SHSC

Welcome to Shifa Health & Social Care,

0207 123 8933 info@shifahsc.co.uk

Signed in as:

filler@godaddy.com

Account

Privacy Policy

1. Introduction

In accordance with the UK General Data Protection Regulation (GDPR), Shifa Health & Social Care Ltd is committed to protecting your personal information when you are communicating with us, whether using our website, as a customer of Shifa Health & Social Care Ltd, an employee of Shifa Health & Social Care Ltd or a job applicant. This privacy policy describes the practices we follow in order to respect the privacy of your personal data.

Shifa Health & Social Care Ltd is registered with the Information Commissioners Office (ICO) registration number ZB659076.

At Shifa Health & Social Care Ltd we have focussed on implementing fair practices that are designed to protect your privacy. All personal data obtained and held by us will be processed to ensure that:

· Processing is fair, lawful and transparent

· Data is collected for specific, explicit and legitimate purposes

· Data collected is adequate, relevant and limited to what is necessary for the purposes of processing.

· Data is kept accurate and up to date. Data which is found to be inaccurate will be rectified or deleted without delay.

· Data is not kept for longer than is necessary for its given purpose

· Data is processed in a manner that ensures appropriate security of personal data, including protection against unauthorised or unlawful processing, accidental loss, destruction or damage by using appropriate technical or organisational measures.

If you have any questions or comments about this Privacy Policy, please contact:

Chief Executive
Shifa Health & Social Care Ltd
The Ensign
Wellclose Square
London
E1 8HY
Email: DPO@shifahsc.co.uk

2. Data Collection - Website

Websites provided by Shifa Health & Social Care Ltd can collect personally identifiable information which is voluntarily provided by visitors to the Website (user data). The user data that Shifa Health & Social Care Ltd receives from site visitors is typically to:

· Register for certain areas of the site

· Receive requested brochures and other materials

· Apply for jobs

· Contact us for further information of our services

· Enter and submit surveys

· Register for events.

Shifa Health & Social Care Ltd is committed to only collecting the minimum information to achieve the visitor’s request.

3. Data Collection – By Telephone or In Person

Shifa Health & Social Care Ltd may also collect or receive personally identifiable information from other sources such as telephone enquiries or in person when visiting our premises, however, Shifa Health & Social Care Ltd is committed to only collecting the minimum information to achieve the callers or visitor’s request.

4. Processing and Use of Personal Information

4.1 Prospective Employees, Existing Employees, Volunteers and Members of the Society

· Types of Data Held / Collecting Data
You provide several pieces of data to us directly during the recruitment period and subsequently upon the start of your employment.

In some cases, we will collect data about you from third parties, such as employment agencies, former employers (when obtaining references), Disclosure and Barring Service or professional member organisations.

We keep several categories of personal data on prospective employees in order to carry out effective and efficient processes, this data would be kept within our online application and recruitment system and recruitment files.

Specifically we hold the following types of data:

· Personal details such as name, address, phone numbers and email address

· Details of gender, marital status, information of any disability you have or other medical information, together with information on your race and religion (for equality monitoring purposes)

· ‘Right to Work’ documentation

· Information gathered via the recruitment process such as that on our website which has been submitted by completion of an on-line application form, CV or information included in a cover letter

· References from former employers

· Details on your education and employment history, etc

· Driving licence

· Criminal convictions data – we only collect this data when it is appropriate for the role and the law permits us – via a DBS check.

In addition, for employees/successful applicants, we would also hold information relating to your employment with us, including:

· National insurance number

· Bank account details

· Tax codes

· Job title and job descriptions

· Details of your salary

· Name and contact details of your next of kin

· Your photograph

· Terms and conditions of your employment

· Details of formal and informal proceedings involving you such as ‘letters of concern’, disciplinary and grievance proceedings, appraisal and performance information.

· Internal and external training modules undertaken

· Information on time off from work including annual leave, sickness absence, family related leave, etc.

· Building access records

· IT equipment use including telephones and internet access

4.1.2 Lawful basis for processing your data

Our purpose for processing your information is to assess your suitability for the role. In the main we process your data in order to comply with a legal requirement or in order to effectively manage the recruitment process at your request and if successful offer an employment contract with you.

4.1.3 Failure to provide data
Your failure to provide us with data may mean that we are unable to fulfil our requirements for entering into a contract of employment with you. This could include being unable to offer you employment or administer contractual benefits.

4.1.4 Who we share your data with
We share your data only with Shifa Health & Social Care employees who require that information in order to carry out their relevant function, for example, those who have responsibility for recruitment, administration of payroll and contractual benefits, the carrying out of performance related/management of your contract. All employees with such responsibility have been informed about compliance with GDPR.

Data may also be shared with third parties for the following reasons – for criminal record checks, medical reports, informal/formal procedures where outsourced employment law or other legal guidance is required, administration of payroll and contractual benefits, training requirements etc.,

4.1.5 User data collected for Recruitment Purposes
Your data is stored and processed using a recruitment management system. This system is hosted OnePlan, offers a web based control tool, has a mobile application for sending and receiving data, can report on such data and stores information in a database. OnePlan is an entirely closed software. Meaning we will never use data entered into our system from an organisation to market or share information with unauthorised third parties. Data is only used for internal purposes within Shifa Health & Social Care Ltd.

