We are Cedars Care Home (Southend-on-Sea) Limited, a business incorporated in England and Wales. Our company number is 04903070 and our registered address is Russell House, Oxford Road, Bournemouth BH8 8EX.

We are committed to ensuring that your privacy is protected. We comply fully with the General Data Protection Regulation (EU 2016/679) (“GDPR”).

This privacy policy sets out how we collect personal information from you and how the personal information you provide will be processed by us. By visiting our website you are accepting and consenting to the practices described in this privacy policy. You are welcome to access our site without disclosing your personal data.

What information do we hold and how will we use it?

Information you give us

You may give us information about you by completing enquiry forms on the website or by requesting information or brochures via the website. The information you give us may include your name, email address, address/location and phone number.

We collect additional information automatically about your visit to our website to improve our online service, and this information is stored in the UK. Please see our cookie policy for more information. By submitting personal information on the website, you agree to the storing of your personal information in accordance with this privacy policy.

We will retain this information while we are corresponding with you or providing services to you or to a resident you represent. We will retain this information for six months.

Information we collect about you

We may collect the following information from you when you visit the website:

  • Technical information, including the Internet protocol (IP) address used to connect your computer to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform; and
  • Information about your visit, including the full Uniform Resource Locators (URL), clickstream to, through and from the website (including date and time), products you viewed or searched for, page response times, website errors, length of visits to certain pages, page interaction information, methods used to browse away from the page and any phone number used to call our helpline.

We retain this information for six months.

Information we receive from other sources

This includes information that we receive about you when you use other websites operated by us or other services we provide. This information may include your name, email address, postal address and phone number. We retain this information for six months.

Cookies

The website uses cookies to distinguish you from other users of the website. For detailed information on the cookies we use and the purposes for which we use them, please see our cookie policy.

Use made of the information

We may use the information we receive and/or collect about you to:

  • Fulfil our obligations under any contract we have entered into with you or with a resident you represent, and to provide you or the relevant resident with information or services you or the resident has requested.
  • Send you newsletters and marketing information if you have consented to us doing so
  • Keep you informed about products and services we feel may interest you, or permit third parties to do so if you have provided the appropriate consent
  • Monitor website usage and provide statistics to third parties for the purposes of improving and developing the website and the services we provide via the website

We process personal information for certain legitimate business purposes, which include some or all the following:

  • Where the processing enables us to enhance, modify, personalise or otherwise improve the website, its services or communications
  • To identify and prevent fraud
  • To enhance the security of our network and information systems to better understand how people interact with our website
  • To administer the website and carry out data analysis, troubleshooting and testing; and to determine the effectiveness of promotional campaigns and advertising

Third-party sites

Our website may contain links to third-party websites. They are provided for your convenience only and we do not check, endorse, approve or agree with such third-party websites nor the products and/or services offered and sold on them. We have no responsibility for the content, product and/or services of the linked websites or the data that you disclose upon them. Please ensure that you review all terms and conditions of website use and the privacy policy of any such third-party websites before use and before you submit any personal data to those websites.

How safe is your information?

Protecting your security and privacy is important to us and we make every effort to secure your information and maintain your confidentiality in accordance with the terms of the Data Protection Legislation. The website is protected by various levels of security technology, which are designed to protect your information from any unauthorised or unlawful access, processing, accidental loss, destruction and damage.

We will do our best to protect your personal data but the transmission of information via the Internet is not completely secure. Any such transmission is therefore at your own risk. 

Disclosure of your information

We will not share, sell or distribute any of the information you provide to us (other than as set out in this policy) without your prior consent, unless required to do so by law.

We may share your personal information with any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the Companies Act 2006, such as advertisers and advertising networks that require the data to select and serve relevant adverts to you and analytics and search engine providers that assist us in the improvement and optimisation of the website.

Please note we may need to disclose your personal information where we:

  • Sell any or all our business or assets or we buy another business or assets in which case we may disclose your personal data to the prospective buyer or seller
  • Are under a legal duty to comply with any legal obligation or to enforce or apply our terms and conditions; or
  • Need to disclose it to protect our rights, property or the safety of our customers or others, including the exchange of information with other companies, organisations and/or governmental bodies for the purposes of fraud protection and credit risk reduction.

Your rights in respect of your data

Under GDPR you have certain rights that must be respected, including the right to be informed about the collection and use of your personal data, to access and rectify your own information, have it deleted or to complain.

Amending or rectifying your information

If any of the information you provide to us via the website changes, please let us know as soon as possible so that we can make the necessary amends to the information we hold for you on our database. If you wish to make changes to your information, please contact us.

Accessing or transferring your information

If you wish to access the information we hold about you, or request that such information be transmitted directly to another data controller, please contact us.

Processing your requests

We shall process your request to access your information within one month of receipt, or we’ll let you know within that timeframe if we need more information from you. We will process your request free of charge.

Withdrawing your consent

Where we are processing personal data we have obtained via the website on the basis of having obtained consent from you, you have the right to restrict, object to or withdraw your consent to the processing of your personal data at any time. If you would like to withdraw your consent or prefer not to receive any of the information contained in the Use Made of the Information section (or if you only want to receive certain information from us) please contact us. Please also bear in mind that if you object, this may affect our ability to carry out the tasks above for your benefit.

Deleting your information

If you wish to have your information removed from our database or if you do not want us to contact you for marketing purposes, please let us know by clicking the “Unsubscribe” option in any email we send to you and providing the details requested or by contacting us. We will take steps to ensure that this information is deleted as soon as is reasonably practicable.

