Please read this notice carefully as it explains how Consensus Support Services, uses the personal information that you provide to us during any method of contact (for example, by email, phone, online forms and by using any of our services).
If you have any questions about this, please contact our Data Protection Officer dpo@consensussupport.com.
What we process
We process personal data about enquirers, residents, and individuals we support before, during and after their contact with us. This processing is required to support our business interests and fulfil our legal and contractual obligations that are compliant with The General Data Protection Regulation (UK GDPR) (EU GDPR), UK Data Protection Act 2018 (DPA2018) and Caldicott Principles including guidance from the 10 data security standards, which include:
• Providing services to our enquirers, residents, and individuals we support, recording what services we have provided;
• Managing the health, welfare, safety and security of our residents and individuals we support;
• Handling enquiries, complaints, and investigations;
• Monitoring and improving the quality of our services;
• Using Legitimate interests for researching and understanding the needs of our target audience and to improve our marketing effectiveness;
• Working with our partners including recruiting sites and providers to improve the quality of our services.
We also process personal data about job applicants, current and former employees, service providers, and other groups of individuals during our business operations and this data is subject to our internal privacy policies.
Personal data you provide to us
We collect the personal data you provide to us when you enquire, work in or use any of our services, for example:
• Enquiry: Personal details (name, gender, age etc.), contact information (home address, phone number, email address etc.), details of your interests and communications preferences;
• Individuals: Personal details, contact information, financial details, relative, or next of kin, care needs;
• Complaints: Personal details, contact information, enquiry, or complaint details;
• Health & Welfare: Medical, dietary and mobility details provided to us before, during or after any stay with us in one of our services;
• Surveys & Market Research: Responses to post-enquirer surveys and market research surveys.
• Job Applications: Responses to Job applications, including contact details, CVs and other personal information provided.
Data anonymisation and use of aggregated information
Your information may be converted into statistical or aggregated data in such a way as to ensure that you are not identified or identifiable from its content. This aggregated data cannot be linked back to you as an individual. The methods used to protect this data will be to encrypt, pseudonymisation and anonymisation.
Who we may share your information with
When you are an individual we support;
• A sponsor to organise payment of fees.
• Your next of kin or named family member.
• Any person that you have appointed to act on your behalf pursuant to a valid Power of Attorney or allied professionals, support workers and other health care providers in the case of an emergency.
Or with;
• Organisations and consultants providing contracted services to us (for example, information technology service providers who provide and maintain our systems and our website hosting). Where these companies and consultants do provide services to us, we will only use your information in compliance with the UK & EU General Data Protection Regulation, UK Data Protection Act 2018, and Caldicott Principles.
• A third-party company, for example when providing a reference for a former employee, or if a resident transfers to another service provider. This transfer of data would only take place in accordance with strict compliance criteria which is transparently conducted.
• The courts in the United Kingdom or abroad as necessary to comply with a legal requirement, for the administration of justice, to protect vital interests and to protect the security or integrity of our business operations.
Where we store your information
We only store your information on servers located within the UK or European Economic Area (EEA). Any third parties that we share your data with are also required to be located within the UK or EEA and are UK & EU GDPR, Data Protection Act 2018 compliant. These servers are fully protected and encrypted.
Retention of your information
Individuals we support:
• If you participate in any pre-admission assessment but do not go on to become an individual we support, your information will only be kept for as long as it is lawfully necessary to enable us to be compliant with our legal and contractual obligations and relevant legislation.
• If you are an individual we support within Consensus Support Services, your information will be kept for the duration of your stay, and then depending on certain circumstances, for 7 years after you stop using our care and support needs.
All the information we hold is secured, kept confidential and protected with the use of strict processes and policies such as access restrictions and encryption that are in line with UK & EU GDPR, Data Protection Act 2018 and the Caldicott Principles.
Job Applicants Information provided by candidates that are unsuccessful in their application for employment, such as CVs, shall be securely deleted after 12 months unless we are permitted to keep the data for a longer period.
Your rights
You have enhanced rights under the new act in respect of the information we hold subject to some exemptions. Please note that the way we process your information and the legal basis on which we rely on to process it affects the extent to which these rights apply.
These rights are the:
• Right to be informed about the processing of your information (as per this statement);
• Right to have your information corrected if it is inaccurate and to have incomplete information completed;
• Right to object to the processing of your information;
• Right to withdraw your consent at any time where we rely on it to process your information;
• Right to restrict processing of your information;
• Right to have your information erased;
• Right to request access to your information and information about how we process it;
• Right to move, copy or transfer your information; and
• Right to automated decision-making, including profiling.
If you would like to discuss or exercise any of these rights, please contact us using the details provided both at the top and bottom of this Privacy Policy.
Where you believe your information has or is being used in a way that you believe does not comply with data protection law. You have the right to complain to the Information Commissioner’s Office. We encourage you to contact us before making any complaint and we will seek to fully resolve any issues or concerns you may have.
You can also contact our Data Protection Officer with any data protection concerns at dpo@consensussupport.com
