General Data Protection Regulation (GDPR)
Qualita Healthcare and Recruitment (“Qualita”, “we” or “us”) is committed to protecting and respecting your privacy.
This Policy (together with other documents referred to herein) describes what personal information we collect from you and how we process your personal information when you use the www.qualita-group.co.uk website (“Website”).
There is an index below, so you can go straight to the bits you want if you prefer.
- Personal information we collect from you
- How we use your personal information
- What does the law say about this?
- Sharing with third parties
- IP addresses and cookies
- Where your personal information is stored and processed
- Data Security
- Your rights. How you can access, correct and delete your personal information
- Marketing communications
- Changes to this Policy
Information about Us
Private Limited Company registered in England under company number 12814148.
Jubilee House, East Beach, Lytham St. Annes, England, FY8 5FT
VAT number: N/A
Data Protection Officer: Tonga Hozheri
Email address: email@example.com
Telephone number: +44 (0) 1933 805 390 . Postal address: 16 Goodwin Close, Wellingborough, Northants, NN8 4BS
The organisation collects and processes personal data relating to its clients to manage the care contract relationship. The organisation is committed to being transparent about how it collects and uses that data and to meeting its data protection obligations.
Personal information we collect from you
- We will collect personal information on your visits to the Website including, but not limited to, traffic data, location data, weblogs, content from surveys and contact forms and other communication data and the resources that you access. Our collection of this personal information will make your visit to the Website easier in the future as we will be able to suggest Content that is relevant to you based on the location you access the Website from.
- We will collect any information you provide to us when you use our contact forms (for example “Contact”, “Send us a Message”, “Get financial updates”, or “Contact us about working together”). The provision of your personal information via our contact forms is not a statutory or contractual requirement; however, please note that fields marked with an asterisk (*) are mandatory fields, because we need this information to comply with or respond to your request. Other information or personal information you share with us when completing our contact forms is in your sole discretion. If you contact us, we will keep a record of that correspondence.
- We use your personal information to send you direct marketing via e-mail when you opt-in for this purpose in the relevant contact form. You may opt-out of receiving future marketing communications at any time by emailing firstname.lastname@example.org
The organisation also collects and processes a range of information about you. This includes:
- your name, address and contact details, including email address and telephone number, date of birth and gender;
- the details of your care service contract
- details about your care plan, risk assessment and medical information Including but not limited to:
- Health information
- Allergies and conditions
- Food and lifestyle preferences
- Key locations and codes for access to your home or to the site where the care services are performed;
- details of your bank account for invoicing purposes
- information about your marital status, next of kin, dependants and emergency contacts;
- information about your nationality;
- details of any incidents, accidents or concerns relating to your care;
- equal opportunities monitoring information, including information about your ethnic origin, sexual orientation, health and religion or belief.
The organisation may collect this information in a variety of ways. For example, data might be collected through local authority social services, service contracts, from yourself, from professionals with whom you work or from your next of kin.
Data will be stored in a range of different places, including in your client file, in the organisation’s care computer system, within a secured application on your carer’s electronic monitoring device and in your client service user guide in your home.
How we use your personal information
Your personal information will be collected and handled by us for the following purposes:
- To provide you with the services you expect us to
- to best tailor Content and resources according to your preferences.
- to respond to your request or questions when you contact us.
- to send to you other information – such as Qualita upcoming events or newsletters – that may be of interest to you.
- to help us create, publish, and improve Content most relevant to you.
- to ensure that the Content provided through the Website is presented in the most effective manner for you and for your device.
- to allow you to participate in interactive features of our Website, when you choose to do so.
- to further develop and improve the Website and systems to better serve you. This mainly takes place in the context of new IT systems and processes so that information about you may be used in the testing of those new IT systems and processes where dummy data cannot fully replicate the operation of the new IT system.
- to perform analytical research on our prospective client and candidate base, including the content, and the services/products they are interested in
- to transfer data to third parties (see below)
- where necessary, to comply with any legal obligation; and
- we may also process your information to:
- investigate or respond to incidents and complaints
- comply with obligations and rights and cooperate with investigations carried out by the police, government or regulators.
What does the law say about this?
Our use of your information as described above is permitted by applicable data protection law because it is:
- necessary for our legitimate interests in pursuing the purposes set out above, and such interests in each case not being overridden by your privacy interests;
- in some cases, necessary to meet our legal or regulatory responsibilities, such as disclosures to authorities, regulators or government bodies; or
- in some cases, necessary for the performance of a task carried out in the public interest and, when we use special categories of personal information, necessary for establishing. exercising or defending legal claims or where the processing relates to personal information manifestly in the public domain;
- in limited circumstances, processed with your consent which we obtain from you from time to time, such as when you opt-in to receive marketing communications and news via email.
Processing client data allows the organisation to:
- Assess client enquiries for care;
- Maintain accurate and up-to-date client records and contact details (including details of who to contact in the event of an emergency), and records of client contractual and statutory rights;
- Maintain correct invoicing and finance details
- Operate and keep a record of client care plans and risk assessments to ensure person-centred care is delivered.