Making a complaint

If you have any complaints about our use of your personal data, please contact us. You also have the right to complain to the relevant supervisory authority in your jurisdiction. In the UK, the supervisory authority is the Information Commissioner’s Office.

Your queries or comments

If you have any queries for Terence O’Donnell, our GDPR officer, you can email him here.

If you have any further queries or comments on our privacy policy, please contact us. We also welcome your views about our website and our privacy policy.

When the Home processes your personal data we comply with the Data Protection Act 1998 (“DPA”) the General Data Protection Regulation 2016 (“GDPR”).

Your personal data includes all the information we hold that identifies you or is about you, such as your name, email address, postal address, date of birth, location data, and opinions we document about you. It also includes special categories of data like medical and health records, care plans, and information about your religious beliefs, ethnic origin, race, sexual orientation, and political views.

Everything we do with your personal data counts as processing it, including collecting, storing, amending, transferring, and deleting it. We ensure that your information is properly protected and used appropriately.

This privacy notice provides information about the personal data we process, why we process it, and how we process it.

Our responsibilities

The Home is the data controller of the personal data you provide. We are responsible for ensuring compliance with the Data Protection Legislation and handling any requests from individuals exercising their rights under this legislation.

Why do we process your personal data?

We process your personal data to provide you with the services you have requested, fulfill our contractual obligations, respond to your queries or comments, and correspond with you on a daily basis.

We may need personal data from you to meet our legal obligations, enter into a contract with you, or provide you with necessary information. Without this data, we may be unable to fulfill our obligations to you.

We process most of your information based on your consent, our legitimate interests, performance of a contract, protection of vital interests, or, in the case of special categories of data, for the provision of health or social care.

If we obtain consent from you to process your personal data, you can withdraw your consent at any time. This will not affect the lawfulness of any processing we carried out prior to you withdrawing your consent.

Who will receive your personal data?

We only transfer your personal data when necessary. Recipients of your personal data include:

  • Healthcare organisations
  • Government agencies
  • Company auditors
  • IT software companies

We don’t transfer your personal data outside of the EEA.

How long will we keep your personal data?

We retain your personal data for seven years after you leave the Home.

This retention period allows us to address any issues or queries that may arise. Your information is securely stored and permanently deleted or destroyed after this period.

If we need your consent to process your personal data, any information we use for this purpose is kept until you withdraw your consent, unless we are entitled to retain the personal data on other legal grounds.

What are your rights?

You have several rights regarding the personal data we hold about you. These rights depend on the grounds on which we process your data. More information is available from the Information Commissioner’s Office website. These rights apply for the period during which we process your data.

1. Access to your data

You have the right to ask us to confirm that we process your personal data, as well as request access to or copies of your personal data. You can also ask us to provide a range of information, although most of that information corresponds to the information set out in this privacy notice.

We will provide the information free of charge unless your request is manifestly unfounded or excessive or repetitive, in which case we are entitled to charge a reasonable fee. We may also charge you for multiple copies of the same information.

We will provide the information within one month of receiving your request. If we need more information to comply with your request, we will let you know.

2. Rectification of your data

If you believe the personal data we hold about you is inaccurate or incomplete, you can ask us to rectify it. We will comply within one month unless we have reasons not to, in which case we will inform you.

3. Right to be forgotten

In certain circumstances, you have the right to ask us to delete your personal data. This applies if:

  • We no longer need your personal data for the purpose it was collected.
  • You withdraw consent where data processing was based on consent.
  • You object to the processing, and there are no overriding legitimate interests.
  • We have unlawfully processed your personal data.
  • Deletion is necessary to comply with a legal obligation.

There are scenarios where we may refuse your request, and we will inform you if this is the case.

4. Right to restrict processing

In some circumstances, you can ask us to suppress processing of your personal data. This means we will stop actively processing it but retain it. This right is available if:

  • You believe the data is inaccurate, and we need to verify its accuracy.
  • You object to us processing the data, and we are considering whether our legitimate interests override your objection.
  • The processing is unlawful, and you request restriction instead of deletion.
  • We no longer need the data, but you need it to establish, exercise, or defend a legal claim.

5. Data portability

You have the right to ask us to provide your personal data in a structured, commonly used, and machine-readable format so that you can transmit it to another data controller. This right applies where:

  • Processing is based on your consent or performance of a contract.
  • Processing is carried out by automated means.

6. Right To object

You can object to us processing your personal data if:

  • Processing is based on legitimate interests or performance of a task in the public interest or exercise of official authority.
  • For direct marketing purposes (including profiling).
  • For scientific or historical research and statistics.

You must have grounds for your objection based on your particular situation. We will stop processing your data unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms or if the processing is for the establishment, exercise, or defense of legal claims.

Automated decision making

Automated decision-making means making a decision solely by automated means without any human involvement. Examples include online credit reference checks and automated clocking-in systems.

We do not carry out any automated decision making using your personal data.

Your right to complain about our processing

If you believe we have processed your personal data unlawfully or have not complied with GDPR, you can report your concerns to the supervisory authority in your jurisdiction. In the UK, the supervisory authority is the Information Commissioner’s Office (ICO).

You can contact the ICO on 0303 123 1113 or via their website.

Any questions?

If you have any questions or would like more information about how we process your data, please email gdpr@canfordhealthcare.co.uk.

Note: All QCS Policies are reviewed annually, more frequently, or as necessary.
Amended: 02/07/2024 GDPRF06