Privacy Policy

As a controller, Danforth Care must meet its contractual, statutory, and administrative obligations. We are committed to ensuring that visitors’ personal data is handled in accordance with the data processing principles set out in the Data Protection Act 2018 (“DPA 2018”) and the United Kingdom General Data Protection Regulation (“UK GDPR”).

This Privacy Notice applies to people who visit our website, email, call, message, write to us or visit in person. The information we process will depend on what you are contacting us about or the reason you have visited us.

We are the Controller for the information that we process unless this Notice specifically states otherwise. Questions about this Notice should be directed to the Chief of Staff in the first instance.

This Notice covers the following areas:

• How do we get your information
• What personal data we process and why
• Lawful basis for processing your personal data
• How long we keep your personal data
• Data sharing
• Do we use any data processors
• Your rights in relation to this processing
• Transfers of personal data
• Cookies
• Mailing lists and marketing
• Complaints
• Changes to this Notice

We get information about you from the following sources:

• Directly from you
• Someone acting on your behalf
• Social Services, healthcare professionals for the purpose of support
• Care Quality Commission
• Emergency Services
• From the NHS

We use the following information depending on the nature of your visit:

• Personal contact details such as your name, contact telephone numbers (landline and mobile) and personal email addresses
• Call recordings
• Health screening information to protect residents and colleagues
• Vehicle registration
• Proof of identity
• Images on our CCTV system

The above information is held in electronic and manuscript formats and securely stored on our systems or on our premises.

The main reasons to process your personal data are:

• Respond to enquiries and complaints
• Training and monitoring purposes to improve the service
• For website visitors, to process your enquiry
• To protect residents and staff

Lawful basis for processing. Depending on the processing activity, we rely on the following lawful basis for processing your personal data under the UK GDPR:

• Article 6(1)(a) with your consent
• Article 6(1)(b) for processing necessary for the performance of a contract
• Article 6(1)(d) in order to protect your vital interests or those of another person
• Article 6(1)(f) for the purposes of our legitimate interests

Special categories of personal data. Where the information we process is special category data, the additional bases for processing that we rely on are:

• Article 9(2)(a) which relies on your explicit consent

We review all our data processing annually to assess if the national data opt-out applies. If any data processing falls within scope of the national opt-out then we will contact you to check if you have opted-out of your data being shared for the purpose.

We will only keep your information for as long as we have a purpose for doing so.  Further information about how long we hold your personal data is contained in our Record Retention & Disposal (RR&D) Policy and our RR&D Schedule.

In some circumstances, such as under a court order, we are legally obliged to share information. We may also share your information with third parties, including government agencies, and external auditors. Examples of who we may share your information with include:

• Independent external auditors who monitor compliance
• Regulators
• Those who may require personal data to protect an individual (in life and death situations for example)

Data processors are external organisations who provide certain services to us. We have contracts in place with them and they cannot do anything with your personal information unless we have instructed them to do so.

You may exercise the rights available to you under data protection law as follows:

• The right to be informed
• The right of access
• The right to rectification
• The right to erasure
• The right to restrict processing
• The right to data portability
• The right to object
• Rights in relation to automated decision making and profiling

You can read more about these rights at:

https://ico.org.uk/for-the-public/is-my-information-being-handled-correctly/

To exercise any of these rights, please contact the Chief of Staff. We respond to all requests we receive from individuals wishing to exercise their data subject rights in accordance with applicable data protection laws

You can request access to your personnel file by contacting the Chief of Staff. You can also make a verbal request for your information. We may need to, if necessary or appropriate, consult internally with members of staff who might hold personal data about you.

We do not routinely transfer staff personal data outside of the UK but when this is necessary, we ensure that we have appropriate safeguards in place as required by the UK GDPR.

12.1 This website uses cookies to better the users experience while visiting the website. As required by legislation, where applicable this website uses a cookie control system, allowing the user to give explicit permission or to deny the use of /saving of cookies on their computer / device.

What are cookies? Cookies are small files saved to the user’s computers hard drive that track, save and store information about the user’s interactions and usage of the website. This allows the website, through its server to provide the users with a tailored experience within this website.

Users are advised that if they wish to deny the use and saving of cookies from this website on to their computers hard drive they should take necessary steps within their web browsers security settings to block all cookies from this website and its external serving vendors or use the cookie control system if available upon their first visit.

This website uses tracking software to monitor its visitors to better understand how they use it. The software will save a cookie to your computers hard drive in order to track and monitor your engagement and usage of the website, but will not store, save or collect personal information.

Any downloadable documents, files or media made available on this website are provided to users at their own risk. While all precautions have been undertaken to ensure only genuine downloads are available users are advised to verify their authenticity using third party anti virus software or similar applications. We accept no responsibility for third party downloads and downloads provided by external third party websites and advise users to verify their authenticity using third party anti virus software or similar applications.

When downloading a brochure, you will be asked to provide your e-mail address. We will add this to our mailing list and contact you to share further information about the Care Home you are enquiring about. When you receive an e-mail, if you are unhappy to continue receiving information and updates, please do respond and request to be taken off the mailing list.

Users contacting us through this website do so at their own discretion and provide any such personal details requested at their own risk. Your personal information is stored securely until a time it is no longer required or has no use.

Where we have clearly stated and made you aware of the fact, and where you have given your express permission, we may use your details to send you products/services information through a mailing list system. We operate an email mailing list program, used to inform subscribers about products, services and/or news we supply/publish. Users can subscribe through an online automated process where they have given their explicit permission. Subscriber personal details are collected, processed, managed and stored in accordance this Notice. Subscribers can unsubscribe at any time through an automated online service, or if not available, other means as detailed in the footer of sent marketing messages (or unsubscribe from all Mailchimp lists). The type and content of marketing messages subscribers receive, and if it may contain third party content, is clearly outlined at the point of subscription.

Email marketing messages may contain tracking beacons / tracked clickable links or similar server technologies in order to track subscriber activity within email marketing messages.Where used, such marketing messages may record a range of subscriber data relating to engagement, geographic, demographics and already stored subscriber data.

We hope that you won’t ever need to, but if you do want to complain about our use of your personal data, please send an email with the details of your complaint to the Chief of Staff. We will investigate and respond to any complaints we receive.

You also have the right to lodge a complaint with the UK’s data protection regulator, the Information Commissioner’s Office (“ICO”). For further information on your rights and how to complain to the ICO, please refer to the ICO website: ICO Make a Complaint

If you wish to contact us please write to us at:

Danforth Care Homes Limited, registered address Helios 47 Isabella Road, Garforth, Leeds, West Yorkshire, United Kingdom, LS25 2DY 

Or at email info@danforthcarehomes.co.uk

Ph: 0330 162 1325

This Notice is updated annually or as required.