Privacy Notice

Privacy Notice

Introduction and scope

This privacy notice applies to anyone who interacts with us about our  services (‘you’, ‘your’), in any way (for example, by email, through our website, by phone). We will give you further privacy information if necessary for specific contact methods or in relation to specific services.

This privacy notice applies to you if you ask us about, buy or use our services. It describes how we handle your information, regardless of the way you contact us (for example, by email, through our website, by phone, and so on). We will provide you with further information or notices if necessary, depending on the way we interact with each other, for example if you use our PCS app we may give you privacy notices which apply just to a particular type of information which we collected through that app.

If you have any questions about this, please contact us at info@westgatehousenursing.co.uk.

 

Who we are?

In this privacy notice, ‘we’, ‘us’ and ‘our’ mean Westgate House Ltd.  Our contact details are:

Westgate House Nursing Home

Eastcote Road

Gayton

Northampton

NN7 3HQ

Tel: 01604 859355

Email: info@westgatehousenursing.co.uk

 

What information do we collect?

We collect personal information from you and from third parties (anyone acting on your behalf, for example, brokers, health-care providers and so on). Please see below for more information.

Where you provide us with information about other people, you must make sure that they have seen a copy of this privacy notice and are comfortable with you giving us their information.

We collect personal information from you:

  • through your contact with us, including by phone (we may record or monitor phone calls to make sure we are keeping to legal rules, codes of practice and internal policies, and for quality assurance purposes), by email, through our websites, through our apps, by post, by filling in application or other forms, through social media or face-to-face (for example, in medical consultations, diagnosis and treatment).

 

We also collect information from other people and organisations.

 

For all our customers, we may collect information from:

  • a family member, or someone else acting on your behalf;
  • doctors, other clinicians and health-care professionals, hospitals, clinics and other health-care providers;
  • any service providers who work with us in relation to your service, if we don’t provide it to you direct, such as providing you with apps, medical treatment, or health assessments;
  • fraud-detection and credit-reference agencies; and
  • sources which are available to the public, such as the edited electoral register or social media.
  • your employer, if you are covered by a contract for services your employer has taken out or if we are providing occupational health services;
  • brokers and other agents (this may be your broker if you have one, or your employer’s broker if they have one); and
  • those paying for the products or services we provide to you, including other insurers, public-sector commissioners and embassies.

 

We process two categories of personal information about you and (where this applies) your dependants:

  • standard personal information (for example, information we use to contact you, identify you or manage our relationship with you); and
  • special categories of information (for example, health information, information about your race, ethnic origin and religion that allows us to tailor your care, and information about crime in connection with checks against fraud or anti-money-laundering registers).

Standard personal information includes:

  • contact information, such as your name, username, address, email address and phone numbers;
  • the country you live in, your age, your date of birth and national identifiers (such as your National Insurance number or passport number);
  • information about your employment;
  • details of any contact we have had with you, such as any complaints or incidents;
  • financial details, such as details about your payments and your bank details;
  • the results of any credit or any anti-fraud checks we have made on you;
  • information about how you use our services.
  • information about how you use our website, apps or other technology, including IP addresses or other device information.

 

Special category information includes:

  • information about your physical or mental health, including genetic information or biometric information (we may get this information from application forms you have filled in, from notes and reports about your health and any treatment and care you have received or need, or it may be recorded in details of contact we have had with you such as information about complaints or incidents, quotes and records of medical services you have received);
  • information about your race, ethnic origin and religion (we may get this information from your medical or care-home preferences to allow us to provide care that is tailored to your needs); and
  • information about any criminal convictions and offences (we may get this information when carrying out anti-fraud or anti-money-laundering checks, or other background screening activity.

 

How do we use personal information?

 We process your personal information for the purposes set out in this privacy notice. We have also set out some legal reasons why we may process your personal information (these depend on what category of personal information we are processing). We normally process standard personal information if this is necessary to provide the services set out in a contract, it is in our or a third party’s legitimate interests or it is required or allowed by any law that applies. Please see below for more information about this and the reasons why we may need to process special category information.

By law, we must have a lawful reason for processing your personal information. We process standard personal information about you if this is:

  • necessary to provide the services set out in a contract− if we have a contract with you, we will process your personal information in order to fulfil that contract (that is, to provide you and your dependants with our products and services);
  • in our or a third party’s legitimate interests− details of those legitimate interests are set out in more detail below
  • required or allowed by law.

We process special category information about you because:

  • it is necessary for the purposes of preventive or occupational medicine, to assess whether you are able to work, medical diagnosis, to provide health or social care or treatment, or to manage health-care or social-care systems (including to monitor whether we are meeting expectations relating to our clinical and non-clinical performance);
  • it is necessary for an insurance purpose(for example, advising on, arranging, providing or managing an insurance contract, dealing with a claim made under an insurance contract, or relating to rights and responsibilities arising in connection with an insurance contract or law);
  • it is necessary to establish, make or defend legal claims(for example, claims against us for insurance);
  • it is necessary for the purposes of preventing or detecting an unlawful actin circumstances where we must carry out checks without your permission so as not to affect the outcome of those checks (for example, anti-fraud and anti-money-laundering checks or to check other unlawful behaviour, or carry out investigations with other insurers and third parties for the purpose of detecting fraud);
  • it is necessary for a purpose designed to protect the public against dishonesty, malpractice or other seriously improper behaviour(for example, investigations in response to a safeguarding concern, a member’s complaint or a regulator (such as the Care Quality Commission or the General Medical Council) telling us about an issue);
  • it is in the public interest, in line with any laws that apply;
  • it is information that you have made public; or
  • we have your permission. As is best practice, we will only ask you for permission to process your personal information if there is no other legal reason to process it. If we need to ask for your permission, we will make it clear that this is what we are asking for, and ask you to confirm your choice to give us that permission.

