For service users, prospective clients, families and representatives, website visitors, job applicants, staff, commissioners, professionals, suppliers and other business contacts

1. Who we are
   Anksley Care and Support is the data controller for personal information it collects in connection with its care and support services, recruitment activities, website and business operations, unless otherwise stated. This Privacy Policy explains how we collect, use, share and protect personal information.

2. Information we may collect
   The information we collect depends on your relationship with Anksley Care and Support.
   For service users and prospective clients, we may collect information such as your name, date of birth, contact details, NHS or other relevant identifiers, information about your health, disabilities, medical conditions, medication, care and support needs, communication needs, mobility, nutrition, risk assessments, care plans, care records, safeguarding information, capacity and consent information, next of kin and representative details, funding or commissioning information, complaints, incidents and correspondence.
   Where a service user is a child or young person, or where another person is acting on someone’s behalf, we may also process information about parents, people with parental responsibility, family members, deputies, attorneys, advocates or other authorised representatives.
   For job applicants, workers and staff, we may collect information including contact details, employment history, qualifications, training, right to work information, identity documents, references, DBS information where relevant, availability, interview and assessment records, payroll or timesheet information and communications with us.
   For commissioners, healthcare and social care professionals, suppliers and other business contacts, we may collect names, job titles, organisation and contact details, service or referral information, contract records, invoice or payment information, correspondence, feedback and complaint records.
   We may also collect information that you provide when you use our website, contact us or submit an online form.

3. Why we use your information
   We use personal information to respond to enquiries; assess, plan, arrange and deliver care and support; maintain care records; communicate with service users, families, representatives, commissioners and professionals; manage safeguarding and risks; respond to emergencies; manage complaints, incidents and quality assurance; meet regulatory and legal requirements; recruit and manage staff; manage suppliers and business relationships; administer contracts, invoices and payments; operate our website; and manage and improve our services.

4. Lawful bases and sensitive information
   We process personal information only where we have a lawful basis under applicable UK data protection law. Depending on the circumstances, this may include providing or preparing to provide a service under a contract, complying with a legal obligation, protecting vital interests, carrying out tasks in the public interest where applicable, our legitimate interests in operating and managing our services, or consent where consent is the appropriate lawful basis.
   Because we provide care and support services, we may process special category information, particularly health information. We may also process safeguarding or criminal offence information where relevant and lawful. Such information will only be processed where an appropriate legal condition applies and where it is necessary for the relevant purpose.

5. Who we may share information with
   Where necessary and lawful, we may share relevant information with health and social care professionals, GPs, hospitals, NHS bodies, Integrated Care Boards, local authorities, social workers, commissioners, schools or education professionals where relevant, safeguarding authorities, emergency services, service users’ authorised representatives, regulators including the Care Quality Commission, and other organisations involved in a person’s care or support.
   We may also share information with payroll, accounting, IT and other service providers, professional advisers, insurers, DBS or background-check providers, referees, regulators and public authorities where appropriate.
   We only share information where there is an appropriate reason to do so and in accordance with applicable data protection and confidentiality requirements.

6. How long we keep information
   We keep personal information only for as long as necessary for the purpose for which it was collected and to meet applicable care, safeguarding, employment, regulatory, contractual, accounting, insurance and legal requirements. Different types of records may therefore be kept for different periods.

7. How we protect information
   We take appropriate organisational and technical measures to protect personal information against unauthorised access, accidental loss, misuse, alteration or disclosure. Access to personal information is restricted to people who need it for legitimate care, employment or business purposes.

8. Your rights
   Depending on the circumstances, you may have rights under UK data protection law to request access to your personal information, ask us to correct inaccurate information, request erasure or restriction of processing, object to certain processing, and exercise other applicable data protection rights.
   Some rights are not absolute and may be limited where we have a legal, regulatory, safeguarding or other lawful reason to retain or use information.
   You also have the right to complain to the Information Commissioner’s Office if you are concerned about how your personal information has been handled.

9. Website and online enquiries
   When you use our website or submit an enquiry or application form, we may collect the information you choose to provide together with limited technical information necessary to operate and secure the website. Information about the use of cookies and similar technologies is explained separately in our Cookie Policy.

10. Contact us
    If you have questions about this Privacy Policy, wish to exercise your data protection rights or have concerns about how we use your personal information, please contact Anksley Care and Support at [email protected].

11. Changes to this Privacy Policy
    We may update this Privacy Policy from time to time to reflect changes in our services, legal or regulatory requirements, or how we process personal information. The latest version will be published on our website.