Privacy Policy

MACC Care Ltd – Privacy Notice

1. Introduction

MACC Care Ltd (“we”, “us”, “our”) is committed to protecting your personal data and respecting your privacy. This Privacy Notice explains how we collect, use, share, store and protect personal data about our service users and, where relevant, their relatives, representatives or other contacts.

This notice is written in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What Is Personal Data?

“Personal data” means any information that can identify you directly or indirectly. “Processing” includes collecting, recording, storing, using, sharing or deleting personal data.

Some information we process is classed as special category data, which includes health information and other sensitive details. This data receives additional legal protection.

3. Service Users

What data do we collect?

To provide safe, effective and lawful care, we may collect and process:

Personal data

· Name, address, date of birth and contact details

· Next of kin and emergency contact details

· Financial information relating to care fees or funding arrangements

Special category data

· Health and social care records (physical and mental health)

· Information relevant to care needs, safeguarding or equality monitoring, such as ethnicity, religion or sexual orientation (where appropriate)

Why do we process this data?

We process personal data only where we have a lawful basis under UK GDPR. These include:

· Performance of a contract – to deliver care services agreed with you

· Legal obligation – to comply with health and social care legislation, including the Health and Social Care Act 2012 and the Mental Capacity Act 2005

· Public task – where we carry out functions in the public interest

We process special category data because:

· It is necessary for the provision and management of health and social care

· It is required for safeguarding and social protection purposes

· It is required to meet regulatory obligations, including reporting to the Care Quality Commission (CQC)

Where consent is required, we will explain why the data is needed and how you may withdraw consent at any time.

Who do we share service user data with?

We only share personal data where there is a lawful reason to do so, including with:

· NHS organisations (GPs, hospitals, pharmacies)

· Local Authorities and social care professionals

· The Care Quality Commission (CQC)

· Safeguarding authorities

· Police or other enforcement agencies where required by law or court order

Information may be collected or shared via face-to-face contact, telephone, email, post or our website.

4. Friends, Relatives and Representatives

What data do we collect?

We may hold limited personal data such as:

· Name, address and contact details

· Relationship to the service user

· Legal authority information (e.g. Lasting Power of Attorney)

Why do we process this data?

We process this data where it is necessary for:

· Our legitimate interests in maintaining contact with next of kin and representatives

· Safeguarding and emergency contact purposes

· Compliance with legal obligations

Where consent is required, it will be clearly requested and can be withdrawn at any time.

Who do we share this data with?

Where legally necessary, information may be shared with:

· Health and social care professionals

· Local Authorities

· Police or other statutory bodies

5. Data Security and Retention

Personal data is stored securely in electronic and paper records. Access is restricted to authorised staff only.

We use appropriate technical and organisational measures to protect personal data, including:

· Access controls

· Staff confidentiality agreements

· Data sharing agreements with third parties

Data is retained in line with MACC Care Ltd retention schedules and CQC guidance and is securely destroyed when no longer required.

6. Confidentiality and Staff Responsibilities

All staff are subject to:

· The Common Law Duty of Confidentiality

· UK GDPR and the Data Protection Act 2018

Staff receive mandatory training in data protection, confidentiality and cyber security. Specialist training is provided where required.

7. Your Rights Under UK GDPR

You have the right to:

· Access your personal data

· Request correction of inaccurate data

· Request erasure of data where legally applicable

· Restrict processing in certain circumstances

· Object to processing based on legitimate interests or public task

· Withdraw consent at any time (where consent is the lawful basis)

Requests should be made to our Data Protection Officer. We may request identification to verify your identity. We will respond within one month.

8. Complaints

If you have concerns about how your data is used, please contact us first:

gdpr.dpoofficer@macccare.com

MACC Care Ltd

23 Calthorpe Road, Birmingham, B15 1RP

If you remain dissatisfied, you may contact the Information Commissioner’s Office (ICO).