Our Privacy Notice - How we use and share your information to help you
Making your health and social care record work for you
CHELSEA CARE LIMITED needs to keep a record of the care you receive to ensure that:
Professionals involved in your care have accurate and up-to-date information
We have all the information necessary for assessing your needs and providing excellent care
Your concerns can be properly investigated if you raise a complaint
Accurate information about you is available if you:
Move to another area
Need to use another service
See a different healthcare professional.
We have a duty to:
Maintain full and accurate records of the care we provide to you
Ensure that your records are confidential, secure and accurate
Provide a copy at your request that is an accessible format (e.g. in large type if you are partially sighted). Your record may include some or all of the following:
Your name, address and date of birth
Contacts we have had with you, such as appointments
Notes and reports on your health
Details of treatment and care, images and test results
Information on medicines, side effects and allergies
Relevant information from people who care for you and know you well, such ahealth professionals and relatives.
The staff who see you may also add notes on their professional opinion.
If you wish us to, and it is practical, we will discuss and agree with you what we are going to enter on your record and show you what we have recorded.
Identifying you as an individual
We have many patients with similar names so it vitally important for all patients to be properly identified as individuals. In order to be absolutely sure that you have been correctly identified we may ask you for a number of pieces of information. Suitable items include:
Date of birth
National Insurance number
Passport as photo ID
Driving licence as photo ID
Permanent (home, not a temporary) address
How you can help us to keep your health record accurate
Let us know when you change address, telephone number or name
Tell us if any information in your record is incorrect
Give your consent so that we can share information about you with other health professionals to make sure you receive the right healthcare
Tell us if you change your mind about how we share the information in your record.
How CHELSEA CARE LIMITED uses your contact details
We take your privacy seriously so please let us know how you want us to contact you.
If you provide a mobile phone number: we may ring, leave a message or text you, so tell us if you do not want us to do so.
If you provide a landline: we may leave a message, so tell us if you do not want us to do so.
If you provide us with your email address: we may use it send confidential health information, unless you have told us not to do so.
Please read the following before providing us with your email address.
Emails can be quick and convenient and will allow you to keep a record (unlike a phone call). However, although our own systems are secure, it may be possible to intercept your email when it is being sent over the internet.
Be aware also that if you share your computer others may read your emails.
You could use email to contact staff in relation to a query or to ask about an appointment.
Do not give more personal information than we need to process your request.
Do not ask us to send you medical details that you would not want seen by other people.
If you have an urgent question or feel unwell after going home after treatment contact an emergency service e.g. 111 NHS emergency service or 999 for life threatening conditions by telephone, do NOT email.
How your records are kept
Our guiding principle is that we hold your records in strict confidence.
CHELSEA CARE LIMITED is registered under the Data Protection Act 1998. It abides by the law and observes good practice in maintaining confidentiality and appropriate information security.
We will fulfil its obligations under this Act to the fullest extent, including ensuring that the following 8 principles governing the processing of personal data are observed.
personal data shall be processed fairly and lawfully;
personal data shall be obtained only for specified and lawful purposes, and shall not be processed in any manner incompatible with those purposes;
personal data shall be adequate, relevant and not excessive in relation to the purposes for which it is processed;
personal data shall be accurate and, where necessary, kept up to date;
personal data shall be kept for no longer than is necessary for the purposes for which it is processed;
personal data shall be processed in accordance with the rights of data subjects under the Act;
personal data shall be subject to appropriate technical and organisational measures to protect against unauthorised or unlawful processing and accidental loss, destruction or damage;
personal data shall not be transferred to a country or territory outside the European Economic Area unless that country or territory ensures an adequate level of data protection
CHELSEA CARE LIMITED is also registered with the Care Quality Commission. This means that we are subject to ongoing inspection and regulation by the CQC. This includes checks by the CQC that we are observing all necessary and statutory guidelines for use of your data in line with Health and Social Care Act 2008 (Regulated Activities) Regulations 2014 (Part 3).
