Privacy Policy

Right Choice Living Limited, company number 16439112, is the data controller for the information described in this notice. We are registered with the Care Quality Commission, provider ID 1-23686595812.

We handle information about people's health and care, which is some of the most sensitive information there is. This notice explains what we hold, why, who we share it with, and what you can ask us to do about it.

What we collect

Enquiries. Through this website: your name, phone number, email address, who the care is for, when you would like it to start, and anything you choose to write in the message box.
Care records. If you go on to use our service: contact and next-of-kin details, care and support plans, risk assessments, daily visit notes, medication administration records, and details of any incidents or safeguarding concerns.
Health information. Diagnoses, medication, mobility, continence, mental capacity and communication needs, where these are relevant to providing safe care. This is special category data under UK GDPR.
Website logs. Your IP address, browser and the pages requested, kept for security purposes for 30 days and not used to profile you.

Why we use it, and our lawful basis

To respond to your enquiry and arrange an assessment — our legitimate interests in answering people who contact us.
To provide and manage care — performance of our contract with you, and for health information, Article 9(2)(h) of UK GDPR: processing necessary for the provision of health or social care.
To keep the records we are required to keep as a CQC-registered provider, and to make safeguarding notifications — legal obligation, and Article 9(2)(b) and 9(2)(h) for health information.
To protect people at risk of harm — Article 9(2)(c), vital interests, where someone is physically or legally incapable of giving consent.
To manage staff recruitment, including DBS checks — legal obligation and legitimate interests.

Who we share it with

We do not sell your information and we do not use it for advertising. We share it only where it is necessary for your care or where the law requires it:

Your GP, district nursing team, hospital, pharmacy and other health professionals involved in your care.
Your local authority or the NHS, where they are commissioning or funding your care.
The Care Quality Commission, as our regulator, including statutory notifications.
The local authority safeguarding team and the police, where there is a risk of harm to an adult at risk.
Your named family members or representatives, where you have told us that is what you want.
Our software providers, who process data on our behalf under a written contract and may not use it for anything else.

Your information is stored in the UK and we do not transfer it outside the UK.

How long we keep it

Care records: eight years after our care ends, in line with the retention schedule in the Records Management Code of Practice for health and social care.
Records for a child or young person: until their 25th birthday, or 26th if they were 17 when care ended.
Enquiries that do not become care: twelve months, then deleted.
Safeguarding and incident records: as long as required by the relevant statutory or local safeguarding retention rules.
Staff recruitment records for unsuccessful applicants: six months.

How we protect it

Access is restricted to the staff who need it to do their job, and is logged.
Electronic records are encrypted in transit and at rest, and paper records are kept locked away.
Every member of staff completes data protection and confidentiality training, and is bound by a confidentiality clause in their contract.
We have a breach procedure, and we will report a notifiable breach to the Information Commissioner's Office within 72 hours and tell you if it is likely to affect you.

Your rights

Under UK GDPR you can ask us to:

Give you a copy of the information we hold about you — a subject access request, which we answer within one month.
Correct anything that is wrong, or add your own statement where we disagree about a record.
Delete information, where we are not required to keep it for care, regulatory or legal reasons.
Restrict or object to how we use it, including where we rely on legitimate interests.
Withdraw consent, where consent is what we relied on. This will not affect anything done beforehand.

To exercise any of these, or to ask who our data protection lead is, email info@rightchoicelivingltd.co.uk or write to us at our office. If you are unhappy with how we have handled your information you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. You can complain to the ICO without going through us first, though we would rather have the chance to put it right.

Cookies

This website sets no advertising, analytics or tracking cookies, so there is nothing here for you to consent to or opt out of. Nothing on these pages is loaded from a third party.

Changes to this notice

If we change how we use personal information we will update this page. If the change is significant we will tell the people it affects directly rather than relying on you noticing.