PRIVACY NOTICE

Your privacy is important to Beaumont Court Care Home. So, we’ve developed a Privacy Notice that explains how we collect, record, use and protect your information. Please take a moment to familiarise yourself with our privacy practices andlet us knowif you have any questions.

Who are we?

Our contact details are:
Beaumont Court Care Home
North Petherwin
Launceston
Cornwall
PL15 8LR
Email:
Phone:01566 785 350
/ We offer the following services:
  • Day care
  • Residential care
  • Respite care

Who does this Notice apply to?

This Privacy Notice tells you what to expect when we collect personal information from you as a data subject. It applies to information we collect about our residents, day care service users and their family members/next of kin (NOK).

Data we collect from you and/or about you

We may collect the following personal data from family members and NOK:

  1. Your full name, address and contact details.
  2. CCTV and visitor records

We may collect the following personal data from our residents and day guests:

  1. Your full name, address and contact details
  2. Date of birth
  3. NHS number
  4. Life histories including details of previous occupation
  5. NOK and emergency contact details
  6. Photographs
  7. Financial details
  8. CCTV

We may collect the following special category data from our residents and day guests:

  1. Height and weight
  2. Advance Care plan information
  3. Religious or similar beliefs
  4. Marital status
  5. Capacity assessments
  6. Physical or mental health conditions
  7. Medication requirements
  8. Medical, dietary and mobility details provided to us before, during or after any stay with us in one of our services;

We may collect the following personal data about our residents and day care service users from the following third parties:

Personal data type: / Source :
Medical Records / NHS Services, Healthcare Professionals
Financial details (bank account numbers) / Power of Attorney, Independent Mental Capacity Advocate and/or Care Quality Commission
Funding arrangements / Social Services, Power of Attorney, Next of Kin

Why do we collect this data?

The personal data we collect may be used for the following purposes:

  1. To enable us to assist in assessments for pre-admission to the home.
  2. To provide on-going care and treatmentto our residents and day guests.
  3. If you are the next of kin or person with power of attorney, then your details are required to ensure that we can get the necessary authority in respect of the care services we are providing to the person under your authority.
  4. To contact family members and NOK regarding the resident or day guest in the event of an emergency.
  5. To fulfil our contract for the provision of our services and adapting those services as residents’ and day guests’ needs change.
  6. In medical situations to ensure that we have the necessary medical information about residents and day guests to be able to pass onto medical professionals if necessary.
  7. To comply with the law and government defined care service regulations and/or standards such as those regulated and inspected by the Care Quality Commission.
  8. Managing the health, welfare, safety and security of our residents and individuals we support.
  9. Handling enquiries, complaints and investigations.
  10. Monitoring and improving the quality of our services.
  11. For health and safety purposes to ensure that we have a record of all of our visitors.
  12. To investigate an incident using our CCTV footage and to for security measures.

What are our legal bases for processing?

We will only ask for information relevant to the service(s) we are providing you in order to: deliver those services to you; to comply with your wishes; or to ‘protect life’. Subsequent processing will only be carried out where it is appropriate or where we are legally obliged to as part of our industry compliance requirements, where we are providing you a benefit by way of your contract or where we need to protect the interests of the company.

The legal basis of processing your personal information is explained below:

Legal Basis / Explanation / Examples
Contractual Obligation / When we have a contract with you to provide care and/or support services. / Providing residential care and/or nursing care.
Administering your medication.
Legal Obligation / This is where we may have a legal obligation to comply with current law, industry compliance requirements, court order etc. / To comply with the Health & Social Care Act and the Care Quality Commission Standards.
Providing funding agencies with information about the services we are providing you, in the event that they are paying for those services.
Where we are required to be able to demonstrate skills and competences of our staff to comply with industry or legal requirements.
Vital Interest / Where the collection or sharing of information is in the vital interest to you or other members of the public, including staff or clients. / Obtaining your next of kin details.
Sharing appropriate identity/ information with a medical provider (ambulance, doctor, hospital etc.) in the event you are taken ill.
Where your condition may represent a threat to the interests, rights and freedoms of other people e.g. if you have a communicable disease and we believe your condition may represent a risk to other residents.
Using CCTV cameras to ensure that our staff feel safe and secure in their working environment and we can investigate any incidents should we need to.
Consent / Where the processing or sharing of your information is based on you explicitly consenting to such sharing or processing. / Sharing your information with a religious representative.
Sharing your information with certain third-party services e.g. chiropodist, hairdresser.
Using your photographs and/or life histories for social media, our website, newspapers, newsletters, life histories or other marketing material.

There are specific conditions that we must satisfy to process your special category data. We may process your special category data if:

  1. We have explicit consent;
  2. Processing is necessary for the purposes of provision of health or social care or treatment or the management of health or social care systems and services; and/or
  3. processing is necessary to protect the vital interests of the data subject or of another natural person where the data subject is physically or legally incapable of giving consent.

Who might we share your data with?

