Privacy Policy

The General Data Protection Regulation (GDPR) is European Union (EU) legislation that became directly applicable in EU Member States (e.g., the UK) on 25 May 2018. It is a regulation by which the European Parliament, the Council of the EU and the European Commission intend to strengthen and unify data protection for all individuals within the EU.

The GDPR is designed to replace the existing Data Protection Act 1998 and allow individuals to better control their personal data, as well as enable organisations to think harder about the privacy and controls they have on the data they hold and process about individuals. These modernised and unified rules will allow businesses to make the most of the opportunities and benefit from reinforced consumer trust.

Introduction

Welcome to the DMP Healthcare LTD privacy notice.

DMP Healthcare LTD respects your privacy and is committed to protecting your personal data. This privacy notice will inform you how we look after your personal data if you are a visitor to this website; and, if you are a resident, or a prospective resident, of one of our homes.

This notice is to inform you about your privacy rights and how the law protects you.

Index

• Important information and who we are
• The data we collect about you
• How is your personal data collected?
• How we use your personal data
• Disclosures of your personal data
• International transfers
• Data security
• Data retention
• Your legal rights

Purpose of this privacy notice

This privacy notice aims to give you information on how DMP Healthcare LTD collects and processes your personal data, including any data you may provide:

when contacting us in relation to our care home services;

if you are a resident; and/or as a user of this website.

This website is not intended for children and we do not knowingly collect data relating to children.

It is important that you read this privacy notice so that you are fully aware of how and why we are using your data.

Controller

DMP Healthcare LTD ("we", "us" or "our") is the controller and responsible for your personal data.

DMP Healthcare Limited, a company registered in England and Wales under company number 10860386 and with our registered office at 14 Lyon Road, Congress House, Harrow, Middlesex, United Kingdom, HA1 2EN.

Who is or Data Protection Champion –  Heer Shah admin@dmphealthcare.co.uk

Changes to the privacy notice and your duty to inform us of changes

This version was last updated on 20th December 2020 and a copy can be obtained by contacting us.

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.

Third-party links

This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.

When you leave our website, we encourage you to read the privacy notice of every website you visit.

The data we collect about you

Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).

Website users

If you contact us using the details on our website, or via our contact us form, we will use the contact information you provide to respond accordingly to your query, and for any subsequent correspondence. We do not collect any other data that identifies visitors to our website.

We may collect, use and share Aggregated Data such as statistical or demographic data for research purposes. Aggregated Data may be derived from your personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity; for example, we may use this data to calculate the percentage of users accessing a specific website feature.

If we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy notice.

Residents

We may collect, use, store and transfer different kinds of personal data about you and your family members or representatives, which we have grouped together follows:

• Identity Data includes name, gender, date of birth, nationality, religious beliefs;
• Contact Data includes previous address, telephone numbers and photographs;
• Financial Data includes bank account and payment card details together with your fee contract;
• Medical Information includes GP contact details, NHS number, medication records, allergy information, care plans and accident forms;
• Next of kin Data includes names, addresses and contact details of your next of kin;
• Legal Data includes lasting powers of attorney and DOIs;
• Residency Data includes your residency agreement and CQC notifications;

If you fail to provide personal data

Where we need to collect personal data by law, or under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with care home services).

In this case, we may have to cancel our service but we will notify you if this is the case at the time.

How is your personal data collected?

We collect personal information from you of your contact with us, including by phone (we may record or monitor phone calls to make sure we are keeping to legal rules, codes of practice and internal policies, and for quality assurance purposes), by email, through our websites, by post, by filling in forms, through social media or face-to-face (for example, in medical consultations, diagnosis and treatment).

We also collect information from other people and organisations. For all our residents, we may collect information from:

• a family member, or someone else acting on your behalf;
• doctors, other clinicians and health-care professionals, hospitals, clinics and other health-care providers;

How we use your personal data

We will only use your personal data when the law allows us to; we will use your personal data in the following circumstances:

• where we need to perform the contract, we are about to enter into or have entered into with you;
• where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests;
• where we need to comply with a legal or regulatory obligation;
• where it is necessary for the purposes of preventive or occupational medicine, medical diagnosis, to provide health or social care or treatment, or to manage health-care or social-care systems (including to monitor whether we are meeting expectations relating to our clinical and non-clinical performance);
• we have your permission - as is best practice, we will only ask you for permission to process your personal information if there is no other legal reason to process it. If we need to ask for your permission, we will make it clear that this is what we are asking for and ask you to confirm your choice to give us that permission. If we cannot provide a service without your permission (for example, we can’t manage and run a health service without health information), we will make this clear when we ask for your permission. If you later withdraw your permission, we will no longer be able to provide you with a service that relies on having your permission.
• We process your personal information for a number of legitimate interests, including managing all aspects of our relationship with you, for marketing, to help us improve our services and products, and in order to exercise our rights or handle claims. More detailed information about our legitimate interests is set out below.

