PRIVACY POLICY
Explaining how PURFECT CARE LIMITED collects, uses and protects personal data in line with UK GDPR and data protection law.
Who We Are and Contact Details
PURFECT CARE LIMITED is a UK-registered domiciliary care agency based in Hertfordshire. We provide high-quality home care services to vulnerable adults, ensuring they remain safe and independent in their own homes. We are committed to protecting the privacy and security of your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
For any questions regarding this policy or our data practices, please contact our Data Protection Lead at: 12 Lambert Way, Royston, Hertfordshire, SG8 7FS, or via email at suemanyanya@yahoo.co.uk.
What Personal Data We Collect
We collect and process various types of personal data depending on your relationship with us:
- Clients and Prospective Clients: Name, address, contact details, date of birth, NHS number, health and medical information, care requirements, and emergency contact details.
- Staff and Job Applicants: Identity documents, CVs, employment history, reference details, bank information for payroll, and background check results (DBS).
Lawful Bases for Processing
We only process data when there is a legal reason to do so. These include:
- Contract: To fulfill our care agreement with you.
- Legal Obligation: To comply with health and social care regulations.
- Vital Interests: When processing is necessary to protect someone's life in an emergency.
- Consent: Where you have given clear permission for a specific purpose.
- Legitimate Interests: For the efficient running and security of our business.
How We Use Personal Data
We use the information we collect to provide safe, personalised care services, manage staff performance, ensure our services meet high standards, and communicate important updates to families. We also use data to meet our regulatory reporting requirements to bodies such as the Care Quality Commission (CQC).
Who We Share Data With
We may share information with health and social care professionals (GPs, district nurses), local authorities, and regulatory bodies (CQC) to ensure the continuity and safety of care. We do not sell your data. International transfers are not standard; if they occur, we ensure stringent safeguards are in place.
Data Retention and Security
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal and regulatory requirements. We use robust physical and electronic security measures to prevent unauthorised access, loss, or disclosure of your sensitive information.
Your Data Protection Rights
Under UK data protection law, you have significant rights, including:
- Access: The right to ask us for copies of your personal information.
- Rectification: The right to ask us to correct information you think is inaccurate.
- Erasure: The right to ask us to erase your personal information in certain circumstances.
- Restriction and Objection: The right to ask us to restrict or stop processing your data.
- Portability: The right to have your data transferred to another organisation.
- Withdrawal of Consent: The right to withdraw consent at any time where we rely on it.
How to Complain
If you have any concerns about our use of your personal information, you can make a complaint to us directly. You also have the right to complain to the Information Commissioner’s Office (ICO) if you are unhappy with how we have used your data. The ICO’s address is: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.