Nurse-led complex care at home
Privacy Policy
How we collect, use, and protect your personal information in compliance with GDPR and healthcare data protection regulations. Your privacy and data security are our top priorities.
Last Updated: January 2024 | Data Controller: Safehands Nursing Care Ltd, 1st Floor Romer House, 132 Lewisham High Street, London SE13 6EE
Our Commitment to Your Privacy
At Safehands Nursing Care, we understand that your personal and health information is sensitive and private. As a healthcare provider, we have both legal and ethical obligations to protect your information and use it only for appropriate purposes.
This privacy policy explains how we collect, use, store, and protect your personal information in accordance with the General Data Protection Regulation (GDPR), Data Protection Act 2018, and healthcare-specific regulations including CQC requirements and NMC professional standards.
Information We Collect
Personal Information
- Name, address, telephone number, email address
- Date of birth, NHS number, medical information
- Emergency contact details
- Financial information for funding assessments
- Photographs for identification purposes (with consent)
Health and Care Information
- Medical history, diagnoses, and current health conditions
- Medication details and treatment plans
- Care assessments and care plan documentation
- Clinical observations and care records
- Risk assessments and incident reports
Technical Information
- IP address and browser information
- Website usage data through cookies
- Communication records (calls, emails, messages)
- CCTV footage where applicable for security
How We Use Your Information
Care Delivery
- Providing nursing and care services
- Monitoring health and safety
- Coordinating with healthcare professionals
- Emergency response and medical interventions
- Care planning and review processes
Legal and Regulatory Compliance
- Meeting CQC registration requirements
- Safeguarding vulnerable adults
- Health and safety obligations
- Professional nursing standards (NMC)
- Insurance and legal requirements
Business Operations
- Staff scheduling and workforce management
- Quality monitoring and improvement
- Training and competency management
- Financial administration and billing
- Communication with families and professionals
Legal Basis for Processing
Legitimate Interests
- Providing safe and effective care services
- Protecting the vital interests of service users
- Meeting regulatory and professional obligations
- Quality assurance and service improvement
- Staff training and competency management
Consent
- Marketing communications (where opted in)
- Photographs and promotional materials
- Non-essential data processing
- Cookies and website analytics
- Sharing testimonials and case studies
Legal Obligations
- CQC regulatory requirements
- Safeguarding duties
- Professional nursing standards
- Health and safety legislation
- Employment and tax obligations
Information Sharing
Healthcare Professionals
- GPs, consultants, and condition-specific clinical teams
- Hospital discharge coordinators
- Therapists and allied health professionals
- Community nursing teams
- Mental health services where appropriate
Regulatory and Legal Bodies
- Care Quality Commission (CQC)
- Nursing and Midwifery Council (NMC)
- Local authority safeguarding teams
- Coroner's office where required
- Police and legal authorities when necessary
Service Partners
- Funding bodies (NHS, Local Authorities)
- Case managers and care coordinators
- Equipment suppliers and maintenance providers
- Insurance companies (with consent)
- Professional advisors (legal, clinical)
Data Security
Technical Safeguards
- Encrypted data storage and transmission
- Secure access controls and authentication
- Regular security updates and monitoring
- Backup and disaster recovery procedures
- Firewall and anti-malware protection
Physical Security
- Locked filing systems for paper records
- Restricted access to office areas
- Secure disposal of confidential waste
- CCTV monitoring of premises
- Staff identification and access controls
Staff Training
- Regular data protection training
- Confidentiality agreements and policies
- Incident reporting procedures
- Password and security protocols
- Professional standards and ethics
Your Rights Under GDPR
You have important rights regarding your personal information. Here's how to exercise them.
Right to Access
Request copies of your personal information
Submit written request with proof of identity
Right to Rectification
Correct inaccurate or incomplete information
Notify us in writing of required corrections
Right to Erasure
Request deletion of your personal information
Written request (subject to legal obligations)
Right to Restrict Processing
Limit how we use your information
Specify restrictions in written request
Right to Data Portability
Receive your data in structured format
Request data in common electronic format
Right to Object
Object to processing for certain purposes
Written objection with specific grounds
Data Retention
Care Records: Retained for 20 years after last adult client contact, or longer where required by law, regulation or insurers
Financial Records: 7 years after end of care
Staff Records: 6 years after employment ends
Incident Reports: 20 years or as required by insurers
Marketing Data: Until consent withdrawn or 3 years of inactivity
Cookies and Analytics
Essential Cookies: Necessary for website functionality
Analytics Cookies: Google Analytics (with consent) to improve our website
No Marketing Cookies: We don't use cookies for advertising or tracking
Cookie Management: You can control cookies through our consent banner
Data Protection Contact
If you have any questions about this privacy policy or wish to exercise your rights, please contact us:
Phone
0208 050 0098Post
Data Protection Officer
Safehands Nursing Care
1st Floor Romer House
132 Lewisham High Street
London SE13 6EE
Complaints: If you're not satisfied with our response, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or call 0303 123 1113.