1 Introduction
2 The information we collect and when
3 How we use your information
4 Who we might share your information with
5 How we keep you updated on our products and services
6 Your rights over your information
7 How long we keep your information for
8 Giving your reviews and sharing your thoughts
9 Security
10 What happens if our business changes hands?
11 Changes to Our Privacy Policy
12 How to contact us

Mission Care (referred to as “We, “Our” or “Us”), is committed to protecting the privacy and security of your personal information. We take care to protect the privacy of the residents and the families of those who reside in our care homes.

We have therefore developed this privacy notice to inform you of the information we collect, what we do with your information, what we do to keep it secure as well as the rights and choices you have over your personal information.

Throughout this document we refer to Data Protection Legislation which means the Data Protection Act 2018 (DPA2018), United Kingdom General Data Protection Regulation (UK GDPR), the Privacy and Electronic Communications (EC Directive) Regulations 2003 and any legislation implemented in connection with the aforementioned legislation.

Where data is processed by a controller or processor established in the European Union or comprises the data of people in the European Union, it also includes the EU General Data Protection Regulation (EU GDPR). This includes any replacement legislation coming into effect from time to time.

Mission Care is the controller for the personal information we process, unless otherwise stated.

We are registered with the Information Commissioner’s Office (the ICO) with registration number Z7488873.

You can contact us either by phone, email or post.
Our main trading/postal address:
Suite 4, Langford House
7 High Street
Chislehurst
Kent
BR7 5AB

Phone : 0303 123 3201

Email: gdpr@missioncare.org.uk

Our Data Protection Officer is:
The DPO Centre Ltd.
50 Liverpool Street
London
EC2M 7PY

Phone: 0203 797 1289
Website: www.dpocentre.com

We only collect personal information that we know we need to process to provide accommodation and care to elderly and vulnerable individuals who may suffer with mental and /or physical health conditions and to communicate with their family or relatives. We will only use the personal information in accordance with the Data Protection Legislation as stated above.

The type of personal information that we will collect, and you voluntarily provide to us for this service include some or all of the following:

• Your name
• Gender
• Address
• Telephone number(s)
• Email address
• Medical information
• Disability information
• Next of kin details
• Bank account details
• Photographs

We may, depending on our dealings with you, extend this personal information to include further personal data.

For the majority of the time, you are under no statutory or contractual requirement or obligation to provide us with your personal information; however, we require at least the information above in order for us to provide our services to you and to deal with you as a resident of our care homes in an efficient and effective manner. There may, however, be occasions when the law within the UK requires us to hold certain information about you.

Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information are:

(a) Your consent
You told us that we can use your data for a specific and defined activity.
You are able to withdraw your consent anytime by contacting us at gdpr@missioncare.org.uk.

(b) We have a contractual obligation
Processing is necessary to fulfil or prepare a contract with you; for example, the information that we are required to collect in order to provide our party services.

(c) We have a legal obligation
Processing is necessary to meet a legal obligation applicable to us, for example, if we are required to retain your information to comply with tax/revenue laws.

(d) We have a vital interest
Processing is necessary to protect a person’s life or in an urgent medical situation.

(e) We need it to perform a public task

(f) We have a legitimate interest
Processing is necessary for our legitimate business interests. This condition does not apply if there is a good reason to protect your personal data which overrides our legitimate interest.

To contact you, following your enquiry, reply to any questions, suggestions, issues or complaints you have contacted us about

To provide you with the best possible service as a resident of one of our care homes;

To provide medical care to you based on your needs;

Take payment from you or give you a refund;

To obtain feedback on our services to help us to constantly improve our services to you;

During your participation of events hosted by us or at our premises that may include our staff or other individuals taking photographs to capture the moments during the event;

To maintain a safe and secure environment for all residents and staff within our care homes;

To liaise effectively and efficiently with other organisations and third parties to ensure our service meets your needs;

Help answer your questions and solve any issues you have;

To allow us to monitor our website usage and demand for services;

To allow us to meet our legal, regulatory and compliance requirements.

We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.

Please note that we may process your personal information without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

We may share your personal information with other organisations in the following circumstances:

If the law or a public authority says we must share the personal data;

If we need to liaise with other third-party agencies, such as the NHS, Social Care Services, in order to provide the best possible care to residents;

If we need to employ the services of external professionals to assist with the care of our residents, such as physiotherapists, nutritionists, speech/hearing specialists; with external auditors, such as the Care Quality Commission (CQC);

If we need to share personal information to establish, exercise or defend our legal rights; or

From time to time, employ the services of other third-party service providers providing us with supporting services such as, for the operation of the Website. However, all the information we share will be collected and anonymised, so neither you nor any of your devices can be identified from it.

We will not share your information with any third parties for the purposes of direct marketing.

We may use third-party service providers to provide certain services to us. We have Data Processor Agreements in place with our data processors. This means that they cannot do anything with your personal information unless we have instructed them to do it. They will not share your personal information with any organisation apart from us or further sub-processors who must comply with our Data Processor Agreement. They will hold your personal data securely and retain it for the period we instruct.

We may also share your personal information for the purposes of preventing fraud and reducing credit risk.

We will not send marketing material to residents of our care homes.

We may send marketing information about our services and upcoming events related to the care homes to the resident’s relatives, but only if we have received their explicit consent allowing us to do so. We will seek to obtain your or their consent at the outset of providing of our services and you can change your mind at any time and withdraw your consent by informing us by email, over the phone, or in writing.

If you wish to withdraw your consent, you can do so by contacting us at gdpr@missioncare.org.uk or 0303 123 3201.

We retain a record of your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements and in order to provide you with a high quality and consistent service.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

Our retention periods are set out in our internal Data Retention and Storage Policy with Schedule. When we reach the end of a period of retention, the information is reviewed and securely disposed of or deleted.

When using our website, you may be able to share information through social networks like Facebook and Twitter. For example, when you ‘like’, ‘share’ or review our Services. When doing this, your personal information may be visible to the providers of those social networks and/or their other users.

Please remember it is your responsibility to set appropriate privacy settings on your social network accounts and to familiarise yourself with their terms and conditions and privacy notices, so you are comfortable with how your information is used and shared by these entities.

Data security is of great importance to Mission Care, and to protect your information we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the personal data we collected and store about you. These measures prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.

We take the following security measures to protect your information including:

Limiting access to our buildings to those that we have determined are entitled to be there (by use of passes, key card access and other related technologies);

Implementing access controls to our information technology;

We use appropriate procedures and technical security measures (including strict encryption, anonymisation and archiving techniques) to safeguard your information across all our computer systems, networks, websites, mobile apps, offices and stores;

Never asking you for your passwords;

Advising you never to enter your account number or password into an email or after following a link from an email.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

We may, from time to time, expand or reduce our business and this may involve the sale and/or the transfer of control of all or part of our business. Any personal information that you have provided will, where it is relevant to any part of our business that is being transferred, be transferred along with that part and the new owner or newly controlling party will, under the terms of this Privacy Notice, be permitted to use that data only for the purposes for which it was originally collected by us.

We may change this Privacy Notice from time to time (for example, if the law changes). We recommend that you check this notice regularly to keep up to date.

If you would like to exercise one of your rights as set out above, or you have a question or a complaint about this policy, the way your personal information is processed, please contact us by one of the following means:

By email: gdpr@missioncare.org.uk

By post: Suite 4, Langford House, 7 High Street, Chislehurst, Kent, BR7 5AB

Thank you for taking the time to read our Privacy Notice.

Mission Care
This Notice was last updated on 18/10/2023.