GDPR Privacy Notice

Purpose of this document

This notice is intended to provide individuals with information about how the Company will utilize (or process) personal data concerning them, including its staff, clients, partners, and suppliers. The information is provided in accordance with data protection laws, which afford individuals rights to understand the usage of their data. We kindly encourage you to peruse and comprehend this notice, as it delineates the Company’s obligations to its entire community. This privacy notice is complementary to any other information the Company furnishes regarding the use of personal data, for instance, when collecting data online or on paper. It is expected that anyone associated with the Company comprehends and adheres to this privacy notice, which also furnishes additional information about the utilisation of personal data concerning them.

Who we are

Team24 Care Ltd is a well-respected care agency that provides essential support to individuals within the comfort of their own homes. We are deeply committed to upholding the privacy and security of your personal information. This notice is intended to clearly outline the fundamental principles that govern the collection, retention, and processing of any data shared with us or collected from you.

In accordance with the General Data Protection Regulation (GDPR), Team24 Care Ltd is designated as a “Data Processor”. This designation encompasses our responsibility to determine how we handle and utilize personal information.

Tony Kimani our esteemed Data Protection Nominee and is readily available to address any requests and inquiries related to the use of personal data. They are wholly dedicated to ensuring that all personal data is processed in strict compliance with our policy and data protection laws.

Data protection principles

The Company acknowledges and commits to upholding the following data protection principles:

Principle 1: Lawfulness, Fairness, and Transparency

Personal Data will be collected only for specific purposes as specified in the applicable Data Protection regulations, with the method of processing thoroughly explained to the Data Subject.

Principle 2:  Purpose Limitation

Personal Data will be collected for specified, explicit, and legitimate purposes and will not be further processed in a manner that is incompatible with those purposes.

Principle 3: Data Minimization

Personal Data will be adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed.

Principle 4: Storage Limitation

In alignment with Principle 3, Personal Data will be retained in a manner that allows for the identification of a subject for no longer than necessary for the purposes outlined to the Subject.

Certainly:

Principle 5: Accuracy

It is important to ensure that personal data stored for a defined period of time remains accurate and up to date. Therefore, it is essential to follow specified processes for identifying and addressing out-of-date and redundant personal data. The company is committed to taking all necessary measures to ensure that the personal data collected and processed is complete, accurate, and reflects the current situation of the data subject.

Principle 6: Integrity & Confidentiality

Personal data must be processed and stored in a manner that guarantees the appropriate security of the data, including protection against unauthorized processing, accidental loss, destruction, or damage.

Principle 7: Accountability

It is the responsibility of the data nominee to ensure and be able to demonstrate compliance in accordance with the six previous Data Protection Principles.

Your Rights

The GDPR lays out particular rights for individuals, as detailed in our ‘Your Rights under GDPR’ document.

Why the Company needs to process personal data

The company utilises personal data for various essential purposes including general business administration, meeting legal requirements for employee management, conducting pre-employment checks, and providing services to clients. The company and its partners are committed to handling personal data in strict compliance with all applicable laws and contractual obligations, ensuring that data is only processed with informed consent. Furthermore, we have thoroughly reviewed our processes to ensure their necessity, carefully chosen the most appropriate lawful basis for each activity, and meticulously documented these actions to demonstrate our commitment to compliance.

Consent

We will ensure that personal data is obtained through lawful and fair means, with the knowledge and consent of the individual involved. If necessary, we are committed to seeking and obtaining the individual’s consent before collecting or using their personal data. When appropriate, we will provide data subjects with information about the purpose of processing their personal data. Consent must be given in writing and maintained in our records.

Data Retention

In order to ensure fair processing, it is company policy not to retain personal data for a longer period than necessary in relation to its original collection purposes. The responsible course of action is to delete or destroy all personal data as soon as it has been confirmed that there is no legitimate reason for its retention. Our data retention schedule is comprehensively outlined in our Data Audit.

Data we collect and process

We gather data from several sources, including website visits, recruitment activities, carers, clients, suppliers, and their contacts. The data collected and processed may include information provided through form submissions, website interactions, CV submissions, resource access, and communication correspondence. Additionally, we may collect statistical data about computer systems for system administration and reporting purposes.

We handle both personal and sensitive data, as outlined in our HR Data Record. All personal data processing is conducted by our UK-based staff, and for IT hosting and maintenance, the information is stored on servers within the European Union. We adhere to strict legal regulations regarding third-party access to personal data and do not utilize any form of automated decision-making in our business operations.

How we keep your data secure

We have identified various methodologies for data storage during our comprehensive Data Audit. Rest assured that any data obtained from you will not be transferred to or stored in a location outside the confines of the European Economic Area (“EEA”)

What we do with data we gather

We ensure that we gather and process data in a lawful and transparent manner to meet the genuine needs of running our business.

Data protection principles

We are committed to complying with data protection laws, which dictate that the personal information we retain about you must adhere to the following principles:

1. Utilised in a lawful, fair, and transparent manner.

2. Collected solely for legitimate purposes that have been clearly communicated to you and not utilized in a manner inconsistent with those purposes.

3. Relevant to the disclosed purposes and restricted solely to those purposes.

4. Maintained accurately and kept up to date.

5. Retained solely for the duration necessary for the disclosed purposes.

6. Safeguarded securely.

We do not and have no intention to share your information with any entities for marketing or any other purposes.

Personal Data Breaches

Our approach to identifying and managing breaches of personal data is outlined in our comprehensive Data Breaches Policy and Procedure.

Questions or complaints

At any time, you can contact our information security team directly with all questions, comments and suggestions concerning this Privacy Policy and data protection at privacy@team24care.co.uk. Complaints or questions should be referred to our Data Protection Nominee, Tony Kimani.