The purpose of this privacy notice is to ensure personal data processed by Springcare Ltd is done so in a lawful, fair and transparent way in relation to the data subject and that individuals are well informed about the collection and use of their personal data.
Springcare Ltd are a limited company registered in England under company number 01588942. Our registered office is Nicholson House, Shakespeare Way, Whitchurch, Shropshire SY13 ILJ.
Springcare Ltd is registered with the Information Commissioners Office as a data controller (ICO) with number Z3363995 and we also hold individual registrations for each company in the Springcare group. Lee Cox, Managing Director is the nominated data protection officer and can be contacted on firstname.lastname@example.org
We are regulated by the Care Quality Commission (CQC) in England.
Personal data is another way to describe personal information. It is any information that is about you that allows you to be identified. Personal data covers simple information such as your name, email, phone number, but can also include details such as reference numbers, location and other identifiers used by computers.
Springcare Ltd may collect the following personal information about you:
Springcare Ltd may also need to collect some information about you which is particularly sensitive. This type of information is called special category personal data whereby the law states that we can only collect and use this kind of information for very specific legal reasons, such as providing your care or supporting other organisations with their enquiries such as safeguarding or the police.
Types of special category personal data that Springcare may collect and use:
We may also need to collect your data from other people such as:
We need to use personal information to ensure we are delivering the most appropriate safe care and support to our residents, The information we use will sometimes be held on a computer , hand held electronic device or as a paper record.
People will only be allowed to access your information when they have the correct level of authorisation to do so.
Your personal information can be used for any of the following purposes:
Springcare Ltd must have a legal reason to collect and use your information. We will use different reasons, depending upon its purpose. This must be explained to you when, or as soon as possible after, we collect your information, or when it is given to us by someone else.
Where Springcare must use information that is particularly sensitive, we must have additional legal reasons to collect and use your information.
On occasions, Springcare may be asked to give your personal information or need to collect it from other organisations. These can include:
Any companies we employ who use your personal information are responsible to you through legal agreements with Springcare around Data Protection such as:
Springcare will only seek consent/permission to collect, use and share your personal information where you have freedom of choice about how your information is used, such as when you are completing a survey or questionnaire.
Where you do not have such freedom over how your information is used, we will use a different legal reason to collect, use and store your information.
If you decide not to provide us with your information, this can make it difficult for the Company to assist you during your interactions with us.
The national data opt-out gives everyone the ability to stop health and social care organisations from sharing their confidential patient information for reasons other than providing their individual care and treatment. The national data opt-out only applies where the data processing relies upon Regulation 5 of the Control of Patient Information Regulations 2002. An example of this would be for participation in research with an University.
Individuals can view or change their national data opt-out choice at any time by using the online service at www.nhs.uk/your-nhs-data-matters or by calling 0300 303 5678 (normal office hours).
It applies to our Springcare as we are a CQC adult registered provider in England but is only relevant where an individual is receiving social care that is provided, arranged or funded (in part of full) by local authorities or the NHS.
Springcare reviews all our data processing on an annual basis to assess if the national data opt-out applies. This would be recorded in our Record of Processing Activities. All new processing is assessed to see if the national data opt-out applies.
The Messaging Exchange for Social Care and Health can be used to check if any of our service users have opted out of their data being used if our data flows were to be used for research/ planning etc
At this current time, we do not share any data for planning or research purposes for which the national data opt-out would apply.
Springcare will be legally required to share certain personal information with a third party by law, and sometimes without your knowledge. For example, we are required by law to tell the care regulators if certain incidents have happened. We will always look to provide this information in a way that reduces any risks to your privacy, but this is not always possible.
Under the law, you have certain rights in relation to your personal information and whereby Springcare must:
Please contact us if you would like to exercise any of your rights by writing to:
Data Protection Officer, Springcare Ltd, Nicholson House, Shakespeare Way, Whitchurch, Shropshire SY13 1LJ or email email@example.com
We may transfer data between other Springcare Homes and our Head Office. Data will be sent electronically and safely. Transferring of data may also be needed to local authorities and the NHS, this will be done using the NHS secure encrypted email platform or other secure method.
Paper documents such as a Medication Administration Record may need to be passed to ambulance transfer crews in the event of hospital attendance for an planned or unplanned visit. This will be handed to the transfer professional in a sealed envelope.
We do not routinely transfer data outside the European Union (EU), however one exception would be if we need to contact your family member(s) who reside out of the EU. Should this be the case we will do so in line with data protection laws.
Personal information that we are no longer using is kept securely only for as long as it is needed, or is required by law, before being safely destroyed.
The duration for which your personal information is kept will depend on our reason
for collecting it and is defined in Springcare “Records Retention and Destruction
We apply high security standards to the information we handle (including personal data) to prevent information from being accidentally lost, or used, accessed or disclosed in an unauthorised way. These measures include the use of technology and other precautions such as the control of access to our care homes, offices and systems.
Our IT service providers have secure access to data although strictly limited to IT support and we have contracts in place detailing confidentiality obligations. Our systems are regularly checked to ensure we comply with privacy standards.
Springcare currently uses CCTV in some of its care homes in order to provide reassurance to residents and their relatives, protect homes from unlawful intrusion and assist incidents that fall within the scope of safeguarding where concerns have been raised.
Cameras are only to be used in communal areas and our policy and processes are in place to comply with data security.
Springcare uses social media such as Facebook and Twitter to keep families and the public up to date with what is going on in our homes. We will never use photographs of residents, families or staff without seeking explicit consent to do so.
If you have any concerns about the way which we are using your personal information, please contact the Springcare DPO on firstname.lastname@example.org
A further option to register a complaint is via the Information Commissioners Office on 0303 123 1113 or ICO, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
Our website includes links to third party sites and applications such as the Care Quality Commission. Clicking links may allow third parties to collect or share data about you. You should read other statements on other websites carefully.
We also operate cookies on our website which are used to analyse how people view our information. This information is coded data and does include any personal information that could identify you.
Analytics cookies allow us to track the use and performance of our website and services.
Springcare reserves the right to update and amend any of the policy content in line with changes to our business or any regulatory changes which inform our practice.