 

What legal basis do we have for processing your personal data?

We process your personal information for a number of legitimate interests, including managing all aspects of our relationship with you.

Legitimate interest is one of the legal reasons why we may process your personal information. Taking into account your interests, rights and freedoms, legitimate interests which allow us to process your personal information include:

  • to manage our relationship with you, our business and third parties who provide products or services for us.
  • to provide health-care services.
  • to keep our records up to date and to provide you with marketing as allowed by law;
  • for statistical research and analysis so that we can monitor and improve, services, websites and apps, or develop new ones;
  • to contact you about research we are carrying out with third parties such as univesities;
  • to monitor how well we are meeting our clinical and non-clinical performance expectations;
  • to enforce or apply our website terms of use, our policy terms and conditions or other contracts, or to protect our (or our customers’ or other people’s) rights, property or safety;
  • to exercise our rights, to defend ourselves from claims and to keep to laws and regulations that apply to us and the third parties we work with; and

 

When do we share personal information?

We share your information with others who help us provide services to you (for example, health-care providers and medical-assistance providers, commissioners and brokers).  For more information about who we share your information with, please see below.

We sometimes need to share your information with other people or organisations for the purposes set out in this privacy notice.

 

For all our customers, we share your information with:

 

  • doctors, clinicians and other health-care professionals, hospitals, clinics and other health-care providers;
  • suppliers who help deliver products or services on our behalf;
  • people or organisations we have to, or are allowed to, share your personal information with by law (for example, for fraud-prevention or safeguarding purposes, including with the Care Quality Commission);
  • the police and other law-enforcement agencies to help them perform their duties, or with others if we have to do this by law or under a court order;

 

If we share your personal information, we will make sure appropriate protection is in place to protect your personal information in line with data-protection laws.

We are a research friendly organisation and support clinical research. We may use anonymised information (with all names and other identifying information removed) or information that is combined with other people’s information, or reveal it to others, for research or statistical purposes. You cannot be identified from this information and we will only share the information in line with legal agreements which set out an agreed, limited purpose and prevent the information being used for commercial gain.

 

How long do we keep your personal data for?

We keep your personal information in line with set periods calculated using the following criteria.

  • How long it is reasonable to keep records to show we have met the obligations we have to you and by law.
  • Any periods for keeping information which are set by law or recommended by regulators, professional bodies or associations.
  • Any relevant proceedings that apply.

 

Your rights in relation to personal data

You have the right to access your information and to ask us to correct any mistakes and delete and restrict the use of your information. You also have the right to object to us using your information, to ask us to transfer of information you have provided, to withdraw permission you have given us to use your information and to ask us not to use automated decision-making which will affect you. For more information, see below.

You have the following rights (certain exceptions apply).

  • Right of access: you have the right to make a request for details of your personal information and a copy of that personal information
  • Right to rectification: you have the right to have inaccurate information about you corrected or removed
  • Right to erasure (‘right to be forgotten’): you have the right to have certain personal information about you deleted from our records
  • Right to restriction of processing: you have the right to ask us to use your personal information for restricted purposes only
  • Right to object: You have the right to object to us processing (including profiling) your personal information in cases where our processing is based on a task carried out in the public interest or where we have let you know it is necessary to process your information for our or a third party’s legitimate interests. You can object to us using your information for direct marketing and profiling purposes in relation to direct marketing.
  • Right to data portability: You have the right to ask for the personal information you have made available to us to be transferred to you or a third party in machine-readable formats
  • Right to withdraw consent: You have the right to withdraw any permission you have given us to handle your personal information. If you withdraw your permission, this will not affect the lawfulness of how we used your personal information before you withdrew permission, and we will let you know if we will no longer be able to provide you with your chosen product or service.
  • Right in relation to automated decisions: You have the right not to have a decision which produces legal effects which concern you or which have a significant effect on you based only on automated processing, unless this is necessary for entering into a contract with you, it is authorised by law or you have given your permission for this. We will let you know if we make automated decisions, our legal reasons for doing this and the rights you have.

 

Please note: Other than your right to object to us using your information for direct marketing (and profiling for the purposes of direct marketing), your rights are not absolute. This means they do not always apply in all cases, and we will let you know in our correspondence with you how we will be able to meet your request relating to your rights.

If you make a request, we will ask you to confirm your identity if we need to, and to provide information that helps us to understand your request better. If we do not meet your request, we will explain why.

In order to exercise your rights please contact info@westgatehousenursing.co.uk