Introduction

iBC Healthcare is committed to ensuring transparency and full compliance with data protection regulations, including GDPR. This notice explains how we process personal data, the rights you have regarding your data, and the lawful basis on which we operate.

If you have concerns or questions, please contact us at: info@ibchealthcare.co.uk.

 People We Support

What Data Do We Have?

We collect and process the following:

– Basic Details: Name, address, date of birth, and next of kin.

– Financial Details: Funding and payment information.

– Special Category Data: Health, social care, ethnicity, religion, and sexual orientation.

Why Do We Have This Data?

We collect your data to provide safe, high-quality care, as required under the Health and Social Care Act 2012, the Mental Capacity Act 2005, and to meet safeguarding obligations. We also share information with the Care Quality Commission (CQC) and other third parties when legally required.

Where Do We Process Your Data?

We collect and share your data:

– With you or your legal representatives.

– With third parties such as hospitals, GPs, local authorities, CQC, and other professionals involved in your care.

Colleagues

What Data Do We Have?

We collect:

– Basic Information: Name, address, date of birth, National Insurance number, next of kin.

– Financial Data: Payment details, insurance, pension, and tax information.

– Special Category Data: Health records (e.g., fit notes), and ethnicity, with your consent.

Why Do We Have This Data?

We need your data to manage your employment, training, and pay. This is processed under our legal obligations, performance of public tasks, and legitimate interests such as contributing to the Skills for Care Adult Workforce Data Set.

Where Do We Process Your Data?

We collect and share your data with:

– HR systems, pension schemes, HMRC, and DBS checks.

 Friends and Relatives

What Data Do We Have?

We may process:

– Basic Details: Contact information for next of kin or emergency contacts.

Why Do We Have This Data?

We process this data for legitimate business interests and safeguarding.

Where Do We Process Your Data?

We share this data with local authorities, healthcare professionals, and others involved in care provision.

 Third-Party Processors

We may share your data with third-party processors such as:

– Digital Platforms: E-Care, E-Rostering, E-MAR systems, and other platforms used to support care delivery.

– Marketing and Analytics: If third-party analytics (e.g., Google Analytics) are used, we ensure compliance through proper agreements. Links to their privacy policies will be provided for transparency.

 Your Rights

You have the right to:

– Access your data.

– Correct inaccurate information.

– Request erasure of data no longer needed.

– Withdraw consent for any processing based on consent.

– Restrict processing if there is a dispute regarding accuracy or legality.

For all requests, we require verification (e.g., ID) and will respond within one month.

If you’re dissatisfied, you can contact the Information Commissioner’s Office (ICO) at:

– Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

– Website: [https://ico.org.uk/global/contact-us/](https://ico.org.uk/global/contact-us/)

Website Privacy

We process some of your data to improve your experience on our website.