Information about you and the services you receive may be held in a number of formats and will be kept for the specific retention periods outlined by the relevant professional bodies. We use secure electronic systems to store medical records, images and details of prescriptions. Patient data held on paper or disk will be processed in accordance with the Data Protection Act and destroyed using secure documented procedures after the time periods set out by the Department Of Health.
How your records are used
We use your records to:
Ensure that any treatment or advisory services we provide to you are based on accurate information.
Send a letter about your care to your GP or other health professional at the end of your treatment, unless you tell us not to do so.
Work effectively with other services providing you with treatment or advice.
Monitor the quality of our care and help us to understand the outcomes of care.
Investigate any concerns or complaints you or your family have about your health care.
Provide information that is needed for financial transactions in relation to payment for treatment, such as billing. For private patients this may include details shared with your insurance company. If you have any concerns about this, please contact your insurer.
We may remove your name and other details that could identify you so that we can use the information in your record anonymously to:
Monitor and improve the quality of care received by patients
Protect the health of the general public, for example we may share anonymous and aggregated patient information with organisations such as the National Institute for Clinical Excellence and the Cancer Registry for research or statistical purposes
Train and educate staff.
Wherever possible, we anonymise your data or use a quasi- identifier such as a patient number or NHS number.
Sharing your health record
CHELSEA CARE LIMITED has a designated Information Lead/Data Protection Officer who is responsible for protecting the confidentiality of patient information and making sure that information is shared where this is appropriate.
To make sure you receive all the care and treatment you need, we may need to share the information in your health record with other staff and organisations. This could include:
Other healthcare professionals, such as doctors, pharmacists, and pathology and radiology staff involved in the analysis and reporting of diagnostic tests
Other hospitals and private sector organisations involved in your care
Local authority departments
Voluntary organisations providing on-going support
Administrative support staff
Note that anyone who receives information from us also has a legal duty to keep it confidential.
We may also share information that identifies you where:
You ask us to do so
We ask for specific permission and you agree to this
We are required to do this by law
We have special permission because we believe that the reasons for sharing are so important that they override our obligation of confidentiality (e.g. to prevent someone from being seriously harmed).We do not give the names and addresses of patients to other organisations except under the circumstances described in this Privacy Notice. Unless you have signed an additional consent, we will not contact you after your visit for purposes other than:
Follow up of care
Collecting your views about your stay with us
Settlement of any account that may be due, if appropriate
Complaints and concerns handling.
Sharing information with your family and friends
We will normally share information about the progress of your treatment with the person you name as your Emergency Contact, unless you have told us not to do so. Your emergency contact should be someone that you trust and feel close to. It does not have to be a blood relative; it can be a good friend. We ask patients to name their emergency contact so that we know who you would like us to keep informed about the care we provide or the decisions we need to make. In identifying your emergency contact, you are giving us permission to keep her or him informed. However, note that since our Company provides principally diagnostic services only, it will not generally be appropriate for us to give general information about a patient’s health and such requests therefore should normally be directed to the patient's own General Practitioner or other health professional responsible for the patient’s care.
You can also name other people, with whom you would like us to share information about you. We make best efforts to ensure that information provided over the telephone is restricted to those you have named and we share on a need to know basis. Sometimes this means refusing to disclose information about you to someone who feels they should know about your treatment and progress. Please make your family and friends aware of this.
Sometimes we have a legal duty to provide information about people; examples are reporting some infectious diseases, and when a court order instructs us to do so. Records may also be shared without the patient's consent in exceptional situations, such as to safeguard adults or children.
The Care Quality Commission is the independent regulator of health care and they also protect the interests of people whose rights are restricted under the Mental Health Act. They routinely inspect our premises to quality check information we hold and the services we provide in line with the Health & Social Care Acts. This is designed to ensure that patients using services are protected and receive the care, treatment and support they need. These inspectors have the authority to access personal information without the permission of patients.
Sharing your records outside the EU
If your permanent address is outside the EU, or your treatment is continuing outside the EU, we may send details of your treatment to individuals based outside the EU specifically to promote your ongoing care. This would normally be the doctor who referred you to us for treatment. If you wish, we can give you the documents so that you have physical control over this information.
