PRIVACY POLICY

Scope

This Privacy Policy applies generally to personal data received by St Agatha Care Ltd (hereinafter also referred to as “ST AGATHA CARE”) in any format. ST AGATHA CARE will ensure all global data it handles conforms to this Privacy Policy. 

Your personal data – what is it?

Personal data relates to a living individual who can be identified from that data. Identification can be by the information alone or in conjunction with any other information in the data controller's possession or which is likely to come into such possession. The processing of personal data of European citizens or residents (“EU Personal Data”) is governed by the EU General Data Protection Regulation (referred to herein as the “GDPR”).

How does St Agatha Care process your personal data?

St Agatha Care Ltd complies with its obligations under the GDPR by keeping personal data up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data.

The personal data that you provide (or have previously provided) to St Agatha Care Ltd may be stored in St Agatha Care Ltd's data storage carrier in the United Kingdom. 

What type of personal data does St Agatha Care collect or obtain about you?

The type of information St Agatha Care collects about you may include information such as:

• your name

• your email address

• your address

• your phone number

• information that you have visited its website

How does St Agatha Care collect or obtain personal information about you?

St Agatha Care collects personal information about you when you provide it to St Agatha Care, such as through your use of its website, when you contact it directly by email, phone or in writing, when you order services, or any other means by which you provide personal information to it. St Agatha Care also collects information about your use of its website through cookies and similar technologies.

What is the legal basis for collecting and processing your personal data? 

St Agatha Care processes personal information under several legal bases because it is:

• necessary for compliance with its legal obligations
• necessary for the performance of a contract between St Agatha Care Ltd and you
• necessary for its legitimate business interests (e.g. engaging with clients in order to satisfy contract requirements and for record keeping purposes)
• necessary for the establishment, exercise, or defence of legal claims and

pursuant to your consent

How long does St Agatha Care keep your personal data?

St Agatha Care will keep your personal data for no longer than reasonably necessary for its ongoing business relationship and for record keeping purposes and in case of any legal claims or complaints.

Further processing

If St Agatha Care wishes to use your personal data for a new purpose not covered by the existing privacy policy, it will provide you with a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions. Where and whenever necessary, St Agatha Care will seek your prior consent to the new processing.

Sharing your personal data

Your personal data will be treated as strictly confidential and will not be shared.

Cookies and website privacy practices

The St Agatha Care Ltd website uses cookies. Cookies are small data files that are served by its platform and stored on your device. St Agatha Care site uses cookies dropped by St Agatha Care or third parties for a variety of purposes including to operate and personalise the website.

When any clients visit St Agatha Care Ltd's website, St Agatha Care Ltd does not track personal data, names or email addresses. Instead, St Agatha Care Ltd only tracks which internet service provider has accessed the site as well as statistics that show the number of site visitors, those requests received and the country origin of those requests. This information is used to improve its site in order to better serve its clients, but this information does not constitute personal data.

Your rights and your personal data

Your rights under the GDPR include the following (unless subject to an exemption):

• The right to request a copy of your personal data which St Agatha Care holds about you
• The right to request that St Agatha Care corrects any personal data if it is found to be inaccurate or out of date
• The right to request your personal data is erased where it is no longer necessary for St Agatha Care to retain such data
• The right to withdraw your consent to the processing at any time
• The right to request that St Agatha Care provides you, as the data subject, with your personal data and where possible, to transmit that data directly to another data controller
• The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction is placed on further processing
• The right to lodge a complaint with governmental agencies or data protection authorities as provided for in the GDPR.

To exercise your rights to data rectification, erasure, portability, access and/or restricted processing, please email enquiries@stagathacare.co.uk

Choice

St Agatha Care Ltd's clients have the choice concerning what personal data is accessed, used or retained. In order to conduct business with its clients it is necessary to maintain contact information and specific billing information, but the extent of the information stored can always be discussed with St Agatha Care Ltd. Additionally, if there is a specific concern about the personal data found in the information provided to process the provision of care services, St Agatha Care recommends redacting this information prior to sending it to St Agatha Care Ltd or discussing alternative solutions with St Agatha Care Ltd.

Access and correction

Any individual client may request a copy of the personal data St Agatha Care Ltd has collected from St Agatha Care Ltd in accordance with applicable law, in addition to receiving confirmation of the contents of any personal data relating to the individual. Under applicable law, such an individual client then has the right to correct, amend or delete information when it is inaccurate.

Clients may do so by contacting St Agatha Care Ltd.

Except as may be required by law or during a registrar or regulatory audit, St Agatha Care Ltd will not provide this data to a third party without the consent of the client.

Data security

St Agatha Care Ltd has strict physical and logical security procedures to ensure that all digital and paper records are secured. These records are accessible only by St Agatha Care. All critical systems (e.g. drives) are accessible only by St Agatha Care. St Agatha Care Ltd's information security is managed internally and is routinely audited to ensure conformity with St Agatha Care Ltd's procedures and recommended industry standards.

Independent recourses for privacy complaints and contact information

St Agatha Care Ltd commits to resolving complaints about its collection or use of your personal information. To exercise all relevant rights, queries or complaints, please contact St Agatha Care Ltd at enquiries@stagathacare.co.uk

Enforcement 

St Agatha Care Ltd undertakes to verify compliance with its Privacy Policy not less than once per year and in connection with St Agatha Care Ltd's annual review and internal compliance measures. St Agatha Care Ltd will use its best commercial efforts to ensure that compliance with this Privacy Policy is maintained and that the Privacy Policy is accurate, comprehensive, and continues to conform to applicable law. It encourages clients to raise and discuss any issues or concerns with St Agatha Care Ltd directly and resolve such complaints regarding the use of data and noncompliance with its Privacy Policy. St Agatha Care Ltd is committed to cooperating with EU data protection authorities (DPAs).