare setting) ethnicity and sex life information that are linked to your healthcare, we may also receive this information about you from other health providers or third parties. Your information will be shared between the Auxilio Group of companies but only if required for the purposes of supporting your care services within the scheme.
WHAT PERSONAL INFORMATION DO WE COLLECT?
We may collect some or all of the following personal data (this may vary according to your relationship with us):
- Basic personal information, including name and address, date of birth and contact details
- Financial information, including account and transactional information and history
- Information about you and your family (such as dependents, marital status, next of kin and contact details)
- Information about your preferences and interests
- Visual images (such as copies of passports)
- details of any services you have received from us
- Information we receive from other sources, such as government departments and healthcare providers
- Referral/Assessment Information
- Details of any medical conditions, including physical and mental health
- Safeguarding information
- Details of any support received, including care packages and plans
- Relevant information from other health professionals and relatives
Service Users – as a care provider, we must collect some personal information on our service users, including personal health information, which is essential to our being able to provide effective care and support. The information is contained in individual files (manual and electronic) and other record systems, all of which are subject to strict security and authorised access policies. Employees and volunteers – the service operates a recruitment policy to comply with the regulations in which all personal information obtained, including CVs and references, is, as with service users information, securely kept, retained and disposed of in line with the GDPR. All employees are aware of their right to access any information about them.
Third parties – all personal information obtained about others associated with the delivery of the primary care service, including contractors and suppliers will be protected in the same way as information on service users and employees.
Sometimes your personal data is obtained from the following third parties (depending on your relationship with us)
- HMRC, DWP and other government departments
- NHS, CQC and healthcare providers
- local authorities
- emergency services
- suppliers
We may also process certain sensitive categories of information for specific and limited purposes, such as making our services accessible to service users. We will only process special categories of information where we’ve obtained your explicit consent or are otherwise lawfully permitted to do. This may include:
- information about racial or ethnic origin, religious, political or philosophical beliefs
- physical or psychological health details or medical conditions
HOW WE COLLECT INFORMATION?
The bulk of service user, employees and third parties personal information is collected directly from them or through form filling, mainly manually, but also electronically for some purposes from health care professionals. With service users, we might continue to build on the information provided through consultations and in the process of agreeing care.With employees, personal information is obtained directly and with consent through such means as references, testimonials and criminal records (DBS) checks. When recruiting staff, we seek applicants’ explicit consent to obtain all the information needed for us to decide to employ them. All personal information obtained to meet our regulatory requirements will always be treated in line with our explicit consent, data protection and confidentiality policies.
HOW DO WE PROCESS (USE) YOUR INFORMATION?
Under the GDPR, we must always have a lawful basis for using personal data. This may be because the data is necessary for our performance of a contract with you, because you have consented to our use of your personal data, or because it is in our legitimate business interests to use it.
Your personal data may be used for any of the following purposes:
- providing and managing your account
- supplying our services to you
- enter into a contract with you
- personalising and tailoring our services for you
- communicating with you. This may include responding to emails or calls from you
- supplying you with information by email AND/OR post that you have opted-in to (you may unsubscribe or opt-out at any time by contacting us)
With your permission and/or where permitted by law, we may also use your personal data for marketing purposes, which may include contacting you by email/telephone/text message and post with information, news, and offers on our products and services. You will not be sent any unlawful marketing or spam. We will always work to fully protect your rights and comply with our obligations under the GDPR and the Privacy and Electronic Communications (EC Directive) Regulations 2003, and you will always have the opportunity to opt-out.
Legal justification for collecting and using your information: The law says we need a legal basis to handle your personal and healthcare information.
Contract: We have a contract with you or the NHS/Local Authority to deliver care services to you. This contract provides that we are under a legal obligation to ensure that we deliver medical and healthcare services to the public.
Consent: Sometimes we also rely on the fact that you give us consent to use your personal and healthcare information so that we can take care of your physical and psychological healthcare needs.
Please note that you have the right to withdraw consent at any time if you no longer wish to receive services from us.
Necessary care: Providing you with the appropriate, where necessary. The Law refers to this as ‘protecting your vital interests’ where you may be in a position not to be able to consent.
Law: Sometimes the law obliges us to provide your information to an organisation (see above).
Special categories: The law states that personal information about your health falls into a special category of information because it is very sensitive. Reasons that may entitle us to use and process your information may be as follows:
Public Interest: Where we may need to handle your personal information when it is considered to be in the public interest. For example, when there is an outbreak of a specific disease and we need to contact you for treatment, or we need to pass your information to relevant organisations to ensure you receive advice and/or treatment.
Consent: When you have given us consent.
Vital Interest: If you are incapable of giving consent, and we have to use your information to protect your vital interests (eg if you have had an accident and you need emergency treatment).
Defending a claim: If we need your information to defend a legal claim against us by you, or by another party.
Providing you with care: Where we need your information to provide you with care services.
HOW LONG WILL WE STORE YOUR INFORMATION?
We keep personal information about individuals’ in our supported living services whilst they are receiving a service from us. Once they leave, we keep the relevant personal information required within the client care file in order to comply with our legal obligations under the relevant data protection legislation. Personal information that becomes inactive for any reason is kept securely only for as long as it is needed, before being safely disposed of.
