Privacy Policy
ALDBOURNE NURSING HOME PRIVACY NOTICE
This Privacy Notice outlines how we collect, use, and protect personal information in compliance with the Data Protection Act 2018 (DPA 2018) and the UK General Data Protection Regulation (UK GDPR). These laws grant individuals rights concerning their personal data and impose obligations on organisations like ours to handle such data responsibly.
Information We Collect
In the course of our operations and the services we offer, we collect and process various types of personal information, including:
- Contact Details: Names, addresses, telephone numbers, email addresses, and other contact information of staff, residents, and, in some cases, their friends and relatives.
- Financial Information: Bank details and financial records.
- Employment Records: Personnel files, references, correspondence, and photographic images.
- Sensitive Information: Health records, ethnicity, religion, biometric data, sexual orientation, and criminal records (e.g., DBS checks).
The collection and processing of this information are essential to fulfil our legal and regulatory obligations as a registered provider and to ensure we meet the unique health and social care needs of our residents and staff.
Legal Bases for Processing
Under the DPA 2018 and UK GDPR, our legal grounds for processing personal data include:
- Contractual Necessity: Processing is necessary to fulfil our contractual obligations to residents and staff.
- Legal Obligations: Compliance with laws and regulations, such as the Health and Social Care Act 2008.
- Consent: Where explicit consent has been obtained for specific purposes.
- Legitimate Interests: Processing is necessary for our legitimate interests, provided these are not overridden by individuals’ rights and interests.
- Vital Interests: Processing is necessary to protect someone’s life.
- Public Task: Processing is necessary to perform a task in the public interest, with a basis in law.
Use of Resident Information
We may share residents’ information with:
- Health professionals (e.g., GPs, community nurses, social workers, hospitals).
- Local authorities, including social services.
- Designated individuals, such as Legal Power of Attorney (LPA) holders.
- Our staff, as necessary for care provision.
We will not share your information with anyone outside these parameters unless required by law.
Personal information is used to:
- Develop and review care plans.
- Monitor medication.
- Improve our services.
Care plans are regularly reviewed and updated in collaboration with residents, their representatives, and relevant professionals.
Use of Staff Information
Staff information may be shared with:
- Payroll and pension providers.
- Past or future employers/agencies.
- Regulatory bodies (e.g., Nursing and Midwifery Council).
Your Rights
You have rights under data protection law to:
- Access your personal data.
- Request correction or erasure of your data.
- Object to or restrict processing.
- Request data portability.
These rights are subject to certain conditions and exemptions. To exercise your rights or for any queries, please contact our Compliance Officer, Helen Peach, at [email protected] or call 01672 540919.
Cookies
Our website uses cookies to collect log information and monitor visitor behaviour. Cookies help us compile statistical reports on website activity. You can set your browser to accept or decline cookies; however, declining cookies may affect website functionality.
Policy Updates
Our Data Protection and Record Keeping Policies are regularly reviewed to reflect changes in legislation and best practices. The latest versions are available in our reception area or upon request.
Concerns and Complaints
If you have concerns about our data protection practices, please contact our administration team or use our complaints procedure. You can also refer complaints to the Information Commissioner’s Office (ICO) and access more information at www.ico.org.uk.
Reviewed:05/03/2025 Next review 05/03/2026