Your Data will be removed within 14 months of ceasing being a candidate for the vacancy applied for. However, candidates have the right to have their data removed earlier by contacting the Data Protection Officer.

4.2 Enquiries and Marketing

purposes and in connection with dealing with the person enquiring’s request. This data is not shared with others for unrelated purposes unless stated in this Privacy Policy or otherwise communicated to you.

Except for instances where the person enquiring is explicitly choosing to receive specific Shifa Health & Social Care Ltd marketing or other information Shifa Health & Social Care Ltd will not use your personal data to distribute marketing or information materials.

4.3 Shifa Health & Social Care Ltd at Home Customers

4.3.1. Types of data help / collecting data

The personal data collected includes information such as customer name, address, telephone number, email address, date of birth, relevant health and medical details, details of who to contact in the event of an emergency and how to contact them, personal information to enable us to match you with an appropriate care working and your preferences relating to care services as detailed in your support plan.

This information will be used to provide the agreed services as detailed in your support plan. This will also include administering our accounts, issuing invoices and processing payments for those services. This will also assist us with dealing with any queries. The information will also allow Shifa Health & Social Care Ltd to maintain its administration systems in order to comply with our contractual, statutory and legal obligations.

Customer information will be shared with the relevant members of Shifa Health & Social Care Ltd’s staff which includes Support Workers and Administrative staff who need to know this information in order to provide our services to the customer. Shifa Health & Social Care Ltd may use the information in a general way to analyse activities and trends within the service to ensure quality and consistency.

Shifa Health & Social Care Ltd may use hosted computer systems (Cloud) to process some data. Currently Shifa Health & Social Care Ltd uses Oneplan software which is partly externally hosted to schedule and administer support worker visits to customers. However, customer information is NOT disclosed to third parties except for instances which we are legally required to or required to do so by statutory authorities.

Customers have the right to access the information which we hold about them. This is called a Subject Access Request. Please contact dpo@shifahsc.co.uk to request this.

4.4 Skills Horizon Service Users information

4.4.1 Types of data held / Collecting Data
The personal data collected includes information such as customer name, telephone number, date of birth, relevant health and medical details, medication information, details of who to contact in the event of an emergency and how to contact them, personal information to enable us to match you with appropriate care working and your preferences relating to care services as detailed in your support plan.

To provide a better service we also have access to view parts of your NHS Patient Record. This data is shared with us under strict guidelines and we can only view this information, we are not able to make any changes to this information.

4.4.2 Lawful basis for processing data
This information will be used to provide the agreed services as detailed in your support plan. This will also include administering our accounts, issuing invoices and processing payments for those services. This will also assist us with dealing with any queries. The information will also allow Shifa Health & Social Care Ltd to maintain its administration systems in order to comply with our contractual, statutory and legal obligations.

4.4.3 Who we share your data with
Customer information will be shared with the relevant members of Shifa Health & Social Care Ltd’s staff which includes Support Workers and Administrative staff who need to know this information in order to provide our services to the customer. Shifa Health & Social Care Ltd may use the information in a general way to analyse activities and trends within the service to ensure quality and consistency.

Customer information is NOT disclosed to third parties except for instances which we are legally required to, required to do so by statutory authorities or requested to do so by the customer or their legal representative. We will however disclose personal information to the emergency services or other healthcare professionals where it is deemed in the customer’s vital interest.

Customers have the right to access the information which we hold about them. This is called a Subject Access Request. Please contact dpo@shifahsc.co.uk to request this.

4.5 CCTV Images
4.5.1 Types of data held / collecting data
The personal data collected on CCTV systems operated by The Ensign are images within public areas of the centre. This includes areas internally and externally around the premises.

4.5.2 Lawful basis for processing data
Shifa Health & Social Care Ltd has Skills Horizon service user’s attending the The Ensign centre, therefore we record, store and process CCTV images as a legitimate business purposes.

4.5.3 Who we share your data with
These images are for the safety and security of people attending or visiting the Skills Horizon premises and are also for the protection of the centre against fraud and other crime. These images may be supplied to relevant authorities should we be requested to do so for the purposes of crime prevention, crime investigation or if we are legally required to do so.

In certain circumstances we may contract with a third party specialist security organisation for the purposes of gaining their expertise for a particular part of the organisation. We may also share access to the CCTV images with this organisation.

5. Disclosing Information to Third Parties

Shifa Health & Social Care Ltd will only disclose your personal data to third parties under the following circumstances:

· when explicitly requested to by you

· if it necessary to fulfil your request to deliver marketing or reference materials requested by you

· should it be necessary to fulfil any other request

· if Shifa Health & Social Care Ltd is legally required to do so.

Shifa Health & Social Care Ltd does not collect personally identifiable information for dissemination or sale to third parties for consumer marketing purposes or host such services on behalf of third parties.

6. Use of Website Cookies

Cookies are tiny data files that allow a website to collect and store data onto a site visitor’s computer or laptop or mobile device.

