Governance & Compliance

GDPR Statement

(General Data Protection Regulation and UK Data Protection Act 2018)

Data Protection and Privacy Statement

At CarePlus Integrated Services, we are committed to protecting the privacy, dignity and personal data of the individuals we support, our staff, and our partners. We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

How We Use Personal Data

We collect and process personal data to:

• Deliver safe and effective domiciliary care services
• Comply with our legal and regulatory obligations
• Manage employment and recruitment processes
• Communicate with service users, families, healthcare professionals and commissioners
• Maintain accurate care records and safeguarding documentation

The types of data we process may include:

• Personal identification details
• Health and care information (special category data)
• Contact details
• Employment and payroll information

Lawful Basis for Processing

We process personal data under the following lawful bases:

• Consent
• Contractual necessity
• Legal obligation
• Vital interests
• Legitimate interests
• Provision of health and social care under Article 9(2)(h) UK GDPR

Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction. This includes:

• Secure electronic care planning systems
• Controlled access to records
• Staff confidentiality agreements
• Regular data protection training
• Secure document storage and disposal procedures

Data Sharing

We only share personal information where necessary and lawful, including with:

• NHS and healthcare professionals
• Local authorities and commissioners
• Regulatory bodies such as the Care Quality Commission
• Safeguarding authorities

We never sell personal data.

Data Retention

Personal data is retained only for as long as necessary in accordance with legal, contractual and regulatory requirements.

Your Rights

Individuals have the right to:

• Access their personal data
• Request correction of inaccurate data
• Request erasure where applicable
• Restrict or object to processing
• Data portability
• Lodge a complaint with the Information Commissioner’s Office