Privacy Policy

General

Elite Care Solutions must ensure that all Personal Data processed by Elite Care Solutions in the course of delivering the Services is processed in accordance with the Elite Care Solutions obligations under the Data Protection Legislation. Elite Care Solutions shall ensure that it does not process Personal Data in the course of delivering the Services in a manner that would cause the Authority to breach the Data Protection Legislation.

Elite Care Solutions and parties involved acknowledge respective obligations arising under the Data Protection Legislation and must assist each other as necessary to enable each other to comply with these obligations.

Elite Care Solutions must adopt and implement the recommendations of the second Caldicott Information Governance Review “To Share or Not to Share”. Elite Care Solutions must adopt and implement the recommendations of the third Caldicott review into data security once published and must comply with relevant Guidance published pursuant to or in connection with those recommendations.

Elite Care Solutions must report and publish any Data Breach and any Information Governance Breach in accordance with IG Guidance for Serious Incidents. For the avoidance of doubt, this clause applies even if a notification is not required under the GDPR.

Elite Care Solutions will immediately notify the Authority of any breach of security in relation to Confidential Information, Personal Data and all data obtained in the course of the delivery of the Service and will keep a record of such breaches. Elite Care Solutions will use its best endeavors to recover such Confidential Information or data however it may be recorded.

Elite Care Solutions will co-operate with the Authorities in any investigation the Authority considers necessary to undertake as a result of any breach of security in relation to Confidential Information, Personal Data or data.

Elite care Solutions shall, at its own expense, alter any security systems at any time during the period of the Contract at the Authority’s request if the Authority reasonably believes Elite Care Solutions has failed to comply (Confidentiality).

Elite Care Solutions must have in place a communications strategy and implementation plan to ensure that Service Users are provided with, or have made readily available to them, the information specified in the Data Protection Legislation (“fair processing information” or “privacy notices”) and for the dissemination of nationally-produced patient information materials.

The Parties acknowledge that:

In relation to Personal Data, the processing of which is required by the Authority in connection with this policy and for purposes including but not limited to quality assurance, performance management, contract management and safeguarding, Elite Care Solutions will be joint Data Controllers; and

In relation to any other Personal Data processed by Elite Care Solutions for the purpose of delivering the Service Elite Care Solutions will be sole Data Controller.

Elite Care Solutions shall be liable for any losses arising out of the processing of Personal Data for which it is responsible.

Without prejudice, in relation to Personal Data processed by Elite Care Solutions in the course of delivering the Services, Elite Care Solutions must publish, maintain and operate:

Policies relating to confidentiality, data protection and information disclosures that comply with the Law, the Caldicott Principles and Good Health and/or Social Care Practice;

Policies that describe the personal responsibilities of Staff processing Personal Data and disciplinary action that may be appropriate if those responsibilities are not complied with; agreed protocols to govern the sharing of Personal Data with partner organisations; and

Where appropriate, a system and a policy in relation to the recording of any telephone calls or other communications in relation to the Services, including the retention and disposal of those recordings and apply those policies and protocols conscientiously.

Where the Service Users require information, including Personal Data, under this policy, including but not limited to the purposes of quality assurance, performance management, contract management, safeguarding, commissioned services or the provision of services (either by the Authority or by partnering organisations),

Elite Care Solutions must consider whether the Service Users request can be met by providing anonymised or aggregated data which does not contain Personal Data. Where Personal Data must be shared in order to meet the requirements of the Service User, Elite Care Solutions must:~

Inform the Service User of this in writing before providing the data;

Refrain from providing the data until the Service User has confirmed in writing and given consent that it wishes to receive it;
Provide such information in pseudonymised form where possible; and in any event

Service User and Consent

Ensure that there is a lawful basis for the sharing of Personal Data provided that if Elite Care Solutions reasonably considers that it would not be lawful to provide the Service User with the data that has been requested Elite care Solutions shall inform the Service User of this specifying which parts of the Data Protection Legislation would be breached and why.

Elite Care Solutions must ensure that all Service Users and potential Service Users have given their consent to the processing of their information in accordance to policies and procedures but is not limited to sharing information with the Authority or third party organisations for the purposes set out of their support. This consent must be documented.

Where a Service User does not give their explicit consent to Elite Care Solutions sharing information about them, Elite Care Solutions must still share that information where to do so would be lawful under the Data Protection Legislation. However we would not then be able to provide services without such knowledge and information required to provide services.

Where a Service User wishes to cease engagement with the Services, Elite Care Solutions shall ensure that the Service User is given sufficient accurate information to make an informed choice and that any opt out is implemented.

Elite Care Solutions must comply with all obligations relating to information governance, provision of information, data sharing and data protection set out in the Specifications of the Local Authority, Private Service’s users and also the NHS.

