Find a care homePrivacy Statement for Enquirers
At Barchester Healthcare we are committed to protecting your personal data and handling it responsibly. Our Privacy Statement for Enquirers explains how we collect and manage your data.
October 2024
- 1. WHAT IS THE PURPOSE OF THIS PRIVACY STATEMENT?
1.1 Under the UK GDPR and Data Protection Act 2018, we are required to explain to you why we collect your information, how we intend to use that information and whether we will share this information with anyone else. This statement applies to all Enquirers.
1.2 It is important that you read this Privacy Statement for Enquirers so that you know how and why we use your information. We may update this Privacy Statement for Enquirers at any time. It is also important that you inform us of any changes to the personal information we hold about you so that the information is accurate and up to date.- 2. WHO ARE WE?
2.1 We are Barchester Healthcare Homes Limited (Barchester), a company registered in England and Wales under company number 02849519 and with our registered office at 3rd Floor, The Aspect, Finsbury Square, London, United Kingdom, EC2A 1AS.
2.2 Barchester is the "Data Controller" for the information which we hold about you. This means that we are responsible for deciding how and why we hold your personal information.- 3. OUR DATA PROTECTION OFFICER
3.1 Our Data Protection Officer (DPO) is responsible for overseeing what we do with your information and monitoring our compliance with the Data Protection Laws.
3.2 Our DPO is Michael O’Reilly who is assisted by the Legal Team. If you have any concerns or questions about our use of your personal data, you can contact raise these by emailing dpo@barchester.com or writing to Data Protection Officer, 3rd Floor, The Aspect, Finsbury Square, London, United Kingdom, EC2A 1AS. Alternatively, if you wish to make contact but are unable to use any of the above methods, please contact the General Manager of the home in which you are volunteering who will be able to put your queries forward to the team.- 4. TYPES OF PERSONAL INFORMATION WE USE AND OUR LAWFUL BASIS FOR DOING SO
4.1 We process your personal information for a number of reasons. As an Enquirer, we process your data primarily to ensure that we can contact you:
4.1.1 in relation to your wish to volunteer at a Barchester home;
4.1.2 in relation to a commercial or voluntary service which you have offered to Barchester Healthcare;
4.1.3 in relation to your interest in a new placement or repeat placement in one of our homes or hospitals, and/or so that we can match you to one of our homes or hospitals based on yours/your loved one’s specific needs;
4.1.4 in relation to a media/press enquiry;
4.1.5 so that we can make you aware of:
4.1.5.1 the services we can provide; and
4.1.5.2 any upcoming events or activities which you may be interested in.Please refer to the Appendix for more information.
4.2 In accordance with the Data Protection Laws, we need a lawful basis for collecting and using information about you. These lawful bases are set out in Article 6 of the UK GDPR and, depending on the type of data, may require reliance on additional safeguards set out in Article 9 of the UK GDPR and within the Data Protection Act 2018.
Standard personal data:
4.3 We will process standard personal data about you. Please refer to the Appendix to see the types of data we might process about you.
4.4 Our Article 6 UK GDPR lawful bases for processing this type of data are because it is necessary for our legitimate interests (where they are not overridden by your rights) (Article 6(1)(f) UK GDPR).Special categories of personal data:
4.5 Some of the information which we may process about you may be “special category personal data”. Special category personal data require a greater level of protection than standard personal data. Please refer to the Appendix to see the types of special category personal data and criminal activity data we might process about you.
4.6 Our Article 6 UK GDPR lawful bases for processing this type of data are because it is necessary for our legitimate interests (where they are not overridden by your rights) (Article 6(1)(f) UK GDPR).
4.7 We also require an Article 9 UK GDPR basis and must meet other additional conditions specified within the Data Protection Act 2018 to process this type of data.- 5. SOURCE OF YOUR PERSONAL INFORMATION
5.1 The information described at section 4 which we collect about you will be obtained through a variety of sources which may include data from:
5.1.1 you directly, or your loved one on your behalf;
5.1.2 third parties e.g. healthcare professionals or care/nursing home brokerage services;
5.1.3 other entities/persons which fall outside of the above;
5.1.4 information which you have otherwise made public;
5.1.5 social media activity (such as Facebook, Linkedin etc.); and
5.1.6 because circumstances are variable and change with time there may in some instances be situations outside the list above and we regularly review our Privacy Statement for Enquirers to assess whether any updates are required.- 6. COMPLYING WITH DATA PROTECTION LAW
6.1 We will comply with the Data Protection Laws when using your personal information. At the heart of the Data Protection Laws are the data protection principles (Article 5(1) of the UK GDPR) which say that the personal information we hold about you must be:
6.1.1 processed lawfully, fairly and in a transparent way;
6.1.2 collected only for specified, explicit and legitimate purposes and not used in any way that is incompatible with those purposes;
6.1.3 adequate and relevant to the purposes we have told you about and limited only to those purposes;
6.1.4 accurate and, where necessary, kept up to date;
6.1.5 kept only as long as necessary for the purposes we have told you about; and
6.1.6 processed in a manner that ensures appropriate security.- 7. SHARING YOUR INFORMATION
