We collect or use the following information to provide care consultancy, assessments, support planning, risk assessments, hospital discharge guidance and our six-week care set-up and coordination service:

• Name, address and contact details

• Gender

• Date of birth

• NHS number, where relevant and necessary

• Hospital number, where relevant and necessary

• National Insurance number, only where necessary for a specific service

• Next of Kin details including any support networks

• Emergency contact details

• Health information (including medical conditions, allergies, medical requirements and medical history)

• Information about care needs (including disabilities, home conditions, medication and dietary requirements and general care provisions)

• Records of meetings and decisions

We also collect the following special category information for these services. This information is subject to additional protection due to its sensitivity:

• Religious or philosophical beliefs, only where relevant to the person’s care preferences

• Health information

We collect or use the following information for safeguarding or public protection reasons:

• Name, address and contact details

• Emergency contact details

• Health information (including medical conditions, allergies, medical requirements and medical history)

• Information about care needs (including disabilities, home conditions, dietary requirements and general care provisions)

• Relevant information from previous investigations

• Records of meetings and decisions

• Details of safeguarding concerns or incident, relevant people involved, actions and referrals made

We also collect the following special category information for safeguarding or public protection reasons. This information is subject to additional protection due to its sensitive nature:

• Health information

We collect or use the following personal information to introduce families to independent self-employed carers:

• Name, address and contact details

• Gender

• Health information (including medical conditions, allergies, medical requirements and medical history)

• Information about care needs (including disabilities, home conditions, dietary requirements and general care provisions)

• Records of meetings and decisions

• Records of consent, where appropriate

• Carers’ experience, availability, areas covered and confirmation that they can provide DBS documentation, public liability insurance and references

We also collect relevant information through our website’s initial client enquiry and independent carer interest forms. For our six-week care set-up and coordination service, we collect relevant information from clients, families or authorised representatives and independent carers to plan and coordinate support. Individual carer files may include references, insurance documentation and a record that appropriate DBS documentation has been seen and checked.iption text goes here

Health information receives additional protection under UK GDPR. We use it only where we have an appropriate lawful basis and an applicable special-category condition, and we respect confidentiality requirements.

Our lawful bases for collecting or using personal information for care consultancy, assessments, support planning, risk assessments, hospital discharge guidance and care coordination are:

• Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

• Legitimate interests - we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:

I need to collect and use information about  a person’s health, care needs, likes, dislikes, preferences and who to  contact in an emergency. This helps me understand what support they need,  prepare their support plan, coordinate the agreed support .I need to share  relevant information with carers involved so they understand the persons  needs and preferences and can provide suitable support

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.

• Vital interests – collecting or using the information is needed when someone’s physical or mental health or wellbeing is at urgent or serious risk. This includes an urgent need for life sustaining food, water, clothing or shelter. All of your data protection rights may apply, except the right to object and the right to portability.

Our lawful bases for collecting or using personal information for safeguarding or public protection reasons are:

• Recognised legitimate interests - our pre-approved purpose for collecting or using personal information for safeguarding or public protection reasons:

• We need to protect the physical, mental or emotional well-being of people who need extra support, or to protect them from harm or neglect (the ‘safeguarding condition’).

• Vital interests – collecting or using the information is needed when someone’s physical or mental health or wellbeing is at urgent or serious risk. This includes an urgent need for life sustaining food, water, clothing or shelter. All of your data protection rights may apply, except the right to object and the right to portability.

Our lawful bases for collecting or using personal information to introduce families to independent self-employed carers are:

• Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

• Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

• Directly from you

• Family members or carers

• Other health and care providers

• Social services

• Charities or voluntary sector organisations

• Information submitted through our website enquiry and carer interest forms

We normally retain adult client assessments, support plans, risk assessments and associated care coordination records for eight years after our services end, unless a longer period is necessary for an ongoing complaint, safeguarding matter, insurance matter or legal claim.

Where an enquiry does not lead to services, we normally retain enquiry information for up to 12 months after the last contact. We normally retain independent carer introduction records for six years after the service ends, unless longer retention is justified. We keep detailed carer verification records only as long as necessary for the relevant checks and service, with particular care over DBS information.

Paper working care folders may be kept at the client's home for authorised use during care arrangements. We also maintain electronic records in business documents on our computer. At the end of applicable retention periods, records are reviewed and securely deleted or destroyed unless continued retention is justified.

• Data processors

• Squarespace website hosting provider

• The website service hosts our website and handles submissions through our initial enquiry and carer interest forms.

• Business email service (accessed through Gmail)

• Our business email service handles and stores email correspondence.

• Other health providers (eg GPs and consultants)

• Care providers

• Organisations we need to share information with for safeguarding reasons

• Emergency services

With the carer’s permission, relevant carer profile details may be shared with families considering an introduction. Relevant client care needs may be shared with independent carers being considered or coordinating support, where appropriate and lawful.

We treat health and care information confidentially. We share relevant information only when appropriate, such as with the individual’s agreement or other valid authority, to coordinate agreed support, meet legal duties, respond to safeguarding concerns or protect someone in an emergency. We limit sharing to what is necessary.

f you have any concerns about our use of your personal information, you can make a data protection complaint to us:

Email: info@angelagrahamconsultancy.com

If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.

The ICO’s address:

ICO Head Office

4th Floor, No.3 Circle Square

5 Hawkshaw Street

Manchester

M1 7BL

Helpline number: 0303 123 1113

Website: https://www.ico.org.uk/make-a-complaint