.1 We process personal information for a number of reasons. To provide our services to our residents, make sure we offer the best care, protection and support, meet legal and regulatory requirements, and perform our contractual service provision; support operational effectiveness and to ensure the health and safety of residents; staff and visitors. The list below outlines our main purposes for processing.
- Contractual Provision of Service
- Fulfilling our agreement to provide residency, care and ensure well-being of residents. Manage care plans
- Vital Interest
- Processing medical and emergency data to protect the life and well-being of our residents
- Legal & Regulatory Obligations
- Meeting regulations set by the Care Quality Commission (CQC) and complying with healthcare, employment, data protection and safeguarding laws and local authority regulations
- Legitimate Interests
- Keeping general administrative records and answering inquiries submitted via our website, email, phone or other communication channels. To keep residents, their families, and authorised individuals informed
- Safety and Security
- To safeguard residents, staff, and visitors, including the use of CCTV
- Billing and Administration
- To manage contracts, handle financials, and process payments
- Health and Safety
- To provide a safe environment and comply with public health guidelines
- Research
- To support studies that focus on enhancing health, care, and overall quality of life
- Service Improvement
- To support quality assurance and improve operational efficiency
- Marketing
- To provide updates and promotional material about our services and events
- Job Applications
- To manage recruitment processes and assess candidate suitability
- Consent
- Clear, recorded permission from you to process your data for a particular purpose.
Special category personal data: Explicit clear and recorded consent from you to process your sensitive personal data. - Public Interest
- To carry out lawful tasks that benefit society and the local community
.2 In accordance with the Data Protection Laws, we need a lawful basis for collecting and using information about you. These lawful bases are set out in Article 6 of the UK GDPR and, depending on the type of data, may require reliance on additional safeguards set out in Articles 9 and 10 of the UK GDPR and within the Data Protection Act 2018.
.3 Our Article 6 GDPR lawful basis for processing this type of data will depend on the circumstances, but will include the following (as appropriate):
.3.1 You have given us clear consent to process your personal data (in the circumstances where consent is the only available lawful basis) (Article 6(1)(a)) of the UK GDPR); or
.3.2 It is necessary in order for us to perform our contract for services with you/your loved one/your commissioning body (Article 6(1)(b) of the UK GDPR); or
.3.3 It is necessary to meet legal / regulatory obligations (Article 6(1)(c) of the UK GDPR); or
.3.4 It is necessary to protect your life (Article 6(1)(d) of the UK GDPR); or
.3.5 It is necessary for our legitimate interests (where they are not overridden by your rights) (Article 6(1)(f) UK GDPR).
.3.6 It is necessary for our compliance with Article 9 UK GDPR and additional date safeguards for special category personal data specified within the Data Protection Act 2018
.4 In rare cases, legal obligations or safeguarding requirements may override certain data protection rights, such as disclosing personal data without consent to support a legal investigation or protect an individual’s vital interests. In all such cases, we ensure disclosure is lawful and strictly necessary.
