Privacy Notice

---

Policy (Public) – Privacy Notice

This policy sets out how Greenwich Home Care Ltd protects personal data and upholds privacy in line with UK GDPR and the Data Protection Act 2018.

Issued: 27 October 2025 | Review Due: 27 October 2026

🔹 Purpose

This policy outlines how Greenwich Home Care Ltd collects, uses, stores, and protects personal information relating to service users, employees, and others, in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

🔹 Scope

This policy applies to all personal information processed by Greenwich Home Care Ltd, including that of:

• Service users and their families
• Staff members, job applicants, and contractors
• Professionals or suppliers working with the organisation

🔹 Our Commitment

We are committed to ensuring that all personal information is handled lawfully, fairly, and transparently. We only collect information that is necessary to deliver safe, effective, and person-centred care.

🔹 Lawful Basis for Processing

We process personal data under the following lawful bases:

• Consent of the individual
• Performance of a contract (delivery of care)
• Compliance with a legal obligation
• Protection of vital interests (e.g. safeguarding)
• Legitimate interests (for running our service safely and efficiently)

🔹 What Information We Collect

We may collect:

• Personal identifiers (name, address, contact details, date of birth)
• Health and care information
• Next of kin and emergency contacts
• Financial details where applicable (for billing or payroll)
• Employment records for staff and contractors

🔹 How Information Is Used

Information is used to:

• Assess, plan, and deliver care and support
• Communicate with service users, families, and professionals
• Recruit, train, and manage staff
• Maintain safety, safeguarding, and quality assurance systems
• Meet our legal and regulatory obligations

🔹 Data Sharing

We share information only when necessary and appropriate, such as with:

• Health and social care professionals involved in your care
• The Care Quality Commission (CQC) or local authorities for compliance purposes
• HMRC or payroll providers for employment purposes
• Our insurers, accountants, or legal advisors where lawfully required

All third parties are bound by confidentiality and data protection agreements.

🔹 Data Retention

We retain records for the minimum period necessary, in line with legal, contractual, and regulatory requirements. Once retention periods expire, data is securely destroyed.

🔹 Data Security

We use appropriate technical and organisational measures to safeguard personal information, including:

• Secure cloud-based systems with password protection
• Encryption and access controls
• Staff raining and confidentiality agreements

🔹 Your Rights

Individuals have the right to:

• Access their data (Subject Access Request)
• Request correction or deletion
• Restrict or object to processing
• Data portability (where applicable)
• Complain to the Information Commissioner’s Office (ICO) if concerns remain

Requests should be made in writing to:
Data Protection Lead, Greenwich Home Care Ltd
Email: info@greenwichhomecare.co.uk
Tel: 020 3576 4599

🔹 Breach Notification

Any personal data breach will be assessed promptly. Where required, the ICO and affected individuals will be notified within 72 hours.

This document is available in alternative formats or community languages upon request.