Name of company
Innovation Healthcare recruitment
6 Chevinedge Crescent, Exley Siddal, Halifax, United Kingdom, HX3 9EQ
Business ID no.
What information does the organisation collect?
The organisation collects and processes a range of information about you. This includes:
The organisation may collect this information in a variety of ways. For example, data might be collected through local authority social services, service contracts, from yourself, from professionals with whom you work or from your next of kin.
Data will be stored in a range of different places, including in your client file, in the organisation’s care computer system, Within a secured application on your carer’s electronic monitoring device and in your client service user guide in your home.
The reasons why Innovation Healthcare collects personal information
We collect personal data to enable us to fulfil our legitimate business needs, such as:
Our legal basis for processing your personal data?
The organisation needs to process data to enter into a service care contract with you and to meet its obligations under the contract. For example, it needs to process your data to provide you with a service delivery care plan and to invoice you in accordance with your care contract.
In some cases, the organisation needs to process data to ensure that it is complying with its legal obligations. For example, CQC/CIW (Care Quality Commission/ Care Inspectorate Wales) requires us to hold care delivery records/ medical information/ record of medicines, and health and safety records regarding accidents and incidents through the duration of your contract. In other cases, where the organisation has a legitimate interest in processing personal data. This processing may occur before, during and after the end of your care service contract, but will only be performed for legitimate purposes as outlined within this policy document
Processing client data allows the organisation to:
Some special categories of personal data, such as information about health or medical conditions, is required for the delivery of care.
Where the organisation processes other special categories of personal data, such as information about ethnic origin, sexual orientation, health or religion or belief, this is done for the purposes of equal opportunities monitoring. Data that the organisation uses for these purposes is anonymised or is collected with your express consent,
which can be withdrawn at any time. Clients are entirely free to decide whether or not to provide such data and there are no consequences of failing to do so.
Who has access to your data?
Your information may be shared internally, including with members of the local care team for the delivery of care, also Care managers within the organisation and appropriate IT staff if access to the data is necessary for the performance of their roles.
The organisation may share your data with third parties in order to obtain information in relation to your care package (GP’s, hospital discharge teams, district nurses etc)
The organisation also shares your data with third parties that process data on its behalf, in connection with invoicing (social services, local authorities, solicitors, health insurance companies)
How does the organisation protect your data?
The organisation takes the security of your data seriously. The organisation has internal policies and controls in place to try to ensure that your data is not lost, accidentally destroyed, misused or disclosed, and is not accessed except by its employees in the performance of their duties. Please refer to our Policies – Protecting Personal Data under the General Data Protection Regulation Policy, Computer Security Policy, Policy re Own Device and our Email Policy all of which are available upon request.
Where the organisation engages third parties to process personal data on its behalf, they do so on the basis of written instructions, are under a duty of confidentiality and are obliged to implement appropriate technical and organisational measures to ensure the security of data.
For how long does the organisation keep data?
The organisation will hold your personal data for the duration of your care. The periods for which your data is held after the end of your care:
Personal Health & Care records: 3 years after we stop providing care
Financial Records: 3 years
The organisation may wish to contact you after you have left us as a client for marketing purposes or to inform you of a new service line that the organisation is now providing. The organisation will ask for your consent before it keeps your data for this purpose and you are free to withdraw your consent at any time.
As a data subject, you have a number of rights. You can:
We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your rights) This is an appropriate security measure to ensure that your personal information is not disclosed to any person who has no right to receive it.
If you believe that the organisation has not complied with your data protection rights, you can complain to the Information Commissioner.
What if you do not provide personal data?
You have some obligations under the service contract to provide the organisation with data.
Certain information, for example: medical and health information, next of kin contact details, financial details, is required to enable the organisation to enter a service care contract.
Your data is important to us and under no circumstances will we sell your data to a third party.