Accessibility:

Privacy Statement and Notice

Privacy Statement

St Christopher’s Personal Care Service takes privacy and the protection of personal and sensitive information seriously. We have robust technical and organisational systems and measures in place to manage and protect all personal data. These measures include data encryption, up to date security software and controls to guard against unauthorised access, unlawful processing, accidental loss, damage or destruction.

Our Privacy notice explains how we use and protect your personal information, to show that we are adhering to the new General Data Protection Regulation (GDPR) and the Data Protection Act, both of which came into force in May 2018.

It also explains how we collect and use the personal information that you provide to us whether, in person, online or via phone, email, letter or other correspondence, this includes data from our website and sets out how St Christopher’s Personal Care Service uses and protects any information that you give us.

Privacy Notice

St Christopher’s Personal Care Service is committed to protecting your privacy and right to confidentiality. We comply with GDPR and NHS requirements concerning confidentiality and information security standards.

This notice explains how we use any personal information we collect about you based on your relationship with St Christopher’s Personal Care Service, detailing how we collect data, how we store it, how we use it and protect it.

St Christopher’s Personal Care Service exists to provide expert and high quality care in your home.

You can view our full Data Protection Policy online here or request a copy of the policy by contacting us at: 

Data Protection Lead
St Christopher’s Personal Care Service
51-59 Lawrie Park Road, Sydenham
London, SE26 6DZ
020 8768 4648

Quick links

Service Users

What information we collect about you

Personal data we collect may include one or more of the following:

  • Service user details such as name, address, telephone number, email address, date of birth
  • Health Care Records (electronic or paper) with a consent
  • GP details (plus other involved health care professionals)
  • Nominated family member/ next of Kin details, such as name, address, telephone number and email address

In addition, we may need to contact other agencies for relevant health or social care information for the benefit of our patients’ care.

How we collect information

We obtain personal information from you when you

  • You procure or enquire about our services
  • Apply to work with us.
  • Send us or an email.
  • Ask a question about our services or otherwise provide us with your personal information.

We gather non-identifiable general information from the use of our website such as pages visited and areas that are of most interest to users. We use this information to improve our website and make it a better experience for everyone. For further information please see the cookies section below.

How we use this information

We may use your personal information for:

  • Providing and personalising our care and support services
  • Dealing with your enquiries requests and complaints
  • Providing you with information about our work, activities and services
  • Complying with our legal obligations, policies and procedure
  • Recruitment, training analysis, and management responsibilities

How we protect your information

We adopt appropriate data collection, storage, processing practices and security measures to protect against unauthorised access, alteration, disclosure, or destruction of your personal or transactional data stored on our website and systems.

We have security procedures, rules and technical measures in place to protect your data. Your data will be kept in a secure environment with access restricted on a need to know basis. We don’t keep your data for longer than is required by law or necessary for the purpose for which it was obtained.

The legal basis for collecting and using your information

  • When we have your consent to use your information for continuing personal care and support
  • When it is necessary for compliance with a legal obligation to which we are subject (for example a change in the law)
  • When there is a legitimate interest to do so – for example, in order to fulfil our duty of care to you.
  • When it is in the public interest to do so (for example, a notification of infectious diseases (NOID) that need to be reported to the Local Authority health protection team)
  • Where data disclosure may be required by law, for example to government bodies and law enforcement agencies.

Please be assured, we never share, sell, swap or rent your data to third parties for marketing purposes.

Employees

The information we collect about you

When you apply to work at St Christopher’s Personal Care Service we will use the information you give us to process your application and to monitor recruitment statistics only. If we want to disclose information to someone outside the Personal Care Service – for example, if we need a reference, or need to get a criminal record check from the Disclosure and Barring Service – we will make sure we tell you beforehand unless we are required to disclose this information by law.

What information do we collect about you?

When you apply to work at St Christopher’s Hospice, we will typically collect the following information about you:

  • Name
  • Date of Birth
  • Address
  • Emergency contact details
  • National Insurance Number
  • A copy of your passport or immigration document
  • Your skills, knowledge, experience and qualifications where applicable
  • Industry/ professional body registration details where applicable
  • Contact details for referees
  • Pre-employment checks – DBS information
  • Full employment history
  • Equality and Diversity monitoring information

During the course of your employment we will also collect performance data including probation, training and appraisals data as well as reasons for sickness absence data for up to 2 years at a time.

What happens to the information we collect about you

If you are unsuccessful in your job application, we will hold your personal information for 6 months after we have finished recruiting the post you applied for. After this date, we will destroy or delete your information. We keep information about applicants to develop and improve our recruitment processes, but this information is kept in a form that ensures that individual applicants cannot be identified.

If you begin employment with us, we will put together a file about your employment. We keep the information in this file secure, and will only use it for matters that apply directly to your employment.

Once you stop working for us, we will keep this file according to our record retention guidelines. You can contact us to find out more about this.

The legal basis for collecting and using your information

We collect this information because we have a legitimate interest to ensure employees fulfil their roles and responsibilities as detailed within their job description.

We also have a legal obligation to ensure that those we care for are safe and therefore we need to verify that applicants and employees hold the required qualifications.