7.1 We will share your personal information with third parties where we have a lawful basis for doing so.
7.2 The types of organisations/persons we may share your personal data with are as follows (but only in very limited circumstances, if required):
7.2.1 safeguarding authorities / commissioning bodies and Integrated Care Boards / other regulators (such as the Nursing and Midwifery Council and the Information Commissioner’s Office) (and in some circumstances, their professional advisors or authorised representatives).
7.2.2 the Police and other law enforcement agencies (for example, the Home Office), the courts, the Office of the Public Guardian and coroners.
7.2.3 Service providers: we may use external IT, software or customer experience providers who may have access to your personal data from time to time as is necessary to perform their services or may contact you in relation to your experience.
7.2.4 auditors / professional advisors (including solicitors and insurers).- 8. TRANSFERRING INFORMATION OUTSIDE OF THE UK AND THE EUROPEAN ECONOMIC AREA (EEA)
8.1 We strive to ensure that any data necessary to be shared with the companies we work with (i.e. our supply chains) remains within the UK or the EEA in the first instance. However, some companies that provide services to us are located in, or run their services from, countries outside of these areas and resultantly, on occasion, your personal data may be transferred to countries outside of these areas.
- 9. CAN WE USE YOUR INFORMATION FOR ANY OTHER PURPOSE?
9.1 We typically will only use your personal information for the purposes for which we collect it. It is possible that we will use your information for other purposes as long as those other purposes are compatible with those set out in this Privacy Statement for Enquirers. If we intend to do so, we will provide you with information relating to that other purpose before using it for the new purpose.
- 10. STORING YOUR INFORMATION AND DELETING IT
10.1 To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. We will only retain your personal information in line with periods calculated using such criteria and in consideration of how long it is reasonable to keep records to show we have met the obligations we have to you and by law, any time limits for making a claim, any periods for keeping information which are set by law or recommended by regulators, professional bodies or associations.
10.2 In some circumstances we may anonymise your personal information so that it can no longer be associated with you, in which case we may use such information without further notice to you.
- 11. YOUR RIGHTS
11.1 Under certain circumstances, you have the right to:
11.1.1 Request access to your personal information (commonly known as a “data subject access request”). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.
11.1.2 Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
11.1.3 Request erasure of your personal information in certain circumstances. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
11.1.4 Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) or public interest as our lawful basis for processing and there is something about your particular situation which leads you to object to processing on this ground. You also have the right to object if we are processing your personal information for direct marketing purposes.
11.1.5 In the limited circumstances where we are relying on your consent as our lawful basis to process your data for a specific purpose, you have the right to withdraw your consent for that specific processing at any time. If you withdraw your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another lawful basis for doing so.
11.1.6 Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.
11.1.7 Request the transfer of your personal information to another party in certain circumstances.11.2 If you wish to exercise any of the above rights, please contact our Data Protection Officer whose details are set out in Section 3.
- 12. AUTOMATED DECISION MAKING
12.1 You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making.
- 13. RIGHT TO COMPLAIN TO THE ICO
13.1 You have the right to complain to the Information Commissioner's Office (the "ICO") if you are not satisfied with the way we use your information. You can contact the ICO by writing to Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF or ico.org.uk.
- 14. CHANGES TO THIS PRIVACY STATEMENT
14.1 We reserve the right to update this Privacy Statement for Residents/Patients at any time where appropriate.
- APPENDIX
1. The standard personal data we may process about you includes:
- personal details (such as name, date of birth, gender, nationality);
- your contact details (such as your address, personal telephone number and personal email address);
- records of communications that we have had with you; any other information which you volunteer to us; and because circumstances are variable and change with time, there may in some instances be situations outside the list above, and we regularly review our privacy statements to assess whether any updates are required.
2. We will only process limited special category data about you, for the reasons set out in Section 4 where volunteered by you when making an enquiry as a prospective resident or volunteer, as information you consider to be relevant to your enquiry. This will be limited to, but may include, information about your health, including any disabilities or special requirements which you may have, medical condition or disability.