General Privacy Notice

At Springwood House Residential Home we take privacy very seriously and are currently updating all our records and processes to ensure that we are fully meeting the data protection standards introduced by the General Data Protection Regulation (GDPR) on 25 May 2018.

We are registered as data processors with the Information Commissioner’s Office (ICO).

The categories of information that we collect, hold and may share about service users, staff, family and friends include:

  • personal information (such as name, address, date of birth)
  • characteristics (such as ethnicity, language, nationality, country of birth).

Springwood House will ask for consent to process data about you or for somebody for which you have power of attorney. The type of data that is to be used, and how it is to be used will be specified on the consent forms. You have the choice to opt in for certain types of data usage, and this is made clear. However, some data that is collected and processed is not optional.

The lawful basis on which we use this information

We collect and use information under the following lawful bases established by the GDPR.

Legitimate interests

This means that the processing is necessary for legitimate interests except where the processing is unfair to you. Springwood House relies on legitimate interests for many of the ways in which it uses information. Specifically, we hve a legitimate interest in:

· Providing care services to service users

· Safeguarding and promoting the welfare of service users and and staff

· Ensuring the efficient operation of the Home

· Compliance with all relevant legal obligations of the school

· Keeping the whole Home informed about events, news and activities

Fulfilment of a contract

Information about individuals may be necessary to perform our obligations under our contracts to both service users and staff.

Legal obligation

The processing of data to comply with our legal obligations to organisations such as the Department for Work and Pensions or HMRC. We may also have to disclose information to third parties such as a Barring Service.

Public interest

Springwood House considers that it is acting in the public interest when providing care. Certain regulations, CQC and Local Authority, health and other guidance may require us to process data in the public interest.

Who we share information with

We routinely share information with:

  • local authorities
  • medical professionals such as the NHS, opticians, chiropodists
  • government departments such as HMRC, CQC

Why we share information

We do not share information with anyone without your consent unless the law and our policies allow us to do so.

We are required to share certain data with official bodies (such as HMRC or the Department for Work and Pensions (DWP)) on a statutory basis.

Data collection requirements

To be granted access to any information we hold, organisations must comply with strict terms and conditions covering the confidentiality and handling of the data, security arrangements and retention and use of the data.

We do not keep data for any longer than necessary and do not allow its use for any purpose other than that for which it has been collected. Should new processes be introduced into the organisation or innovative uses of the data we hold, you will be kept informed at each stage.

Requesting access to your personal data

Under the GDPR, you have the right to request access to information about you that is held by Springwood House Residential Home. To make a request for your personal information, contact Stephen Jephson who will deal with the request within 30 days.

You also have the right to:

  • object to processing of personal data that is likely to cause, or is causing, damage or distress
  • prevent processing for the purpose of direct marketing
  • object to decisions being taken by automated means and
  • in certain circumstances, have inaccurate personal data rectified, blocked, erased or destroyed.

If you have a concern about the way we are collecting or using your personal data, we request that you raise your concern with Stephen Jephson in the first instance. This does not affect your right to complain to the Information Commissioner’s Office (ICO) (ico.org.uk).