6.1 Improve the way our websites and mobile apps work
Cookies allow the website to recognise a returning visitor on connection to the website which in turn can enable the downloading of web pages to be faster than on first visit. Cookies can also help the website to remember the visitor’s preferences from their previous visit.

6.2 Site performance and navigation data
Cookies allow us to track the performance and technical errors of a website or mobile app by collecting statistical information such as page speed and errors encountered. The site may also track the navigation route a user takes while browsing the site. This helps Shifa Health & Social Care Ltd to understand the ease of use of the site. The information collected by such cookies is mostly aggregated and anonymous. However, a visitor’s IP address may also be logged by the web server.

6.4 Choosing whether to accept or reject Cookies
Site visitors can choose whether to accept or reject the use of Cookies by the use of their browser settings. However, this may mean that the visitor does not have full use of all the facilities of the website.

The procedure to choose whether to accept or reject Cookies varies for different web browsers or software. Visitors should refer to their web browsers help or software supplier to assist with this.

7. Webserver and Data Location

Shifa Health & Social Care Ltd’s webserver is located in the United Kingdom and all User Data processing or storage is performed in the EU.

8. Third Party Links

Shifa Health & Social Care Ltd may include links on its website which are to external organisations websites which do not operate under Shifa Health & Social Care Ltd’s privacy practices. When visitors follow links to other websites, Shifa Health & Social Care Ltd’s privacy policy no longer applies. Visitors should review each sites own privacy policy.

9. Website Visitor Choices

Visitors are not required to register or sign in to gain access to the website, however some services such as being able to save job applications to complete later will require registration although you are not required to register to apply for jobs.

Personally identifiable data provided to Shifa Health & Social Care Ltd through the website for services such as brochure requests and through contact forms is provided voluntarily. Visitors to the site can also choose whether to receive regular updates and information from Shifa Health & Social Care Ltd, visitors can also choose to be removed from such mailing lists.

Any communication sent via mailing lists will provide clear instructions on how to be removed from the mailing list.

10. Right to Data Access

Each visitor or caller has the right of access to their personal data which Shifa Health & Social Care Ltd stores as a result of submitting information through the website, supplying during a telephone enquiry or making an enquiry in person.

Customers and employees of Shifa Health & Social Care Ltd also have the right of access to their personal data.

Enquiries about the data stored or the accuracy of data stored along with requests to have information removed should be sent to dpo@shifahsc.co.uk

11. Data Security

All Shifa Health & Social Care LtdDirectors, Employees and volunteers are instructed to follow an organisation-wide security policy. Only authorised personnel are given access to personally identifiable information. Authorised personnel are required to agree to ensure confidentiality of this information and the use of this information is restricted to the purposes as defined in Shifa Health & Social Care Ltd’s security policy.

12. Changes to the Privacy Policy

12.1 For Website users
Shifa Health & Social Care Ltd reserves the right to change this Privacy Policy as it may deem necessary from time to time or as may be required by law. Any changes will be immediately posted on the website and you are deemed to have accepted the terms of the policy on your first use of the website following the amendment.

Should Shifa Health & Social Care Ltd make material changes to the Privacy Policy, Shifa Health & Social Care Ltd will notify Website users by method of a prominent link which will be displayed on the Website home page for a minimum period of two weeks.

12.2 For Shifa Health & Social Care Ltd Customers

Shifa Health & Social Care Ltd reserves the right to change this Privacy Policy as it may deem necessary from time to time or as may be required by law. Any changes will be immediately posted on the website. Material changes to the Privacy Policy will be communicated to our customers through their usual communication method with us.

12.3 For Employees and Volunteers

Shifa Health & Social Care Ltd reserves the right to change this Privacy Policy as it may deem necessary from time to time or as may be required by law. Any changes will be communicated to staff via email or by their manager.

12.4 For Members of the Society
Shifa Health & Social Care Ltd reserves the right to change this Privacy Policy as it may deem necessary from time to time or as may be required by law. Any changes will be communicated to Members either via letter or email.

13. Website Visitor Consent

By using the Website and by providing any personal data or information through the Website or email addresses displayed on the Website, visitors are consenting to our use of your personal information as set out in this Privacy Policy.

Please do not submit or send us any of your personal information if you do not want that information to be used in this manner.

14. The National Opt-Out

In 2018, the government introduced a ‘national opt-out policy’ to enable NHS patients and those in CQC registered adult care services to choose whether their confidential patient information is used for anything beyond their individual care and treatment, for example for research and planning purposes.

Shifa Health & Social Care is registered with the CQC but it does not currently use any data for planning or research purposes covered by the national data opt-out. We review all the confidential information we process to check whether it is used for research and planning purposes. If it is, then individuals can decide to stop their information being shared for this purpose. You can find out more information at https://www.nhs.uk/your-nhs-data-matters/.

15. Privacy and Electronic Communications Regulations 2003

In accordance with the Privacy and Electronic Communications Regulations 2003 Shifa Health & Social Care Ltd does not send bulk unsolicited emails (popularly known as SPAM) to email addresses.

Privacy Policy

This website uses cookies.