Privacy Notice
1. INTRODUCTION
This is the Independent Care Group’s (iCG) Privacy Notice.
As part of the services we offer, we process personal data about our staff, our members and local providers. Processing can mean collecting, recording, organising, storing, sharing or destroying data.
We are committed to being transparent about why we need your personal data and what we do with it. This information is set out in this privacy notice. It also explains your rights when it comes to your data.
We update this Notice from time to time. When we amend this Notice we will update the date in the footer.
2. WHAT INFORMATION WE COLLECT, USE, AND WHY
We get our personal information directly from customers and staff, publicly available sources, previous employers, suppliers and service providers and other member organisations and organisations that provide information of contacts for distributions lists.
We collect or use the following personal information for the operation of client or customer (member) accounts and membership:
-
Names and contact details
-
Addresses
-
Account information - registration details
-
Types of service provided
-
Financial information (how you opt to pay us)
-
Miscellaneous membership data.
We collect or use the following personal information for information updates or marketing purposes:
-
Names and contact details
-
Addresses
-
Account information - registration details
-
Miscellaneous membership data.
We collect or use the following personal information to comply with legal requirements:
-
Name
-
Contact information
-
Health and safety information
-
Any other personal information required to comply with legal obligations
-
Miscellaneous employment details.
We collect or use the following personal information for employment and recruitment purposes:
-
Contact details (eg name, address, telephone number or personal email address)
-
Date of birth
-
National Insurance number
-
Copies of passports or other photo ID
-
Employment history (eg job application, employment references or secondary employment)
-
Education history (eg qualifications)
-
Finance details, for payroll and pension purposes.
3. LAWFUL BASES AND DATA PROTECTION RIGHTS
Under UK data protection, we must have a lawful basis for collecting and using your personal information. You can find out more about lawful bases on the Information Commissioner’s website:- https://ico.org.uk
We collect and process personal data about members, providers and staff in the UK only when we have a lawful basis for doing so under the articles of the GDPR. We rely on the following lawful bases to collect and process personal data:
-
We have been provided with consent to process data for one or more specific purposes.
-
Processing of personal data is necessary for us, or a third party, to pursue a legitimate interest. Our legitimate interest is not over-ridden by the interests of fundamental rights and freedoms of users. Our legitimate interests are as an employer and providing membership services.
Under the GDPR, you have the following rights:
· Right to be informed
· Right of access (if the request is manifestly unfounded or excessive, or if it is a repeated request for further copies of data following a previous request, then we reserve the right to charge a reasonable fee for administrative costs)
· Right to rectification
· Right to erasure
· Right to restrict processing
· Right to data portability
· Right to object.
4. HOW WE PROTECT YOUR PERSONAL DATA
In order to protect your security, we use encrypted browsers and access data via password protected devices. All data is only accessible to our employees. Our employees are bound by strict confidentiality agreements and a breach of this agreement would result in the employee's termination.
We take all reasonable precautions to ensure that user data is secure and that users are protected, but there is a risk that the Internet can be insecure at times and therefore we are unable to guarantee the security of user data beyond what is reasonably practical. Unfortunately, the sending of information via the internet is not totally secure and on occasion such information can be intercepted. We cannot guarantee the security of data that you choose to send us electronically, sending such information is entirely at your own risk.
5. WHO WE SHARE PERSONAL DATA WITH
We will not sell or share your data with other third parties, except in the following cases:
1. If the law requires it
2. If it is required for any legal proceeding(s)
3. To prove or protect our legal rights
4. To fulfil our employers’ obligations
4. To buyers or potential buyers of this company in the event that we seek to sell the company.
6. HOW LONG WE STORE PERSONAL DATA
Personal data is stored until the purpose the data was collected for has been achieved.
7. THIRD PARTY LINKS
On occasion we include links to third parties on this website. Where we provide a link it does not mean that we endorse or approve that site’s policy towards visitor privacy. You should review their privacy policy before sending them any personal data.
8. CONTACTING THE ICG
Please do not hesitate to contact us regarding any matter relating to this Privacy Notice. If you have any questions, concerns or complaints, you can contact our privacy officer at the following email:-