This Privacy Statement sets out the data processing practices carried out by EK360. We retain and use personal data (information that relates to and identifies living people) to help us carry out our role as the local independent champion for people who use health and social care services.
Find out more about our purpose and what we do https://www.EK360.co.uk
We will always make sure that your information is protected and treated securely. Any information that you give will be held in accordance with:
- Data Protection Act 1998
- As of 25 May 2018, the new data protection legislation introduced under the General Data Protection Regulation (GDPR) and Data Protection Bill.
Read our Information Governance Policy
We also make our Information Asset Register available for people to read to give further clarity about how data relating to them is managed and kept secure. This includes our retention schedule and clear details about the lawful basis for storing and keeping personally identifiable information. To request a copy please contact us.
Information we collect
We collect personal information from visitors to this website through the use of online forms and every time you email us your details. We also collect feedback and views from people about the health and social care services that they access. In addition, we receive information about our own staff and people who apply to work for us.
- Information about people who use our website
- Information about people who access our services
- Information about our own staff and people applying to work for us
We are strongly committed to data security and we take reasonable and appropriate steps to protect your personal information from unauthorised access, loss, misuse, alteration or corruption.
We have put in place physical, electronic, and managerial procedures to safeguard and secure the information you provide to us.
Only authorised employees and contractors under strict controls will have access to your personal information.
Information about people who use our website
Please note that this statement does not cover links within this website to other websites.
When you browse through the information on this website, it does not store or capture your personal information. We do log your IP address (as it is automatically recognised by the web server) but this is only so you can download this website onto your device rather than for any tracking purpose; it is not used for any other purpose.
We will only collect personal information provided by you, such as:
- Feedback from surveys and online forms
- Email addresses
- Preferred means of communication.
How we will use your personal information
Personal information about you can be used for the following purposes:
- In our day-to-day work.
- To send you our newsletter where you have requested it.
- To respond to any queries you may have.
This may include any personal information that you choose to share with us, but we will treat this as confidential and protect it accordingly.
In most circumstances we anonymise our data to ensure that a person cannot be identified unless this has been otherwise agreed and consent has been given.
Our data systems
We manage our data within secure digital system and no other organisations are involved in processing that data.
Information about our own staff and people applying to work with us
We need to process personal data about our own staff (and people applying to work for us) so that we can carry out our role and meet our legal and contractual responsibilities as an employer.
The personal data that we process includes information about racial or ethnic origin, religion, disability, gender and sexuality. We use this information to check we are promoting and ensuring diversity in our workforce and to make sure we are complying with equalities legislation.
Our employees decide whether or not to share this monitoring data with us, and can choose to withdraw their consent for this at any time. Employees who wish to withdraw their consent for us to process this data can let us know.
Other personal data that we are required to process includes information on qualifications and experience, pay and performance, contact details and bank details.
We have a legal obligation to comply with the Freedom of Information Act 2000 and this may include the requirement to disclose some information about our employees – especially those in senior or public facing roles. We also publish some information about our staff, including the names and work contact details of people in some roles.
Retention and disposal of personal data
We publish a retention and disposal schedule which explains how long we keep different types of records and documents for, including records and documents containing personal data. Personal data is deleted or securely destroyed at the end of its retention period. For a copy of this please ask.
If you think we may hold personal data relating to you and want to see it, please write to firstname.lastname@example.org
Correcting or deleting your personal data
If you know that we are holding your personal data and believe that it may be wrong, or if you want it to be deleted or for us to stop using it, you have a right to request that it can be deleted or amended.
Please make your objection in writing to sue.alder:@ek360.co.uk
Or send it by post to:
Complaints about how we look after or use your information
If you feel that we have not met our responsibilities under data protection legislation, you have a right to request an independent assessment from the Information Commissioner’s Office (ICO). You can find details on their website.
Our contact details and key roles
Ek360 is data controller for all of the personal data that you provide us with. Any issues relating to the processing of personal data by or on behalf of EK360 may be addressed to our designated Data Protection Officer under Article 37 of the GDPR.