Sub-Contracting

Elite Care Solutions does not engage in any Sub-Contracting to deliver any part of the Services we provide. We do however have a commitment to work in partnership with another provider approved by NLC, whereby in extreme cases where adverse weather as our contingency planning. They may be required to access personal or confidential information or interact with Service Users, before the provider is appointed to deliver the Services for Elite Care Solutions must: The provider has policies and procedures in place that will ensure that the Data Protection Legislation is complied with by the Authority, Elite Care Solutions.

The terms referred to shall include the subject-matter and duration of the processing, the nature and purpose of the processing, the type of personal data and categories of data subjects and the obligations and rights of the controller. In particular it shall stipulate that the provider (as Data Processor):

Processes the Personal Data only on documented instructions from Elite Care Solutions unless required to do otherwise by Law. If required to process Personal Data by Law the provider shall inform Elite Care Solutions of that legal requirement before processing, unless the Law prohibits such information on important grounds of public interest;

Ensures that persons authorised to process the Personal Data have committed themselves to confidentiality or are under an appropriate statutory obligation of confidentiality;

Takes appropriate technical and organisational measures to prevent unauthorised or unlawful processing of the Personal Data;
May not itself sub-contract the processing of the Personal Data without the prior written authority of Elite Care Solutions and the Authority. Any provider must include obligations that are substantially equivalent to that of Elite Care Solutions.

Assists Elite Care Solutions to comply with the Data Protection Legislation;
At the choice of Elite Care Solutions, deletes or returns all the Personal Data to Elite Care Solutions after the end of the provision of services relating to processing, and deletes existing copies unless the Law otherwise requires;

Makes available to Elite Care Solutions all information necessary to demonstrate compliance with the obligations laid down by the Data Protection, Legislation and require the provider to permit and contribute to audits, including inspections, conducted by Elite Care Solutions and shall not cause or allow Personal Data to be transferred outside the European Economic Area without the prior written consent of Elite Care Solutions.

Types of Data we collect

• Name
• Address
• Medication
• Health Problems

To reassure you this information is stored in a lockable filing cabinet and typed data is stored on secure computers that can only be accessed by passwords held by office staff; this is not shared with anyone, only the staff who support you with your consent.

How long do we keep your Data for?

If we provide services for you we are required to keep this information for this period of time and also for 6 years following the day of any services ending. We will hold your personal information for 6 years. Following this all information about you will then be disposed of in a confidential manner and permanently deleted from the PC.

Providing your personal Data

Holding your personal data is based on you signing a consent form at the initial meeting and assessments before any services are put in place.

Service Agreement with you

Please refer to this and retain a copy in your records for consent.

Who to contact about this policy

If you require further information regarding the new GDPR rules, please don’t hesitate to get in touch, you can contact Rebecca Buss at admin@elitecaresolutionsltd.co.uk.

---

Personal Data through this website: What information do we collect, why do we collect and what do we do with it

Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

However, for Elite Care Solutions’ website, we don’t allow commenting on our posts. This may change in the future.

Contact forms

We use contact form(s) on our website as a method of communication between our visitors / customers and our team. All data collected via the forms(s) is transmitted to us via SSL security (padlock in your browser) and is also stored on secure email servers. Here’s what we collect:

• Name
• Email address
• Phone number

We don’t process this data for marketing material unless you’ve given us permission. However, we may contact in regards to important company news, policy changes and other topics that require your attention.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Cookies & Analytics

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

We security auditing tools to monitor visitor behaviour and prevent malicious attacks from happening. These systems log information anonymously but include your IP address, web browser used, pages visited and time spent on these pages in order for us to track down the potential cause of a security vulnerability (if found).

Google Analytics is used alongside Google Search Console to track the performance of our website for when/if we utilise further marketing strategies. This policy will update with more information when/if these occur.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Who we share your data with?

We don’t unless necessary.

Information collected via Google Analytics and security systems are shared with our web team in order to diagnose potential issues with our web platform. These issues may result in performance improvements and design changes in the future.

Our web team First Class Design does not use this data for marketing purposes.

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.

Contact form submissions are stored securely within third party email accounts that require the information to deal with requests. Form submissions are also stored on our website securely to deal with any request. The submissions stored on the website should be deleted after 60 days.

After we’ve dealt with any form submissions, it’s either archived, stored for later use or deleted immediately.

What rights you have over your data

You can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where we send your data

Visitor comments may be checked through an automated spam detection service. This also applies to our login pages not intended for public use. The data is sent securely to our web servers that are managed by First Class Design. They do not access this data unless required to.

Our contact information

If you have any questions about our privacy policy, please send us a message and we’ll get back to you!

Email us: admin@elitecaresolutionsltd.co.uk
Call us on: 01724 855 582
Elite Care Solutions Ltd, 15 Beechway, Scunthorpe, DN16 2HF