HOW CAN YOU ACCESS, AMEND MOVE THE PERSONAL DATA THAT YOU HAVE GIVEN TO US?
Even if we already hold your personal data, you still have various rights in relation to it. To get in touch about these, please contact us. We will seek to deal with your request without undue delay, and in any event in accordance with the requirements of any applicable laws. Please note that we may keep a record of your communications to help us resolve any issues which you raise.
Right to object: If we are using your data and you do not agree, you have the right to object. We will respond to your request within one month (although we may be allowed to extend this period in certain cases). This is NOT an absolute right sometimes we will need to process your data even if you object.
Right to withdraw consent: Where we have obtained your consent to process your personal data for certain activities (for example for a research project, or consent to send you information about us or matters you may be interested in), you may withdraw your consent at any time.
Right to erasure: In certain situations (for example, where we have processed your data unlawfully), you have the right to request us to "erase" your personal data. We will respond to your request within one month (although we may be allowed to extend this period in certain cases) and will only disagree with you if certain limited conditions apply. If we do agree to your request, we will delete your data but will need to keep a note of your name/ other basic details on our register of individuals who would prefer not to be contacted. This enables us to avoid contacting you in the future where your data are collected in unconnected circumstances. If you would prefer us not to do this, you are free to say so.
Right of data portability: If you wish, you have the right to transfer your data from us to another data.
ACCESS TO YOUR PERSONAL INFORMATION
Data Subject Access Requests (DSAR): You have a right under the Data Protection legislation to request access to view or to obtain copies of what information the Scheme holds about you and to have it amended should it be inaccurate. To request this, you need to do the following:
- Your request should be made to the Care Home. (For information from a hospital or other Trust/ NHS organisation, Care Organisation, or the Council, then you should write directly to them.)
- There is no charge to have a copy of the information held about you.
- We are required to provide you with information within the relevant period under legislation, which is usually one month.
- You will need to give adequate information (for example full name, address, date of birth, NHS number and details of your request) so that your identity can be verified, and your records located information we hold about you at any time.
DO WE SHARE YOUR DATA?
We only share the personal information of service users, employees and others with their consent on a “need to know” basis, observing strict protocols in doing so. Most information sharing of service user’s information is with other professionals and agencies involved with their care and treatment. Likewise, we would not disclose information about our employees without their clear agreement, e.g. when providing a reference.
In some limited circumstances, we may be legally required to share certain personal data, which might include yours, if we are involved in legal proceedings or complying with legal obligations, a court order, or the instructions of a government authority.
Where we provide information for statistical purposes, the information is aggregated and provided anonymously so that there is no privacy risk involved in its use.
If any of your personal data is required by a third party, as described above, we will take steps to ensure that your personal data is handled safely, securely, and in accordance with your rights, our obligations, and the third party’s obligations under the law, as described above.
If any personal data is transferred outside of the EEA, we will take suitable steps in order to ensure that your personal data is treated just as safely and securely as it would be within the UK and under the GDPR, as explained above.
WHAT SHOULD YOU DO IF YOUR PERSONAL INFORMATION CHANGES?
You should tell us so that we can update our records please contact the Scheme/Registered Manager as soon as any of your details change, this is especially important for changes of address or contact details (such as your mobile phone number), the Scheme will from time to time ask you to confirm that the information we currently hold is accurate and up-to-date.
CCTV recording : CCTV is installed on our premises covering both the external area of the building and the internal area excluding consulting rooms. Images are held to improve the personal security of patients and staff whilst on the premises, and for the prevention and detection of crime. The images are recorded onto an integral hard drive of the equipment and are overwritten on a rolling basis. Viewing of these digital images is password protected and controlled by the Scheme Manager.
Telephone system: Our telephone system records all telephone calls. Recordings are retained for up to three years, and are used periodically for the purposes of seeking clarification where there is a dispute as to what was said and for staff training Access to these recordings is restricted to named senior staff.
Objections / Complaints : Should you have any concerns about how your information is managed at the Home, please contact the Care Home Manager or the Data Protection Officer as above. If you are still unhappy following a review by the HOME Care Home, you have a right to lodge a complaint with a supervisory authority: You have a right to complain to the UK supervisory Authority as below.
Information Commissioner:
Wycliffe house
Water Lane
Wilmslow
Cheshire
SK9 5AF
Tel: 01625 545745
https://ico.org.uk/
If you are happy for your data to be used for the purposes described in this privacy notice, then you do not need to do anything. If you have any concerns about how your data is shared, then please contact the Care Home Data Protection Officer.
If you would like to know more about your rights in respect of the personal data, we hold about you, please contact the Data Protection Officer as below.
Data Protection Officer:
The Scheme Data Protection Officer is Paul Couldrey of PCIG Consulting Limited. Any queries regarding Data Protection issues should be addressed to him at: -
Postal:
PCIG Consulting Limited
7 Westacre Drive
Quarry Bank
Dudley
West Midlands
DY5 2EE
CHANGES
It is important to point out that we may amend this Privacy Notice from time to time. If you are dissatisfied with any aspect of our Privacy Notice, please contact the Scheme Data Protection Officer.
