Privacy Notice
It is important that you know we record your personal data when you are employed by Crosspath Care LTD or use our services both on and off line. We want you to trust us with that information. This privacy policy explains all you need to know about:
-
what information we collect
-
why we collect it
-
what we do with it
-
when we may share it with others
-
how you can access and update your information.
Crosspath Care maintains the highest standards of Care, trust and integrity in all we do. Likewise, we are dedicated to protecting our service users, staff and online visitor’s privacy.
​
YOUR PERSONAL DATA WHAT IS IT?
Personal data relates to a living individual who can be identified from that data, like their name, address, e mail address, telephone number and financial details. The processing of personal data is governed by the General Data Protection Regulation (“The GDPR”)
HOW DO WE PROCESS YOUR PERSONAL DATA.
Crosspath Care complies with its obligations under the GDPR by keeping personal data up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data.
We use your personal data for the following purposes:-
To maintain our own accounts and records.
To manage our Staff
To inform you of news, events, activities and services that Crosspath Care are running
To promote the interests of the Company and showcase what we do.
To administer client and staff records.
To enable us to provide a service for the benefit of the public as specified in our vision statement.
To operate the Crosspath Care website and deliver the services that individuals have requested.
​
HOW DO WE COLLECT INFORMATION FROM YOU?
We collect personal information directly from you when you are recruited as a member of staff or are referred to receive support from our service.
THE PERSONAL INFORMATION WE COLLECT.
Staff
The personal information we collect, and process will include your name and contact details including email address and mobile number. The information we collect might also include date of birth, interview answers, identity documents, DBS number, bank details, notes you make with clients, records of supervision, car insurance details, MOT, Holiday and sickness details, references, contract, application form, induction notes, training records, references and other documents relevant only to your employment with the company.
Service User
The personal information we collect, and process will include a comprehensive assessment that collects relevant information about our life including, address, date of birth, health, family, professionals involved, medication, support required, specific consents, needs, goals, risks and any information that is directly relevant to the benefit of the service you receive i.e. areas of interests. As well as the assessment we hold a file that contains the information of your referral, consent, care plan, contract, risk assessments and any accidents or incidents.
How we store your information
We ensure there are appropriate technical controls in place to protect your personal details, for example our online forms are always encrypted (this prevents other people accessing them) and our System is protected.
We regularly review who has access to information that we hold to ensure it is only accessible by trained and relevant staff.
We regularly review the information that we hold, and delete/Archive anything that is no longer required
SENSITIVE PERSONAL DATA
The Data Protection Act recognises some information as sensitive data. This includes but is not limited to information which reveals your religious beliefs, health issues, race or ethnic origin.
Crosspath Care will always treat any sensitive personal data we process with the greatest care and process the information in accordance with the Data Protection Act.
WHAT IS THE LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA?
Explicit consent of the data subject so that we can keep you informed about news, events, activities and services of Crosspath Care.
Processing is necessary for carrying out legal obligations in relation to employment, social security or social protection law, or a collective agreement.
Legitimate interest in the administration of referrals and volunteer application forms.
How can I access my information
This means you can ask us for a copy of all the personal data we hold about you. You can contact us on the details on the bottom of the policy we will typically respond within 5 working days to acknowledge we have received your request, we will follow up with the information you require within 40 working days, You can sign up to our current system on Nurse Buddy that allows you access to the majority of information that we hold about you, if this is something that you would be interested in please enquire.
SHARING YOUR PERSONAL DATA
Your personal data will be treated as strictly confidential, and will be shared only with the Management, administrator and staff team. We will only share your personal data with third parties with your consent, or if there is a legal reason to do so.
Legal reasons for sharing information
We will share personal information with companies, organisations or individuals outside of Crosspath Care if we strongly believe that access, use, storing or sharing of the information is reasonably necessary to:
-
meet any relevant law, regulation, legal process or lawful governmental request.
-
put in force relevant terms of service, including investigation of potential violations.
-
detect, prevent or otherwise address fraud, security or technical issues.
-
protect against harm to the rights, property or safety of Crosspath Care LTD, the people we support or the public, as required or permitted by law.
We know that legal details can be confusing. If any of the above needs further clarification please do not hesitate to get in touch.
HOW LONG DO WE KEEP YOUR PERSONAL DATA
We keep your personal data for no longer than is reasonably necessary for the purposes for which it was collected (unless otherwise advised) and in accordance with the Crosspath care GDPR Audit and records retention schedule. Sometimes we are obliged by law to keep your data for a certain length of time. Data will be kept securely and destroyed appropriately when no longer required. Crosspath Care will archive data that is no longer needed for day to day running but has a legal or legitimate value to the company.
​
YOUR RIGHTS AND YOUR PERSONAL DATA
Because the data we hold about you is your data, you have the following rights in respect of the personal data we hold about you:
​
-
Right to Access – this means you can ask us for a copy of all the personal data we hold about you.
-
Correction Right – if you believe any of the information we hold about you is incorrect or out of date, you have the right to correct such information by providing us with the correct up to date information. In addition, you can ask us to delete the incorrect or out of date information and we will be happy to do so unless we are prevented from doing so by law or regulation.
-
Right to be Forgotten – you have the right to ask us to delete the personal data we hold about you where such data is used for direct marketing purposes or is processed as a result of you consenting to such processing. Please note that where we are obliged to keep your personal data because of a regulatory or legal requirement, we will not be able to delete that data and must continue to retain it.
-
Right to Restrict Processing – in some limited circumstances you have the right to restrict the processing of your data. See examples below:
-
if you want us to establish the data’s accuracy;
-
where our use of the data is unlawful but you do not want us to erase it;
-
where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or
-
you have objected to our use of your data, but we need to verify whether we have overriding legitimate grounds to use it.
-
-
Right of Objection to Processing - you have the right to object to us using your data for direct marketing purposes and to profiling. For example, if there is something about your situation which makes you want to object to processing as you feel it impacts on your fundamental rights and freedoms. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
-
Right of Data Portability – you have the right to request a copy of the personal data we hold about you in a commonly used and machine-readable format. We can provide your data either to you or to such other third party as you specify in your request.
-
Automated Decision-Making Objection Right – automated decision-making is where a decision is made entirely by technological means without human intervention. We do not use or rely on automated decision-making.
FURTHER PROCESSING
If we wish to use your personal data for a new purpose, not covered by this Data Protection notice, then we will provide you with a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions. Where and whenever necessary, we will seek your prior consent to the new processing. Where work has been undertaken and recorded for the use of the website or Facebook we will seek specific written consent.
CHANGES TO THIS PRIVACY NOTICE
Crosspath care will review this privacy notice regularly and may update it at any time for example, in the event of changes in law or how we operate. Please do check our website from time to time. If there are any significant changes in the way we process your personal information, we will provide a prominent notice on our website or send you a notification.
​
CONTACT DETAILS
If you would like to exercise any of the above rights, please contact Giuliano Caprioli Blake, Operational Manager, in writing: info@crosspathcare.co.uk. or call 01787 827570
Right to Complain
If you have any concerns about our handling of your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (“ICO”) by visiting https://ico.org.uk/concerns/ or by telephoning the ICO helpline on 0303 123 1113.