Exemplar Health Care generates records from our contact with you, including records that may contain personal information which is subject to UK Data Protection Act 1998 and the General Data Protection Regulation (GDPR) 2018. To explain our approach to Data Protection our privacy notice covers the following areas:
How we collect personal information
We collect information in a variety of ways including using our website (see Information we collect via this website and Cookies); on various forms, service agreements, and contracts; through our ongoing contact with you; in some cases we collect CCTV images and some telephone calls may be recorded.
When you apply to become an Exemplar Health Care service user, we request and hold on file any references necessary to assess your application including as appropriate (but not limited to) information from other service providers, the Police, the NHS, support workers, social workers, mental health workers and credit reference agencies.
If you provide us with personal information relating to members of your family or your associates we will assume that you do so with their knowledge and their consent to the collection and processing of the information.
Where a service user does not have capacity, information provided by family or associates will be treated in the same way as if they were the service user.
It is important that you notify us of any changes to your personal information.
Who the personal information relates to
We collect personal information about:
This includes current, former and potential service users (and potentially family or associates), who live in our properties or access our support and other services, and could also include their family and people associated with them.
This includes current, former and potential colleagues, as well as Board and Committee members, apprentices and volunteers.
Anyone who makes a complaint or enquiry and visitors to our website and offices.
How we use our records
We will collect, process, share and securely store personal information in compliance with Data Protection legislation.
All information will be retained in accordance with the requirements of our Records Management Policy.
We keep these records to allow us to:
- Allocate accommodation
- Manage our provision of care
- Process payment and service charges
- Offer help with debts and benefits
- Provide Support services which help service users achieve their goals
- Prevent & detect crime and resolve disputes
- Promote safety and the quiet enjoyment of our facilities
- Engage with service users and make improvements to our products and service users
- Promote equal opportunities and fair treatment for all colleagues and customers
- Provide employment and training advice and opportunities
- Manage employment and colleague development
- Work with partners to deliver mutual success
- Provide information (e.g. about products and services) you request from us
Sensitive personal information
Under Data Protection legislation, certain personal information is classified as “sensitive”. Sensitive data is information relating to physical or mental health, sex life, religious or philosophical beliefs, political opinions, membership of a Trade Union, allegations of criminal offences and criminal convictions and offences. We minimise our holding and use of sensitive categories of personal information but, given the services we provide, there are times when we use it, for example when providing accommodation for disabled persons or those with problems around substance abuse, or when helping someone to access care services.
When we collect specific sensitive data we will notify you of how we will use it, including who it may be shared with.
Job applicants and our current and former employees
Personal information about unsuccessful candidates will be held for six months after the recruitment exercise has been completed, it will then be destroyed. We retain de-personalised statistical information about applicants to help inform our recruitment activities, but no individuals are identifiable from that data.
Once a person has taken up employment with Exemplar Health Care, we will compile a file relating to their employment. The information contained in this will be kept secure and will only be used for purposes directly relevant to that person’s employment. Once their employment with Exemplar Health Care has ended, we will retain the file in accordance with the requirements of our retention schedule and then destroy it.
Complaints or enquiries
We try to meet the highest standards in all areas of our business. We take any complaints we receive about this very seriously. We welcome any suggestions for improving our procedures. If you do make a complaint or enquiry we may collect and store personal information in relation to this matter, we will keep it secure and use it only for the purpose it was collected. When the matter is resolved or completed, we will retain the details in accordance with our retention schedule and then destroy them.
Information we collect via our website
We collect and store personal information via our website for a number of reasons (see above) including to help us provide better services and products to existing and potential service users. The information we collect fits into two categories:
- Personal information entered into online forms by visitors to this website.
- Anonymous statistical information collected by cookies.
If you request a brochure, call back or information from us via an email, online form or register your interest in a service, we will use your information to fulfil that request. We may also ask if you would like to receive our regular marketing emails. You can choose to opt out at this point and you will be given the opportunity to opt out every time we contact you.
Exemplar Health Care is committed to preserving the privacy of all visitors to www.exemplarhc.com. All data is collected and processed in accordance with the Data Protection Act. Data submitted through the online forms will be incorporated into the Exemplar Health Care database and used for future marketing purposes, and will not be passed to any third party.
Google analytics collects traffic information surrounding website visits. It tracks details such as number of visits, length of visit, search engine used etc.
This cookie is used to record what users have viewed. It collects information in an anonymous form. This cookie expires when the browser is closed.
To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.allaboutcookies.org.
To opt out of being tracked by Google Analytics across all websites, visit tools.google.com/dlpage/gaoptout.
Some of our properties have CCTV in public areas to deter crime and anti-social behaviour and to promote public safety by helping to identify and prosecute criminal offenders. You can ask for a copy of any CCTV images taken of yourself by making a subject access request. See Accessing your Information.
Sharing your information
Your personal information will be kept secure and confidential. Usually we will not disclose personal data without consent but we may share information between with third parties and other agencies we work with, including Local Authorities, Social Services, NHS when Exemplar Health Care believes it is in your or the public’s interest to do so, or as required by law.
We may ask for your consent to store or process your personal information for specific purposes. This will be on an opt-in basis. Consent will not be assumed by default. However, we may store and process your personal data for specific purposes where we have a legitimate business interest to do so.
Accessing your information
Please contact us if you would like copies of some specific information from your files, and we will provide it as quickly as possible.
If you require a substantial amount of your personal information, there is a formal process for this, under Data Protection legislation, known as a Subject Access Request (SAR).
What you need to know about making a subject access request:
You can write to us or email us with your request, or download the SAR form for your convenience, which you can post or email back to us. Please write to:
Exemplar Health Care
Tel: 01709 565 795
We may require proof of your identity and address – we will let you know this when we receive your request. There is more information on this on the SAR Form (link above.)
There is no charge for servicing a normal Subject Access Request under Data Protection legislation. However, there is provision in the legislation for Data Controllers to make a charge where a request involves disproportionate effort to recover and provide the information required.
When we receive your valid request, with proof of identity and address if required, we will respond and provide your information within one calendar month at the latest.
You can request to see any of the information that we may hold about you, including CCTV images, but the more specific you can be about what you require, the quicker we can respond to your request.
If you are requesting CCTV footage of yourself, please specify the time, date and location of the footage, and supply a clear photograph so that we can find you on the footage.
Please be aware that we may need to edit some information out, if it relates to other people, as we must protect the privacy rights of all individuals.
If you have any queries about accessing your information please email firstname.lastname@example.org or call on 01709 565 795.
Security of information
For further information on how we maintain the security of your information, please see our Data Protection and Informational Governance Policy.
Changes to our privacy notice
This privacy notice will be updated to reflect changes either to the way in which we operate or changes to the data protection legislation. To make sure that you keep up to date, we suggest that you revisit this notice from time to time.
Links to other websites
The notice is limited to this website only. If you follow a link to an external site, we recommend that you check the privacy notice of that site before giving any personal details.
We welcome any queries you may have regarding this Privacy Notice, or any information we hold about you. Please contact us at email@example.com or on 01709 565 795.