- Respond to and defend against legal claims; and
- Maintain and promote equality in providing care.
- Some special categories of personal data, such as information about health or medical conditions, is required for the delivery of care.
- Where the organisation processes other special categories of personal data, such as information about ethnic origin, sexual orientation, health or religion or belief, this is done for the purposes of equal opportunities monitoring. Data that the organisation uses for these purposes is anonymised or is collected with your express consent, which can be withdrawn at any time. Clients are entirely free to decide whether or not to provide such data and there are no consequences of failing to do so.
Sharing with third parties
Who has access to your data?
Your information may be shared internally, including with members of the local care team for the delivery of care, also Care managers within the organisation and appropriate IT staff if access to the data is necessary for the performance of their roles.
The organisation may share your data with third parties in order to obtain information in relation to your care package (GP’s, hospital discharge teams, district nurses etc)
The organisation also shares your data with third parties that process data on its behalf, in connection with invoicing (social services, local authorities, solicitors, health insurance companies)
IP addresses and cookies
We collect information about your computer, including (where available) your IP address, operating system and browser type, for system administration. This is statistical data about our users’ browsing actions and patterns and does not identify you or any individual.
If your computer is shared with other people, we advise that you do not select the ‘remember my details’ option when that option is offered by the Website.
How does the organisation protect your data?
We endeavour to take all steps reasonably necessary to ensure that your personal information is treated securely and in accordance with this Policy. The organisation has internal policies and controls in place to try to ensure that your data is not lost, accidentally destroyed, misused or disclosed, and is not accessed except by its employees in the performance of their duties. Please refer to our Policies – Protecting Personal Data under the General Data Protection Regulation Policy, Computer Security Policy, Policy re Own Device and our Email Policy all of which are available upon request.
Where the organisation engages third parties to process personal data on its behalf, they do so on the basis of written instructions, are under a duty of confidentiality and are obliged to implement appropriate technical and organisational measures to ensure the security of data.
For how long does the organisation keep data?
The organisation will hold your personal data for the duration of your care. The periods for which your data is held after the end of your care:
Personal Health & Care records: 3 years after we stop providing care
Financial Records: 3 years
As a data subject, you have a number of rights. You can:
- Request Information about whether we hold personal information about you, and if so, what that information is and why we are holding/using it.
- Request access and obtain a copy of your data on request;
- Request correction of the personal information we hold against you. Thereby requiring the organisation to change incorrect or incomplete data;
- Request erasure. Require the organisation to delete or stop processing your data, for example where the data is no longer necessary for the purposes of processing; and
- Object to the processing of your data where the organisation is relying on its legitimate interests as the legal ground for processing.
- Request the restriction of processing of your personal information. To suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it
- Request transfer of your personal information in an electronic and structured form to you or to another party (commonly known as right to “data portability”) this enables you to take your data from us in an electronically useable format and to be able to transfer your data to another party in an electronically useable format.
- Withdraw consent. In those circumstances where you may have provided your consent to the collection, processing and transfer of your personal information for a specific purpose, you have the right to withdraw your consent for that specific processing at any time. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have a legitimate basis for doing so in law.
- Object to automated decision-making including profiling, that is not to be subject to any automated decision-making by us using your personal information or profiling of you.
If you would like to exercise any of these rights, please contact the Data Protection Officer, Qualita Healthcare and Recruitment Ltd, 16 Goodwin Close, Wellingborough, Northants, NN8 4BS. Tel: 01722 343989.
We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your rights) This is an appropriate security measure to ensure that your personal information is not disclosed to any person who has no right to receive it.
If you believe that the organisation has not complied with your data protection rights, you can complain to the Information Commissioner.
What if you do not provide personal data?
You have some obligations under the service contract to provide the organisation with data.
Certain information, for example: medical and health information, next of kin contact details, financial details, is required to enable the organisation to enter a service care contract.
Your data is important to us and under no circumstances will we sell your data to a third party.
The organisation may wish to contact you after you have left us as a client for marketing purposes or to inform you of a new service line that the organisation is now providing. The organisation will ask for your consent before it keeps your data for this purpose and you are free to withdraw your consent at any time.
We will only send marketing communications to you, as individual, normally by email where you have consented that we may do so.
We will usually offer you a check box on the forms we use to collect your personal information where, if you agree to receive marketing communications, you have to click the box.
In any case, where we send marketing communications to you via email, you may opt out of receiving any further marketing communications by clicking the ‘unsubscribe’ or ‘opt-out’ function in the email. In addition, you can also exercise your opt-out right at any time by contacting us at email@example.com and providing the following information: your name, your email address, a contact telephone number, the marketing communications you would like to opt out of receiving.
Changes to this Policy
The terms of this Policy may change from time to time. We shall publish any material changes to this Policy through appropriate notices either on this Website or contacting you using other communication channels.
You can request a copy of mechanisms relating to a specific transfer of your personal information by contacting firstname.lastname@example.org
You can also contact our local data protection representative at the following address: email@example.com