UKG Lifestyle Limited, trading as UKG Care and The Help is fully committed to protecting and respecting any personal information you share with us and to compliance with the requirements of the General Data Protection Regulation.
Your Rights
You have the following rights in respect of the personal data we hold about you:
- Right to Access – this means you can ask us for a copy of all the personal data we hold about you.
- Correction Right – if you believe any of the information we hold about you is incorrect or out of date, you have the right to correct such information by providing us with the correct up to date information. In addition, you can ask us to delete the incorrect or out of date information and we will be happy to do so unless we are prevented from doing so by law or regulation.
- Right to be Forgotten – you have the right to ask us to delete the personal data we hold about you where such data is used for direct marketing purposes or is processed as a result of you consenting to such processing. Please note that where we are obliged to keep your personal data because of a regulatory or legal requirement, we will not be able to delete that data and must continue to retain it.
- Right to Restrict Processing – in some limited circumstances you have the right to restrict the processing of your data. See examples below:
- if you want us to establish the data’s accuracy;
- where our use of the data is unlawful but you do not want us to erase it;
- where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or
- you have objected to our use of your data, but we need to verify whether we have overriding legitimate grounds to use it.
- Right of Objection to Processing - you have the right to object to us using your data for direct marketing purposes and to profiling. For example, if there is something about your situation which makes you want to object to processing as you feel it impacts on your fundamental rights and freedoms. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
- Right of Data Portability – you have the right to request a copy of the personal data we hold about you in a commonly used and machine-readable format. We can provide your data either to you or to such other third party as you specify in your request.
- Automated Decision-Making Objection Right – automated decision-making is where a decision is made entirely by technological means without human intervention. We do not use or rely on automated decision-making.
If you would like to exercise any of the above rights, please contact Natasha Waldron, Data Protection Officer, Unit C2 Endeavour Business Park, Penner Road, Havant, PO9 1QN, email: Natasha@ukglifestyle.com or call 02392 987009.
If you have any concerns about our handling of your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) by visiting https://ico.org.uk/concerns/ or by calling the ICO helpline on 0303 123 1113.
Information we collect
We collect personally identifiable information about our customers who may be current, prospective and former such as name, address, phone number and health records when they register for our services. The legal basis for processing personal data is to meet our contractual obligations to customers, relating to providing our services.
How we use the information collected
Personal information will be used to operate, maintain and enhance our service to clients. A clear, concise consent form will be completed by a client prior to the handling of personal data. Data will be collected, handled and stored on the following software packages which enable us to conduct our services for the client.
- icare Scheduling and client database www.icarehealth.co.uk/data-protection-guide
- Sage Accounting software www.sage.co.uk/uk/hrpayrollhero/privacy-policy
- World Pay Online payment facility www.worldpay.com/uk/privacy-policy
We will use a client’s personal information to carry our service operations and vital information updates. A client’s personal data will not be sold onto 3rd party marketing companies. A client has the right to opt out of any promotional communication from us as their service provider. However, we may disclose personal data to meet legal obligations, regulations or valid government department requests. We may also enforce our Terms and Conditions, including investigating potential violations of our Terms and Conditions to detect, prevent or mitigate fraud or security or technical issues; or to protect against imminent harm to the rights, property or safety of our business, our clients and/or the wider community.
Access, Corrections, Deletion
We respect the privacy rights of our clients and will provide reasonable access, corrections or deletion to the personal data they have provided. The client may contact the Data Protection Officer to request access and corrections to their data or deletion of their data.
Whilst a client’s request will be acted upon instantly or within a reasonable period, please note the customer’s data may be retained based on our legal obligations or where we otherwise reasonably believe that we have a legitimate reason to do so.
Data Retention
We will use and retain our customer’s information for as long as necessary to comply with our legal obligations, resolve disputes and enforce our agreements.
Website Privacy
People accessing our website may visit our site anonymously. We will collect personal data from users only where it is voluntarily submitted and any such information provided to us is deemed part of taking part in the activity of the site.
Users contacting us via our website enquiry form do so at their own discretion. Personal details provided for the purposes of a website enquiry may include, but are not limited to: name; phone number; email address; additional data which the enquirer may provide which may include an address or mobile phone number etc.
Data
We will need to process customer information which includes their address, contact information (including key contacts, telephone numbers, emails), site specific information etc. We are committed to ensuring that your information is secure. We have put in place company procedures to ensure that your information is held securely and safeguarded at all times.
We may occasionally send out promotional literature or information on new services or products which we think you may find interesting. We may also send out information on changes in legislation which may affect the services we, or our sub-contractors provide to our clients.
The Principles of Data Protection
Our processing of personal data must comply with 6 principles of good practice. These principles are legally enforceable.
- Processed lawfully, fairly and in a transparent manner in relation to individuals
- Collected for specified, explicit and legitimate purposes and not further processed in an manner that is incompatible with those purposes
- Adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed;
- Accurate and where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay;
- Kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes subject to implementation of the appropriate technical and organisational measures required by the GDPR in order to safeguard the rights and freedoms of individuals;
- Processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures in accordance with the rights of data subjects under the Act The Act provides conditions for the processing of any personal data. It also makes a distinction between personal data and 'special category’ data.
Personal data is defined as any information relating to an identified or identifiable natural person
Special category data is defined as personal data consisting of information as to:
• Racial or ethnic origin
• Political opinion
• Religious/philosophical beliefs
• Trade union membership
• Physical or mental health or condition
• Sexual life or sexual orientation
• Biometric data
Further Information on Data Protection
You can find more information on Data Protection from the Information Commissioner's Office at www.ico.org.uk