The following explains how we collect, store and handle your personal data.
Why we collect your data
We collect your data when you receive a service from us (for example a private care package or service delivered through a Local Authority contract) or if you are employed by the company. This is so that we can fulfill the contracted service. We only keep that data for as long as we need to, for example:
- Where a service is received we will retain your data for no longer than 4 years after the service has been ceased – this is in order to comply with our legal and regulatory requirements. After that time your data will be securely disposed of.
- If you are employed by the company, we will hold your data in line with statutory requirements and for no more than 7 years after your employment ceases with the company. After that time your data will be securely disposed of.
How we collect your data
We do this in a number of ways, including where you share information with us. Such as when you:
- Purchase a care and support package with us
- Complete an application form
- Make an enquiry through our website
- Ask us to forward information
- Provide us with details of delegates booked on to training courses
We treat your data with the utmost care and take appropriate steps to protect it.
When we’ll share your data
We will only share your data with third parties where it is essential. Possible examples include:
- Giving your address to a member of staff that needs to visit you to provide a service
- Giving your name, and job title to a trainer when you are attending an external training course so they can record attendance
- Giving your address to emergency services in the event it is necessary
- Giving your name, and telephone number to authorities as part of a safeguarding investigation.
Because the data we hold about you is your data, you have the following rights in respect of the personal data we hold about you:
Right to Access – this means you can ask us for a copy of all the personal data we hold about you at any time. We will provide you with this within one month of request and it is free of charge.
Correction Right – if you believe any of the information we hold about you is incorrect or out of date, you have the right to correct such information by providing us with the correct up to date information. In addition, you can ask us to delete the incorrect or out of date information and we will be happy to do so unless we are prevented from doing so by law or regulation.
Right to Restrict Processing – in some limited circumstances you have the right to restrict the processing of your data. See examples below:
- If you want us to establish the data’s accuracy.
- Where you need us to hold the data even if we no longer require it as you need it in relation to any legal claims.
- You have objected to our use of your data, but we need to verify whether we have overriding legitimate grounds to use it.
Right of Objection to Processing – you have the right to object to us using your data for direct marketing purposes.
Right of Data Portability – you have the right to request a copy of the personal data we hold about you in a commonly used and machine-readable format.
Automated Decision-Making Objection Right – automated decision-making is where a decision is made entirely by technology without human intervention. We do not use any such technology.
Right to be Forgotten – you have the right to ask us to delete the data we hold about you. Please note that where we are obliged to keep your personal data because of a regulatory or legal requirement, we will not be able to delete that data and must continue to retain it.
If you would like to exercise any of the above rights, please contact Richard Smith, Managing Director, in writing: firstname.lastname@example.org or Way Ahead Care, 1-3 the Courtyard, Higher Comeytrowe, Taunton, Somerset, TA4 1EQ.
Right to Complain
If you have any concerns about our handling of your data, you have the right to complain to the Information Commissioner’s Office (“ICO”) www.ico.org.uk