How we will use your information
Guinness Care and Support Ltd, 30 Brock Street, Regent’s Place, London, NW1 3FG will be responsible for determining the use of your information.
We’re committed to protecting the personal information we collect about you. This privacy notice explains what happens to the information you are providing to us.
Our obligations under Data Protection Regulations are overseen by the Information Management Governance and Risk Team who can be contacted on [email protected]
Guinness Care and Support has appointed a Data Protection Officer to monitor our compliance with Data Protection Regulations. If you have any concerns they can be contacted on:
- [email protected]
- Data Protection Officer
Why do we need this information?
We only collect the minimum amount of personal data in order to:
- Undertake a full assessment of your needs as a potential care at home customer
The information you provide is required to fulfil our responsibility under the:
- Mental Capacity Act 2005
- The Care Act 2014
- The Health and Social Care Act 2008 (Regulated Activities) Regulations 2014
- Mental Capacity Act 2005 and Mental Capacity Act Code of Practice
- Mental Health Act 1983
- Mental Health Act 2007
- Code of Practice (Mental Health Act 1983)
Guinness Care will use your personal information:
- Where it is required for us to consider your care requirements prior to entering into a contract.
Who will have access to my information?
Your information will be used by internal Guinness Teams:
- involved in processing your application
We may also share details with other outside agencies, or with a regulator, the local authority or a central government department, when we are satisfied that they have a good reason for needing information about you, for example:
- we have an obligation to provide them with that information;
- to assist in providing the Services - for example, if you need a medical opinion
- the police if they are investigating a crime or anti-social behaviour;
- the agency is carrying out genuine research; or
- Guinness Care is working with the agency to prevent fraud.
Such information will be treated by Guinness Care at all times as confidential, and only released by Guinness Care to a third party if in its discretion it considers such release necessary in your best interests, as required elsewhere in the Service Provision Agreement to do so or otherwise permitted by law.
In order to be able to provide you with effective services we will be required to share information with external organisations:
- Your relevant local authority
- External health professionals in the assessment of your medical circumstances
- 3rd party contractors who assist us to provide services to you
In some cases we may have a duty to disclose your information by law to:
- Our partner organisations whose purposes are compatible with ours
- Other housing associations
- Local authorities, regulators and government departments
- Police, fire services or health authorities, or medical staff
- Others who may need information from us for their own purposes (for crime prevention or detection, for the prevention and detection of fraud
We won’t share your personal information with anyone who claims to represent you unless we’re satisfied that you have appointed them or they act in some recognised official capacity
Where is my information held?
In order to provide services to you your information will be stored within the European Economic Area:
The Guinness Partnership has ensured that appropriate safeguards are in place for these transfers such as:
- having contracts or data processing agreements in place with the relevant third parties who assist us to provide services to you
- following the principles outlined in information security standards (e.g. ISO27001)
- confirming third party I.T. providers are certified against Information security standards
- ensuring encryption is used where possible to safeguard your personal information
- mandating Data Protection training for Guinness Partnership employees
How long we keep it
The information you have provided will be kept for:
- 12 months from the closure of the referral if you do not become a customer of Guinness Care
What rights do I have?
The General Data Protection Regulations gives you rights to exercise greater control over how we use your information. To ask Guinness to consider any of your information rights as indicated below please write to:
The Information Management Governance and Risk Team
1 Stable Street
Or email [email protected]
We will consider each and every request and respond within one month. If your request is particularly complex we may extend this, by exception, for up to a further 2 months. We will let you know if this is the case at the earliest opportunity.
Right of Access
You have the right to request access to your own records which, with some exceptions, entitles individuals to a copy of information held about them.
You must apply in writing, giving your names, address and date of birth and stating the information you require. Alternatively you can complete a Subject Access Request form which can be found on our website www.guinnesspartnership.com
We will require 2 forms of identification to ensure that it is you who is making the request, so that we do not disclose any of your information to someone not entitled to receive it.
Right to have inaccurate data corrected (Right to rectification)
If you consider that any part of the information held in your record is inaccurate you can apply in writing to have this corrected. If we agree that that information is incorrect, we will amend the record. If we are not satisfied that the information is incorrect, a note will be made of the information you consider is inaccurate. You will be given a copy of either the correction or the note.
Please help us to keep information about you accurate by telling us about any changes in your circumstances e.g. change of name, telephone number etc.
Right to have data deleted (Right to erasure)
If you consider that we should no longer hold certain types of data about you, you can apply in writing, including the reasons, to have this data ‘erased’.
We will assess your request and inform you if we agree and when you can expect to have confirmation that your data has been deleted.
Right to stop use of personal data (Right to restriction of processing)
You have the right to request, in writing, us to restrict the use of your personal details under one of the following circumstances:
- You have requested inaccurate data to be corrected. We cannot use your data until we have verified your request;
- You feel our use is unlawful but would prefer the data to be restricted rather than deleted;
- We no longer need to retain the information but you feel it is required for legal proceedings;
- You dispute the legitimate interests of us collecting and using your information.
Right to Data Portability
You have the right to request, in writing, and receive any data that you have provided to us under this notice in a structured machine-readable format or to request us to send it to another organisation.
What to do if you if you are unhappy with the way your information is being processed
If at any point you believe the information we process on you is incorrect, wish to have it corrected or deleted or you wish to raise a complaint on how we have handled your personal data, you can contact our Data Protection Officer who will investigate the matter.
If you are not satisfied with our response or believe we are processing your personal data not in accordance with the law you can complain to the Information Commissioner’s Office (ICO). www.ico.org.uk