At Homecare Alliance Ltd, we are fully committed to protecting and respecting the privacy of our service users, their families, our staff, and visitors. This policy explains how we collect, use, and protect your personal data in compliance with UK law.

1. About Us

Homecare Alliance Ltd is the ‘Data Controller’ for the information we process. We are registered with the Information Commissioner’s Office (ICO). We comply with:

• The UK General Data Protection Regulation (UK GDPR)
• The Data Protection Act 2018 (DPA 2018)
• The Health and Social Care Act 2008 (Regulated Activities) Regulations 2014
• The Care Standards Act 2000

2. Types of Data We Collect

To provide safe and effective domiciliary care, we collect “Special Category Data” (sensitive information), including:

• Service Users (Clients): Basic details (Name, DOB, address, next of kin), medical history, medication records, physical/mental health conditions, care plans, and financial information for billing.
• Staff and Job Applicants: Personal details, employment history, references, and Enhanced DBS checks as required by the Care Quality Commission (CQC).
• Other Data: Religious beliefs or ethnic origin (where relevant to care preferences).

3. Why We Process Your Data (Lawful Basis)

Under UK GDPR, we rely on the following legal bases:

• Contract: To provide the care services agreed upon in your Care Contract.
• Legal Obligation: To meet our statutory requirements under the Health and Social Care Act.
• Vital Interests: To protect your life in emergency medical situations.
• Special Category Data: We process health data under Article 9(2)(h) for the provision of health or social care treatment.

4. How We Share Your Information

We do not sell your data. We only share information with authorized parties, including:

• Healthcare professionals (GPs, District Nurses, Pharmacists).
• Local Authorities and Social Services.
• The Care Quality Commission (CQC) during inspections.
• Emergency services if you are at risk.

5. Data Retention

We retain records in line with the Records Management Code of Practice for Health and Social Care. Generally, care records are kept for 8 years after the conclusion of treatment or death, after which they are securely destroyed.

6. Your Rights

Under the Data Protection Act 2018, you have the right to:

• Access: Request a copy of the data we hold about you.
• Rectification: Ask us to correct inaccurate information.
• Erasure: Request deletion of data (subject to legal retention requirements).
• Restriction: Ask us to stop processing your data in certain circumstances.

7. How to Complain

If you have concerns about how we use your data, please contact our Data Protection Lead first. If you remain dissatisfied, you have the right to lodge a complaint with the ICO:

Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113 | Website: www.ico.org.uk