Data Protection Policy
Our Commitment to Data Protection
We are committed to protecting your personal information and handling it responsibly, securely and transparently.
We process personal data in line with applicable data protection legislation, including the UK General Data Protection Regulation and the Data Protection Act 2018.
We have achieved Cyber Essentials Plus certification, demonstrating that our systems meet government backed standards for protection against common cyber threats.
This policy explains how we collect, use, store and protect personal information.
Who This Policy Applies To
This policy applies to:
- Unpaid carers
- The people they care for
- Staff and volunteers
- Event attendees
- Website users
- Partner organisations
What Personal Data We May Collect
Personal data is information that identifies you or could identify you.
Depending on your interaction with our service, we may collect:
- Name and contact details
- Date of birth
- Emergency contact details
- Information about your caring role
- Information about the person you care for
- Health or support related information
- Communication preferences
- Records of support provided
- Feedback and survey responses
Some information, such as health data, is considered special category data and is handled with additional safeguards.
How We Use Your Information
We may use your information to:
- Provide support and services
- Respond to enquiries
- Arrange events or support groups
- Make referrals where appropriate
- Improve our services
- Meet safeguarding responsibilities
- Comply with legal obligations
We only collect information that is relevant and necessary for these purposes.
Lawful Basis for Processing
We process personal data under one or more lawful bases, including:
- Consent
- Legitimate interests
- Legal obligation
- Vital interests
- Provision of health or social care support
Where we rely on consent, you may withdraw it at any time.
Sharing Your Information
We do not sell personal data.
We may share information with:
- Health and social care professionals
- Local authorities
- Emergency services
- Partner organisations
Information will only be shared where:
- You have given consent, or
- It is necessary to protect someone from harm, or
- We are required to do so by law
Data Security
We take appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access or disclosure.
These measures include:
- Secure digital systems
- Access controls and password protection
- Encryption where appropriate
- Secure storage of paper records
- Staff training on data protection
- Cyber Essentials Plus accredited security standards
How Long We Keep Information
We retain personal data only for as long as necessary to provide services and meet legal or contractual requirements.
Retention periods are reviewed regularly.
Your Rights
Under data protection law, you have rights including:
- The right to access your personal data
- The right to request correction of inaccurate data
- The right to request erasure in certain circumstances
- The right to restrict or object to processing
- The right to data portability where applicable
- The right to complain to the Information Commissioner’s Office
Website and Digital Data
If you use our website, limited technical information such as IP address and browser type may be collected to improve functionality and security.
Further details are available in our Cookie Policy where applicable.
Raising Concerns
If you have questions about how we handle your information, or wish to exercise your rights, please contact us using our general contact details.
If you are not satisfied with our response, you have the right to complain to the Information Commissioner’s Office.
Policy Review
This Data Protection Policy is reviewed regularly to ensure it remains accurate and compliant with current legislation.