1. Introduction

At St Jude Care Homes Ltd T/A Kingswood Care Home, we are committed to protecting your privacy and the confidentiality of the personal information we hold about our residents, staff, and visitors.

This Privacy Notice explains what information we collect, why we collect it, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What Information We Collect

We may collect and process the following personal information:

• Personal details (name, date of birth, address, contact details, next of kin)
• Health and medical information
• Care and support needs assessments
• Financial and payment information (where applicable)
• Records of care provided and daily notes
• Staff employment, training, and HR records
• CCTV images (for safety and security purposes)
• Incident and complaint records

3. Why We Collect Your Information

We collect and use personal data to:

• Deliver safe, effective, and personalised care and support
• Meet our legal and regulatory obligations (including CQC requirements)
• Communicate with residents, families, and professionals involved in care
• Manage our staff, services, and business operations
• Maintain the safety and security of residents, staff, and visitors

4. Lawful Basis for Processing

We process personal data in accordance with Article 6 and Article 9 of the UK GDPR. Our lawful bases include:

• Legal obligation – to comply with laws and regulations
• Contract – to provide care and services
• Vital interests – to protect someone’s life
• Public task – where we perform duties in the public interest
• Legitimate interests – for day-to-day operations and safety
• Consent – for optional matters, such as sharing photographs or marketing

5. Who We Share Information With

We may share relevant information with:

• Health and social care professionals (GPs, hospitals, community nurses, social workers)
• Local authorities and regulators (such as the Care Quality Commission)
• Service commissioners and funding bodies
• Family members or representatives (where appropriate)
• Emergency services (in urgent situations)
• Third-party providers who support our operations (e.g. payroll, IT, and care management systems)

All third parties are required to handle your data securely and in accordance with data protection law.

6. How We Keep Your Data Safe

We have strong technical and organisational measures in place to protect your information from unauthorised access, loss, or misuse. This includes:

• Secure password-protected systems and databases
• Locked storage for paper records
• Staff training in data protection and confidentiality
• Regular monitoring and audits of data security practices

7. How Long We Keep Your Data

We only keep personal data for as long as necessary to fulfil the purposes outlined in this notice and to meet our legal and regulatory obligations. Retention periods are based on NHS, CQC, and local authority guidance.

8. Your Rights

Under the UK GDPR, you have the right to:

• Access your personal information
• Request correction of any inaccurate data
• Request deletion of your data (where legally possible)
• Restrict or object to certain types of processing
• Withdraw consent (where applicable)
• Lodge a complaint with the Information Commissioner’s Office (ICO)

For more information, visit www.ico.org.uk.