We may share your data with the following third-parties:

  • Where you are a resident or day care service user, your next of kin or named family member.
  • Any person that you have appointed to act on your behalf pursuant to a valid Power of Attorney, where you are a resident in or day care service user.
  • Accreditations/auditors – where we are required to comply with industry requirements. We may need to share only data that is limited to fulfilling that purpose necessary to demonstrate compliance. This may therefore fall under the category of legitimate interest or legal obligation, depending on the nature of the audit/compliance requirement.
  • Government services – HMRC, pensions & national insurance, Care Quality Commission, etc. – as required by law or order.
  • Health care providers for the provision of your care or in the case of an emergency.
  • Organisations and consultants providing contracted services to us (for example, information technology service providers who provide and maintain our systems and our website hosting). Where these companies and consultants do provide services to us, will only use your information in compliance with the GDPR (UK Data Protection act 2018).
  • Care services, e.g. social services, mental health services where necessary.
  • Police, in the event of any matters involving the law.
  • Professional and legal advisers, the courts in the United Kingdom or abroad as necessary to comply with a legal requirement, for the administration of justice, to protect vital interests and to protect the security or integrity of our business operations.
  • Emergency services in the event of a medical emergency.
  • GP or dentist if necessary for your health and wellbeing.
  • Insurers as and when required for insurance purposes.
  • Payment processors – to enable us to process your care payments.
  • Funding services e.g. organisations that are paying or contributing to your care funding, individuals (such as relatives) who may be funding or contributing to your care funding.

How long do we retain your data for?

Residents and day guests: 7 years all records

  • If you participate in any pre-admission assessment but do not go on to become a resident within Beaumont Court Care Home, we will keep your information for only for as long is necessary to enable us to be compliant with our legal obligations.
  • If you become a resident at a Beaumont Court Care Home, we keep your information only for as long as you continue to be a resident, then for a maximum of 7 years to meet our legal obligations.

NOK/family members:

  • If we have your personal data on file we will keep for information only for as long as your family member is using our services, then for a maximum of 7 years to meet our legal obligations and to ensure that our records remain complete for your family member.

How do we keep your confidential information secure?

We have appropriate security measures in place to prevent personal information from being accidentally lost, or used or accessed in an unauthorised way. We limit access to your personal information to those who have a genuine need to know it. Those processing personal information will do so only in an authorised manner and are, where possible, subject to a duty of confidentiality.

We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.

What happens if you don’t provide you with the data?

If the provision of personal data is part of the contractual requirement between us and you there may be possible consequences of failing to provide the personal data. For example, we will be unable to perform the contract if we do not have the personal data requested from you or we may be unable to provide you with the services that you have requested and provide you with the necessary care and support.

What are your rights?

At any point while we are in possession of or processing your personal data, you, the data subject, have the following rights:

  1. Right of access – You have the right to confirmation as to whether or not we process your personal data and, where we do, access to the personal data, together with certain additional information. That additional information includes details of the purposes of the processing, the categories of personal data concerned and the recipients of the personal data. You have the right to request a copy of the information that we hold about you and providing the rights and freedoms of others are not affected, we will supply to you a copy of your personal data within one month of your request.
  1. Right of rectification – you have a right to correct data that we hold about you that is inaccurate or incomplete. The information we hold will be accurate and up to date. You can check the information that we hold about you by e-mailing us. If you find any inaccuracies we will delete or correct it promptly.
  1. Right to be forgotten – in certain circumstances you can ask for the data we hold about you to be erased from our records. Those circumstances include: the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; you withdraw consent to consent-based processing; the processing is for direct marketing purposes; and the personal data have been unlawfully processed. However, there are certain general exclusions of the right to erasure. Those general exclusions include where processing is necessary: for exercising the right of freedom of expression and information; for compliance with a legal obligation; or for the establishment, exercise or defence of legal claims.
  1. Right to restriction of processing – where certain conditions apply to have a right to restrict the processing. Those conditions are: you contest the accuracy of the personal data; processing is unlawful but you oppose erasure; we no longer need the personal data for the purposes of our processing, but you require personal data for the establishment, exercise or defence of legal claims; and you have objected to processing, pending the verification of that objection. Where processing has been restricted on this basis, we may continue to store your personal data. However, we will only otherwise process it: with your consent; for the establishment, exercise or defence of legal claims; for the protection of the rights of another natural or legal person; or for reasons of important public interest.
  1. Right of portability – you have the right to have the data we hold about you transferred to another organisation. This right only applies to personal that you have provided to us, where the processing is based on your consent or for the performance of the contract and when processing is carried out by automated means.
  1. Right to object – you have the right to object to certain types of processing only to the extent that the legal basis for the processing is that the processing is necessary for: the performance of a task carried out in the public interest or in the exercise of any official authority vested in us; or the purposes of the legitimate interests pursued by us or by a third party. If you make such an objection, we will cease to process the personal information unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the establishment, exercise or defence of legal claims. If you object to direct marketing we will cease to process your personal data for this purpose.

If you wish to enforce any of your rights listed above please email us or write to us using the contact details under “Who are we?”.

All of the above requests will also be forwarded on should there be a third party involved in the processing of your personal data (as identified under “Who might we share your data with?”).

What if you have a complaint?

In the event that you wish to make a complaint about how your personal data is being processed by us, or how your complaint has been handled, you have the right to lodge a complaint directly with the supervisory authority using the contact details below.

UK’s Supervisory Authority:

Address:

Customer Contact

Information Commissioner's Office

Wycliffe House

Water Lane

Wilmslow

SK9 5AF

Email:

Changes to this privacy notice

We reserve the right to update this Privacy Notice at any time. You should check this page occasionally to ensure you are happy with any changes to this Notice.

We may notify you of changes to this Notice by providing you with a new Privacy Notice when we make any substantial updates.

We may also notify you in other ways from time to time about the processing of your personal information.