Privacy Policy

Who we are

Angels Care Solutions Limited is the data controller responsible for deciding how and why your personal information is used.

Who this privacy notice applies to

This notice may apply to:

• People receiving or enquiring about care and support.
• Relatives, representatives, advocates and emergency contacts.
• Job applicants, employees, care workers and former employees.
• Health and social care professionals.
• Commissioners, suppliers and business contacts.
• People who visit or contact our website and offices.
• People who make a complaint, provide feedback or raise a safeguarding concern.

Information we may collect

Depending on your relationship with us, we may collect:

• Name, address, telephone number, email address and date of birth.
• Contact details for relatives, representatives and professionals.
• Care needs, health information, medication information and care records.
• Information about disabilities, communication needs, religion, ethnicity or dietary requirements where relevant to safe, personalised care.
• NHS, local-authority or other identification and reference numbers.
• Financial, invoicing and payment information.
• Safeguarding, incident, complaint and risk-management information.
• Employment history, qualifications, references and right-to-work information.
• Disclosure and Barring Service information where legally permitted and necessary.
• Website enquiry details, technical information and cookie preferences.
• Correspondence, feedback and records of our communications with you.

How we obtain information

We may receive information directly from you or, where appropriate, from relatives, representatives, advocates, health professionals, local authorities, NHS organisations, commissioners, previous employers, referees, recruitment providers and other organisations involved in your care or our legal responsibilities.

Who we may share information with

Where necessary and lawful, information may be shared with:

• Health professionals, pharmacies, hospitals and NHS organisations.
• Local authorities, commissioners and social care professionals.
• Relatives, representatives or advocates authorised to receive information.
• The Care Quality Commission and other regulators.
• Safeguarding authorities, emergency services and law-enforcement bodies.
• Professional advisers, insurers, auditors and legal representatives.
• Payroll, pension, recruitment, training and occupational-health providers.
• IT, website, communications, care-management and secure-storage providers acting on our instructions.
• Other organisations where disclosure is required or permitted by law.

We only share information that is necessary for the relevant purpose. Organisations processing information on our behalf must protect it and use it only in accordance with our instructions and applicable law.

International transfers

Some technology or service providers may process information outside the United Kingdom. Where this happens, we will use an appropriate lawful transfer mechanism and safeguards required by UK data protection law.

How long we retain information

We retain personal information only for as long as it is needed for the purpose for which it was collected and to meet our legal, regulatory, safeguarding, employment, insurance and contractual responsibilities.

Recruitment applications: If an application is unsuccessful, we normally retain the application, assessment records and supporting documents for six months after the recruitment decision, then securely delete them. If an applicant is successful, the information needed for employment is transferred to their personnel record and retained under our employment records schedule. Recruitment information and uploaded identity, right-to-work, DBS and qualification documents are available only to authorised staff involved in recruitment, compliance and employment administration. We keep details for future vacancies only where the applicant has agreed to this.

Retention periods vary according to the type of record and the circumstances. We use our records-retention schedule, applicable legal requirements and recognised health and social care guidance to determine the appropriate period. Information is securely deleted, anonymised or destroyed when it is no longer required.

How we protect information

We use appropriate organisational and technical measures to protect personal information from loss, misuse, unauthorised access, alteration or disclosure. These measures include access controls, staff confidentiality, training, secure systems, appropriate record storage and procedures for identifying and responding to data incidents.

Automated decisions

We do not make decisions about care or employment based solely on automated processing where those decisions would have a legal or similarly significant effect on an individual.