In the usual course of our business, we may use third parties to process and store your data on our behalf. We normally store your data on secure servers in the European Economic Area (EEA). Such processing is subject to contractual restrictions with regard to confidentiality and security in addition to the obligations imposed by the Data Protection Act 1998.
Exceptionally we may make use our suppliers are based outside the EEA for processing and storing your data. We have strict controls over how and why your data can be accessed. By submitting your personal data, you agree to this.
Where necessary we may transfer personal information overseas for processing to support the long- term effectiveness of treatment and monitor patient outcomes. Personal information will be processed in this way where it is not possible to achieve this purpose with the use of anonymised or pseudonymised information only.
How can I stop my information from being shared?
CHELSEA CARE LIMITED acts to provide information principally for other health and social care professionals who have requested this since they require further detailed investigations on their patients. So naturally we will normally need to share this information with your doctor who has referred you to our service.
If you do not want us to share your information with your GP, other healthcare providers or carers, please tell the team looking after you. But please note that not sharing your information may affect the care that can be provided for you.
You have the right to request that your confidential information is not used beyond your own care and treatment and to have your objections considered. Where your wishes cannot be followed you will be told the reasons including the legal basis. You may at any time withdraw any consent you have previously given to us to process information about you.
If you wish to exercise your right to opt-out, withdraw consent to use your information, or to speak to somebody to understand what impact this may have, please discuss your concerns with your clinician, or email us typing ‘Opt Out Request’ in the subject line of the email.
All personal data is processed and stored securely, for no longer than is necessary in light of the reason(s) for which it was first collected. We will comply with Our obligations and safeguard your rights under the GDPR at all times.
Our use of your personal data will always have a lawful basis, either because it is necessary for Our performance of a contract with you, because you have consented to Our use of your personal data (e.g. by subscribing to emails), or because it is in Our legitimate interests. Specifically, We may use your data for the following purposes:
- Providing and managing your Account;
- Providing and managing your access to Our Site;
- Supplying Our services to you (please note that We require your personal data in order to enter into a contract with you);
- Personalising and tailoring Our services for you;
- Replying to emails from you;
- Supplying you with emails that you have opted into (you may unsubscribe or opt-out at any time by using the ‘unsubscribe’ link;
- Market research;
- Analysing your use of Our Site to enable Us to continually improve Our Site and your user experience.
- With your permission and/or where permitted by law, We may also use your data for marketing purposes which may include contacting you by email, telephone, text message or post with information, news and offers on Our services. We will not, however, send you any unsolicited marketing or spam and will take all reasonable steps to ensure that We fully protect your rights and comply with Our obligations under the GDPR and the Privacy and Electronic Communications (EC Directive) Regulations 2003.
- You have the right to withdraw your consent to Us using your personal data at any time, and to request that We delete it.
- We do not keep your personal data for any longer than is necessary in light of the reason(s) for which it was first collected.
Your legal rights
CHELSEA CARE LIMITED is the Data Controller of the data it holds about its Service users and staff.
You have the right to confidentiality under the Data Protection Act 1998 (DPA), the Human Rights Act 1998 and the Common Law Duty of Confidentiality. The Equality Act 2010 may also apply.
You have the right to know what information we hold about you, what we use it for and if the information is to be shared, who it will be shared with.
You have the right to apply for access to the information we hold about you. Other people can also apply to access your health records on your behalf. These include anyone authorised by you in writing (such as a solicitor), or any person appointed by a court to manage your affairs where you cannot manage them yourself. Access covers:
The right to obtain a copy of your record in permanent form;
The right to have the information provided to you in a way you can understand, and explained where necessary, for example where abbreviations have been used. You would not be entitled to see information that:
Has been provided about you by someone else if they haven’t given permission for you to see it
Identifies another person who has not given permission for you to see the information about them
Relates to criminal offences
Is being used to detect or prevent crime
Could cause physical or mental harm to you or someone else. If you are currently receiving services from us and wish to view the record without obtaining a copy, discuss your request with the clinician in charge of your care.
