Pobl Care and Support– Privacy Information Notice
Your privacy is important to us. This information notice explains what personal data we collect from you and how we use it. Please read the summaries below and, if you’d then like more information, contact us.
Pobl Group Ltd (Incorporating reach, Gwalia Care & Support, Gofal a Chymorth Gwalia, Solas)
Tel: 01633 679911
Our Data Protection Officer is Gillian Owen and you can contact her at firstname.lastname@example.org Tel: 01792 488 066
Why do we process your personal information?
We process your personal information, including any special categories of personal information, in connection with managing your care and support needs. We process this information either because it’s necessary for us to do so in order to meet your needs and our contractual and regulatory obligations, or because there are laws that allow us, or require us, to process it.
If you didn’t allow us to have this information, we wouldn’t be able to manage your care and support needs.
Sometimes we process your personal information because, as a care and support provider, we have a legitimate interest in doing so to meet your needs, or there are other laws that allow us to do so. We only do this, though, when we’re confident that you would reasonably expect us to do so, for example, to make sure all staff who work with you know how you like to be supported.
In some instances we may require your consent in order to process your personal information, such as where you agree to us taking your photo. If we do, we will make this clear to you and will not process your information unless you consent to us doing so. You will then be given the option to withdraw your consent at any time.
What personal information do we process and where do we get it from?
Most of the personal information that we process is information provided to us about you or which you have shared with us, and people who might speak on your behalf such as your family, advocate or close friend. This could include things like your name, address, telephone numbers, date of birth, and national insurance number. We may also process special categories of personal information such as your race or ethnic origin, religion, and information concerning your health or sexual orientation but will only do this where there is a lawful basis for us to do so, for example, to provide high standards of quality and safety of health and social care, to protect your vital interests, and where there are laws that allow us, or require us, to do so.
Sometimes we process personal information about you that we’ve been given by other organisation such as the local authority or health board who may be paying for your care and support. This could include, for example, information relating to your care and support needs. The other organisation would only share this information with us, though, where either you’ve given them permission to do so or the law allows them to do so.
Who do we share your personal information with?
In order to provide you with the best care and support, we sometimes share your personal information with other people or organisations. This may include your landlord and organisations like the local authority, to allow them to process the information shared to meet your needs. It may also include the Police and other agencies for the purposes of crime prevention or detection. We only do this, though, if you consent for us to do so, or where there are laws that allow us to do so, or if it’s necessary for us to do so in order for us to manage your care and support needs.
Do we ever transfer your personal information outside of the European Economic Area?
Much of the personal information that we process at Pobl is held electronically and some on paper, and most of this is held in our main offices at Newport and Swansea. Some of our document systems store the information across various Pobl schemes and sometimes off-site and, when they do, we work closely with the software / archive providers to make sure that the information is stored in accordance with the requirements of the General Data Protection Regulation (GDPR).
Sometimes personal information is stored outside of the EEA, such as when we post photos from an event on Facebook. Where this happens, we ensure that these organisations are also compliant with the spirit of GDPR.
How long do we hold your personal information for?
We hold your personal information for a period of up to seven (7) years from the time your care or support with us ends and, usually, this is the longest that we will hold any of your personal information for. Footage from Pobl CCTV cameras is retained for a period of up to 12 weeks and is then deleted. CCTV data may be downloaded and held for longer only where there is a legal basis to do so.
At the end of this time, we’ll securely dispose of your personal information. When we have to hold your personal information for longer than this, for example, on some of our computer systems, we’ll look to anonymise it.
What rights do you have?
You have a number of rights under the General Data Protection Regulation (GDPR).
You have the right to access the personal information that we process about you. In some circumstances, if you believe that the personal information is incorrect or incomplete, you may request that we have it corrected or deleted. You also have the right, in certain circumstances, to block the processing of your data and the right to object to some types of processing. You also have the right to lodge a complaint to a supervisory authority – the Information Commissioner’s Office for the UK.
For more information on individual’s rights, you may wish to visit the Information Commissioner’s website: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/