Legitimate interest is one of the legal reasons why we may process your personal information. Taking into account your interests, rights and freedoms, legitimate interests which allow us to process your personal information include:

• to respond to any queries, request or complaints you make directly to us, via our website or otherwise, which may include directing you to other marketing information if we believe this will assist your query;
• to manage our relationship with you, our business and third parties who provide products or services for us (for example, to check that you have received a service that you’re covered for, to validate invoices and so on);
• to provide health-care services on behalf of a third party;
• to make sure that claims are handled efficiently and to investigate complaints (for example, we may ask your treatment provider for information/records to make sure we receive accurate information and to monitor the quality of your treatment and care);
• to keep our records up to date and to provide you with marketing as allowed by law;
• to develop and carry out marketing activities and to show you information that is of interest to you, based on our understanding of your preferences (we combine information you give us with information we receive about you from third parties to help us understand you better);
• for statistical research and analysis so that we can monitor and improve products, services, websites, or develop new ones;
• to contact you about market research we are carrying out;
• to monitor how well we are meeting our clinical and non-clinical performance expectations in the case of health-care providers;
• to report to the local authority or CQC where required to do so;
• to enforce or apply our website terms of use, our policy terms and conditions or other contracts, or to protect our (or our customers’ or other people’s) rights, property or safety;
• to exercise our rights, to defend ourselves from claims and to keep to laws and regulations that apply to us and the third parties we work with; and
• to take part in, or be the subject of, any sale, purchase, merger or takeover of all or part of the business.

Cookies

A cookie is a small text file which is placed onto your computer (or other electronic device) when you access our website, that track, save and store information about your interactions and usage of our website. The cookies we use do not store, save or collect your personal information.

We use cookies to better your experience while visiting our website. Our website uses a cookie control system allowing you on your first visit to allow or disallow the use of cookies on your computer and/or device.

How to turn off cookies - if you do not want to accept cookies; you can change your browser settings so that cookies are not accepted. If you do this, please be aware that you may lose some of the functionality of this website.

For further information about cookies and how to disable them please go to:

www.aboutcookies.org  or www.allaboutcookies.org

Change of purpose

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.

If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

Disclosures of your personal data

We share your information within DMP Healthcare, with funders arranging services on your behalf, with people acting on your behalf (for example, your next of kin) and with others who help us provide services to you (for example, health-care providers and medical-assistance providers) or who we need information from to allow us to handle or confirm claims or entitlements (for example, professional associations). We also share your information in line with the law. For more information about who we share your information with, please see below.

We sometimes need to share your information with other people or organisations for the purposes set out in this privacy notice.

For all our residents, we share your information with:

• Staff of the DMP Healthcare;
• doctors, clinicians and other health-care professionals, hospitals, clinics and other health-care providers;
• people or organisations we have to, or are allowed to, share your personal information with by law (for example, for fraud-prevention or safeguarding purposes, including with the Care Quality Commission);
• the police and other law-enforcement agencies to help them perform their duties, or with others if we have to do this by law or under a court order;
• if we (or any member of DMP Healthcare LTD) sell or buy any business or assets, the potential buyer or seller of that business or those assets;
• a third party who takes over any or all of the DMP Healthcare assets (in which case personal information we hold about our residents or visitors to the website may be one of the assets the third party takes over);
• those providing your treatment and other benefits;
• national registries such as the Cancer Registry;
• national screening databases, such as the NHS Cervical Screening recall system;
• government authorities and agencies, including the Health Protection Agency (for infectious diseases such as TB and meningitis); and
• organisations that carry out patient surveys on our behalf.
• If we share your personal information, we will make sure appropriate protection is in place to protect your personal information in line with data-protection laws.

International transfers

We may transfer personal outside of the European Economic Area (EEA). Where we transfer personal data outside of the EEA it is only with appropriate safeguards in place, to ensure your personal information is treated by those third parties in a way that is consistent with and which respects the EU and UK laws on data protection.

Data security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

Data retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

Details of retention periods for different aspects of your personal data are set out below:

Your legal rights

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your working relationship with us.

Under certain circumstances, you have the right to:

• Request access to your personal information (commonly known as a "data subject access request").
• Request correction of the personal information that we hold about you.
• Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it.
• Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes.
• Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.
• Request the transfer of your personal information to another party.
• Withdraw consent in the limited circumstances where you may have provided your consent to the processing of your personal information for a specific purpose, you have the right to withdraw your consent for that specific processing at any time.

If you would like to make a request with regard to any of your data subject rights, please contact: 14 Lyon Road, Congress House, Harrow, Middlesex, United Kingdom, HA1 2EN or Email: admin@dmphealthcare.co.uk