Who we are
We are ProCare Nursing Agency Ltd, and we act as a data controller of your personal data.
We have a dedicated Data Protection Officer (DPO) that you can contact by writing to the above address and marking it for the attention of the DPO. Alternatively you can go to the Contact Us section of our website: www.procarenursing.co.uk.
The information we process
Personal Information that we process includes, where relevant:
- Personal details (e.g. title, name, address, telephone number, email address).
- Your gender, date of birth and/or age.
- Your nationality, passport and/or visa & citizenship details (members of staff).
- Family members’ or other contacts’ details.
- Financial details (e.g. tax, wage & bank a/c details if we pay you; invoicing information if we supply
you with a care service or member(s) of staff).
- Information about your health (e.g. relevant details to provide you with a care service, or to place you for work if you are an employee).
- Vehicle information.
- Information we receive from third parties.
- Criminal Records Information (for vetting members of staff).
Where we get our information from
- Most of the information we hold will have come directly from you (or other family members).
- Information generated about you when you use our services or work for us.
- Third parties (e.g. local authorities [incl. social workers]; the government [e.g. DWP or HMRC]; your
GP; other family members).
What we use your personal data for
- The provision of quality care services and/or the supply of care staff.
- Managing & coordinating care services and for quality assurance purposes.
- Payroll and invoicing.
- Maintaining & updating those records required by the law and/or our regulators.
- To follow guidance & best practice as set by the rules of government and regulatory bodies.
- Recovery of debt.
- Communicating with you.
The legal grounds for our processing your personal data
We rely on the following legal bases to use your personal data:
- Your consent or explicit consent.
- Where it is needed to provide you with our services and to fulfil our contractual obligations.
- To comply with our legal obligations.
- Where necessary to protect your vital interests.
- For our legitimate business interests (except where these are overridden by your interests, rights or freedoms).
- Where necessary for medical purposes
When we share your personal information
We may share your information for the purposes listed above with:
- Governmental and regulatory bodies such as HM Revenue & Customs, the Department of Work &
Pensions (members of staff).
- Care Inspectorate Wales.
- Local Authority Social Services Departments and Contract and Compliance Departments.
- Complete Background Screening and the Disclosure & Barring Service (vetting of staff).
How and when you can withdraw consent.
- When we are relying on your consent to process personal data, you can withdraw this at any time by contacting us as specified in paragraph one of this notice.
Is your personal information transferred outside the UK or the EEA?
The simple answer is no – we have no legitimate reason to transfer your data outside the UK.
If your personal information changes
You should inform us (preferably in writing) so that we can update our records.
How long do we keep your information?
We only hold your information for as long as is necessary based on the following criteria:\
- For as long as we provide you with either a service or work.
- For as long as we have reasonable business needs (such as managing our relationship with you).
- For as long as legal and regulatory obligations require.
Keeping your information safe.
We are committed to ensuring that your information is secure with us (and with any third parties who act on our behalf) and to fully complying with the General Date Protection Regulations. We review and update our data protection measures at regular intervals.
All individuals have the following rights under data protection laws, although they do not apply in all circumstances.
- The right to be informed about the processing of your personal data.
- The right to have your personal data corrected if it is inaccurate or incomplete.
- The right to object to processing of your personal information.
- The right to restrict processing of your personal information & to have your personal data erased.
- The right to request access to your personal information.
- The right to move, copy or transfer your personal information.