Obtaining a copy of your record
If you wish to apply for access to the information we hold about you. Please note:
You should send your request in writing to the our Data Protection Officer, see contact details below
You should provide enough information to enable us to correctly identify your records, for example include your full name, address, date of birth, any unique identifier number/ NHS number (if known)
We will take every reasonable step respond to you within 40 days of receiving your request
You may be required to provide a form of ID before any information is released to you. Once you receive your records, if you believe any information is inaccurate or incorrect, please inform us.
Data Protection Officer:
Chelsea Care Limited
Email: - email@example.com
Information Commissioner’s Office (ICO)
The Information Commissioner’s Office Wycliffe HouseCheshire SK9 5AFHelpline: 08456 30 60 60
Privacy Notice For Our Staff
This Privacy Notice explains how Chelsea Care Limited handles and uses personal data we collect about staff. Where in this statement we refer to ‘we’ or ‘our’ or ‘us’ we are referring to Chelsea Care Limited, and where we refer to ‘you’ or ‘your’ we are referring to our staff.
We are registered with the Information Commissioner's Office (ICO). We are committed to protecting your personal information and to being transparent about what information we hold. Chelsea Care Limited understands its obligations to you to help you understand how and why we process your personal data. This notice tells you about these uses and should be read in conjunction with the Chelsea Care Limited data protection policy.
Our data protection policy and procedures are governed by the Data Protection Act 1998 and the EU General Data Protection Regulation.
Why we hold your personal data
We are required to hold your personal data for various legal and practical purposes, without which we would be unable to employ you.
Holding your personal data enables us to meet various administrative and legal obligations (e.g. for tax purposes).
We will also process your personal information in other circumstances, provided you have given your consent for us to do so.
Lawful basis for processing personal data
The lawful basis for processing the personal data of alumni and supporters as described in this document is to fulfil a contract with an individual.
There is a contractual requirement for you to provide much of the information detailed. Without this we will be unable to fulfil our obligations which could result in the contract terminating.
Personal data held by Chelsea Care Limited
The information we hold about you is primarily information you provided when applying for your job, supplemented by information generated in the course of your employment.
In common with all data subjects:
Your contact details
Unique personal identifiers and biographical information (e.g. date of birth)
photographs of you;
your attendance at Chelsea Care Limited
personal data provided by you for a specific purpose or purposes (for example, disability, catering preferences or lifestyle status for event management);
information related to the prevention and detection of crime and the safety of staff and service users including, but not limited to, CCTV recording;
financial information gathered for the purposes of your employment with us
your visa requirements; copies of passports, visas, and other documents required to ensure compliance with Home Office requirements.
Details of your education, qualifications and publications.
Particular to staff:
your application and curriculum vitae;
details of your career;
your contract of employment;
disciplinary, grievance and capability procedures;
accidents at work; and
Sensitive personal data held by Chelsea Care Limited
The information we hold is that which you provide to us (for example, you may give us information by filling in forms on our website, or by corresponding with us by post, telephone, and email or otherwise).
Records may contain:
your religious affiliation
How your personal data is used by Chelsea Care Limited Your data is used by us for a number of purposes including: Publications, invitations and other communications.
e-news and flash emails.
internal reporting and record keeping.
administrative purposes (e.g. in order to process fees payments or to administer an event you have registered for or attended).
Responding to data access requests you make.
Giving key card access to parts of the premises (if appropriate)
issuing references at your request.
Contacting you, your next of kin, or other relevant contact in case of an emergency.
Inclusion in our directories.
Marketing, including images, online, in print and on social media (with your consent)
Communications to you may be sent by post, telephone or a work email address. Your personal mobile phone number will only be used if you have given consent.
If you have concerns or queries about any of these purposes, or how we communicate with you, please contact us at the address given below. We will always respect a request by you to stop processing your personal data, and in addition your statutory rights are set out below.
