Privacy Policy

Care for Veterans – Privacy Notice

This privacy policy was updated in May 2018 to comply with the requirements of the new General Data Protection Regulations (GDPR). 

In this privacy notice, ‘we’, ‘us’ and ‘our’ means Care for Veterans. Our privacy guidelines are simple. We will be transparent about the types of data we collect and why it is collected. No service can ever be completely secure, but be reassured that every effort, organisational and technological, is made to ensure security is maintained.  We are “data controllers” for the purpose of the legislation. 

We collect data from different subject groups, principally our residents, our resident’s relatives, our supporters and our staff. This data is stored securely and is not shared with any third party without the explicit consent of the data subject. We do not sell data to any third parties. Most of the data is stored on our own server and for any that is stored off-site, it is held on servers within the United Kingdom. No data is sent abroad unless one of the four subject groups above requests the transfer.  

This statement explains the information we collect from you and explains how we will use it. Personal information is any information that can be used to identify a natural person, or that can be linked to that natural person.   

Keeping our staff up-to-date: 

Everyone at Care for Veterans has a responsibility to protect your Personal Data. At least once a year our staff undertake mandated training on data protection. If any agency or individual contacts us asking for your Personal Data, we will take all necessary steps to check their identity and rationale for the request before any information is forwarded. 

Subject Groups:

Care for Veterans controls and processes personal information on three separate subject groups. Residents/relatives, volunteers and employees. The categories of date collected varies between these groups. 

Residents/Residents’ Relatives

Supporters

Staff Administration

Your rights: 

You have the right to access your information, to ask us to correct errors, delete or restrict the use of your information. You also have the right to object to us using your information, to right to ask us to transfer your information, and the right to withdraw permission you have given us to use your information. 

In summary, you have the following rights (certain exceptions apply). 

• Right of access: to make a written request for details of any personal information including emails and request a copy of that personal information – we will respond within 30 days or request an extension to 90 if there is a large quantity of data 
• Right to rectification: to have inaccurate information about you corrected or removed 
• Right to erasure (‘right to be forgotten’): have certain personal information about you erased (this cannot include medical records) 
• Right to restriction of processing: to request that your personal information is only used for restricted or agreed purposes 
• Right to object: to object to processing of your personal information in cases where our processing is based on the performance of a task carried out in the public interest such as reporting notifiable diseases  
• Right to data portability: to ask for your personal information you be transferred to you or a third party in machine-readable formats should you move from Care for Veterans 
• Right to withdraw consent: to withdraw any consent you have previously given. If you withdraw your consent, this will not affect the lawfulness of our use of your personal information obtained prior to the withdrawal of your consent. Care for veterans will inform you if we are no longer be able to deliver our contracted services following this withdrawal. 

If you make a request, we will ask for proof of your identity if we need to and may request additional information that helps us to understand your request better. If we do not meet your request, we will explain why. 

Data protection contacts: 

If you have any questions, comments, complaints or suggestions in relation to this policy, or any other concerns about the way in which we process information about you, please contact our Privacy Officer at [email protected]. 

 You also have a right to make a complaint to the supervising authority at ico.org.uk. 

 You can also lodge a complaint with another supervisory authority which is based in the country or territory where: 

you are living, you work, or the alleged infringement took place.