We have a contractual obligation to pay employed staff; therefore we use bank account details to process such payments.

Your information will be shared where data disclosure may be required by law, for example to government bodies such as HMRC for tax purposes

Date of birth information is collected for pension and if applicable, redundancy purposes.

The accuracy of your information

We aim to ensure that all information we hold about you is accurate and, where necessary, kept up to date. If any of the information we hold about you is inaccurate and either you advise us or we become otherwise aware of this, we will ensure it is amended and updated as soon as possible.

Storing your information

We take great care to ensure that your data is kept secure at all times. Data is only accessible to appropriately trained Employees and volunteers whose job functions makes it necessary that they have access to your information.

Although most of the information we store and process stays within the UK some information may be transferred to countries outside the European Economic Area. This may occur if, for example, one of our trusted partners’ servers is located in a country outside the EU. These countries may not have similar data protection laws to the UK, however, we will take steps with the aim of ensuring your privacy continues to be protected as outlined in this privacy policy.

We will keep your information for as long as required to enable us to operate our services, but we will not keep your information for any longer than is necessary. We will take into consideration our legal obligations, tax and accounting rules when determining how long we should retain your information. When we no longer need to retain your information we will ensure it is securely disposed of, at the appropriate time.

How we protect your information

We adopt appropriate data collection, storage, and processing practices, and security measures to protect against unauthorised access, alteration, disclosure, or destruction of your personal or transactional data stored on our website and systems.

We have security procedures, rules and technical measures in place to protect your data. Your data will be kept in a secure environment with access restricted on a need to know basis. We don’t keep your data for longer than is required by law or necessary for the purpose for which it was obtained.

Your rights

Under the General Data Protection Regulation, which came into force on May 25th, 2018, you have the following rights:

  1. The right to access your personal information
  2. The right to edit and update your personal information
  3. The right to request to have your personal information deleted
  4. The right to restrict processing of your personal information
  5. The right to object to the processing of your personal information
  6. The right to lodge a complaint with a supervisory authority

1. The right to access your personal information

You have a right to obtain confirmation that your personal information is being processed. You also have the right to request a copy of your personal information we hold.

You may be required to provide proof of your identity by providing a valid photographic identity document such as a passport or photocard drivers licence. Your request will be processed within 30 days of receipt and all the relevant information we require.

2. The right to edit and update your personal information

The accuracy of your personal information is important to us. You can update your personal information including your address and contact details at any time.

3. The right to request to have your personal information deleted

You have the right to request the deletion of your personal information which we will review on a case by case basis.

4. The right to restrict processing of your personal information

You have the right to ‘block’ or suppress processing of your personal data. However, we may continue to store your data but will no longer process it. We do this by retaining just enough of your personal information so we can ensure that the restriction is respected in the future.

To exercise any of these rights, please contact us at the address below. We will then send you a form so you can provide us with as much information as possible about the nature of your request. This will help us locate your records. There is no requirement to complete this form to make a valid request, however, it has been designed to capture the information we may reasonably require to process your request effectively.

5. The right to object

You have the right to object to your personal information being processed.

Please provide as much information as possible about the nature of your contact with us to help us locate your records. Any changes you have requested may take 28 days before they take effect.

If we process your personal information for the exercise or defence of legal claims, or we can demonstrate compelling grounds that override your rights and freedoms, we may not be able to fulfil your request. However, we will contact you to discuss further.

Please address any of the above requests to our Data Protection Lead at

Data Protection Lead
St Christopher’s Personal Care Service
51-59 Lawrie Park Road
London
SE26 6DZ
020 8768 4648

Email: privacy@StChristophers.org.uk

6. Your right to lodge a complaint with a supervisory authority

We expect to be able to resolve any complaints that you might have concerning our services or events. We therefore ask that you give us the opportunity to do so in the first instance. You, however, have the right to lodge a complaint or seek advice from a supervisory authority. Please contact If you wish to lodge a complaint or seek advice from a supervisory authority please contact:

The Office of the Information Commissioner
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Tel: +44 (0) 01625 545 745
Website: www.ico.org.uk

Changes to the Policy

This policy is correct as of June 2019. We will regularly review and update this Privacy and Data Protection Statement and will update, modify, add or remove sections at our discretion and in response to relevant changes in legislation.

We will notify you of any changes, either via e-mail or through an announcement on our website and your continued use of our website, any of our services and/or the continued provision of personal information after we have posted the changes to these terms, will be taken to mean you are in agreement with those changes.

How to complain

We expect to be able to resolve any complaints that you might have concerning our use of your information. Please write to us or call us at:

Data Protection Lead
St Christopher’s Personal Care Service
51-59 Lawrie Park Road, Sydenham
London, SE26 6DZ

Tel: 020 8768 4648            

Email: privacy@stchristophers.org.uk

Do you need extra help?

If you would like this notice in another format (for example audio, large print, braille), please contact us as above.

Cookies

St Christopher’s Personal Care Service uses “cookies” to help track and monitor the usage of our website. We use Google Analytics for our web analytic cookies. The information we collect and share is anonymous and does not personally identify you. It does not contain your name, address, telephone number or email address.