Sharing your data with others
Within Chelsea Care Limited, personal data, including sensitive personal data, may be shared between members of staff who legitimately need the information to carry out their normal duties to support your time with us. We endeavour to ensure that sensitive personal data is only shared with colleagues with your explicit consent. However, circumstances may arise where this data is shared with colleagues without gaining your consent. This will only occur if it is necessary to protect your vital interests or the vital interests of another person; or for certain other reasons where it is not possible or appropriate to gain your consent such as disclosures to the police for prevention or detection of crime, or to meet statutory obligations relating to equality monitoring.
Chelsea Care Limited may disclose certain personal data to third parties. These external organisations, and the purpose for sharing the information, are set out below.
Relevant data, including your bank details, will be shared with our payroll providers and may be shared with our accountants (for payment of expenses).
Relevant data may be shared with your next of kin but only with your consent or in an emergency.
Relevant data may be shared with Home Office, UK Visas and Immigration (UKVI) in order to fulfil any obligations as a visa sponsor.
Data may be shared with reputable “data processors” for the purposes of sending communications (e.g. mailchimp).
With your permission we may share information about you for publicity and marketing purposes online, in print and on social media.
Otherwise, Chelsea Care Limited does not share data with any third party, except as allowed for in other privacy notices or required by law. We do not sell your personal data to third parties under any circumstances, or permit third parties to sell on the data we have shared with them.
Transfer of personal data to other countries
Where data is shared within the UK, or the European Union (EU), the third party will be required to comply with and safeguard the data under the terms of the DPA and appropriate EU regulations.
Your personal information will only be transferred to countries, outside of the EU, whose data protection laws have been assessed as adequate by the European Commission, or where adequate safeguards, such as the EU-US Privacy Shield, are in place.
How long data is kept
We will keep your personal data only as long as is necessary for the purpose(s) for which it was collected, and in accordance with our Data Protection Policy. Data will be securely destroyed when no longer required. Where you exercise your right to erasure, we will continue to maintain a core set of personal data (name, dates of working at Chelsea Care Limited and date of birth) to ensure we do not contact you inadvertently in future, and to maintain your record for archive purposes. We may also need to retain some financial records about you for statutory purposes (e.g. accounting matters).
You have the following rights
To be informed
This Privacy Notice provides the information you are entitled to receive
Please contact us if you would like confirmation that your data is being processed and access to your personal data.
There is no charge for us providing you with this data and it will usually be provided within a month of the request (unless the request is unfounded or excessive).
Please inform us of any data which you would like rectified and we will usually respond within a month of the request.
We will pass on the changes to any third parties who need to change their records and let you know this has been done.
You may exercise your right to have your personal data erased in a number of circumstances (e.g. if the data is no longer necessary in relation to the purpose for which it was created or you withdraw your consent). Where possible we will comply with all such requests, though some details are part of the
College’s permanent records (e.g. examination results, college photographs)
which cannot reasonably be deleted.
You can tell us that we can keep your data but must stop processing it, including preventing future mailings and communications.
If possible we will inform any third parties to whom your data has been disclosed of your requirement.
Your data is across manual records and a bespoke Access database. We will do our best to provide information in a portable format but it is unlikely that we
can create systems to do so.
If we can, we will stop processing your data if you object to processing based on legitimate interests or the performance of a task in the public interest / exercise of official authority (including profiling).
We will stop processing your data for direct marketing if you tell us to.
We will stop processing your data if you object to processing for purposes of research and statistics.
Not to be subject to automated decision-making
We do not use any automated decision-making.
We reserve the right to judge what information we must continue to hold to be able
to fulfil our contract with you.
You have the right to lodge a complaint with the Information Commissioner’s Office at https://ico.org.uk/concerns.
The controller for your personal data and our Data Protection Officer is our CQC Registered Manager or nominee. Please ask for details
Our Data Protection Officer is responsible for monitoring compliance with relevant legislation in relation to the protection of personal data. Please contact us if you have any concerns or questions about the above information or you wish to ask us not to process your personal data for particular purposes or to erase your data. Where you have specific requests relating to how we manage your data, we will endeavour to resolve these, but please note that there may be circumstances where we cannot comply with specific requests.
We will publish on our website any changes we make to this data protection statement and notify you by other communication channels where appropriate.