The following information outlines Utopia Care’s privacy notice and how we use your personal data as defined in the General Data Protection Regulation and Data Protection Act 2018. The Regulations define a set of rules and guidelines that we must follow when handling your personal information. Utopia Care is committed to protecting the privacy of your information and we comply with the principles set out in the General Data Protection Regulation and Data Protection Act 2018. We will ensure that any information you give to us is not misused and it is in line with the guidance contained in the regulations. Utopia Care is a registered Community Interest Company.
Reason for processing your information
The Data Protection law allows us to process personal data if we have a lawful basis to do so. This includes sharing your information with third parties outside of Utopia Care. The reason we will use your personal information is to enable us to provide you with accommodation and services to fulfil your tenancy agreement. We will also use your data to provide you with the right care and support and for our employees to ensure we meet the requirements of the employment law. The lawful basis, for Utopia Care to process your information will be our legal obligation to you and some processing maybe done through our legitimate interest, where Utopia Care or a third party have a business need or other good reason to use your data. The processing of activities can be summarised as:
- Letting, renting and leasing properties
- Managing your accounts including licence charges
- Managing repair, maintenance and adaptions of our properties
- Maintaining our accounts and records
- Providing associated welfare services advice and support and care
- Supporting and managing our employees, volunteers, agents and contractors
- Administering waiting lists
- Carrying out research.
We have a legal obligation to provide you with the right care and support service for example under the:
- Care Act 2014
- Health and Social Care Act 2008 (regulated activities) Regulations 2014
- Mental Capacity Act 2005
- Mental Health Act 1983
- Housing Act 2004
- Homelessness Act 2002
- Homelessness Reduction Act
- Children’s Act 2004
- Caldicott Principles
As a Utopia Care employee data is also necessary for payroll and HR reasons including sick leave and other types of leave for which statutory payments are available. We must comply with the HM Revenue and Customs (HMRC) requirements. There maybe some processing which may not comply to the legal obligation. The law allows us to also process data if it is in our legitimate interests, our legitimate interest would be:
- To ensure that our services meet the needs of our customers
- To ensure we make use of our resources for our customers and employees and understand how we are performing
- To ensure we provide a safe service
- To ensure we understand our customer’s and employee’s experiences through feedback and surveys
Types of information we process
|What personal information may we collect?||Name(s), address, age, contact details, next of kin and their contact details, I.D., sex, National Insurance number, education and employment details, address history, details of any support services, financial details, photograph(s) of you, bank details, any complaints against you and supplier details.|
|What sensitive personal information may we collect?||Ethnic or racial origin, sexual orientation, health details religion sexual life, genetic data, political beliefs and trade union membership. We may also hold information on criminal offences (outcomes and sentences) and details of harassment or abuse.|
|Where do we get your data?||We will receive your information by referral from local authorities, NHS or former housing provider. We may also receive your information from recruitment agencies.|
|Who might we share your data with?||We only disclose your personal information to third parties with your explicit consent. However, we may sometimes need to share information without your consent to comply with any legal obligation or to fulfil the purposes for which it was submitted. We will not sell your personal data to third parties or pass on your personal data to unrelated third parties.|
|How long will your data be kept securely?||Your data is treated with the utmost confidentiality and security. Your data will be stored on a secure system which is password protected and any paper files will be kept in secure lockable cabinets in locked offices. This is also detailed in our Data Protection and Confidentiality Policy and Procedure.|
|How long will your information be kept?||We have a document retention policy in place, which outlines how long we keep different types of information. The policy will also be reviewed annually.|
|CCTV||Most of our properties have CCTV in public areas to deter crime and antisocial behaviour and to promote public safety by helping to identify and prosecute criminal offenders. You can ask for a copy of any CCTV images taken of yourself by making a ‘subject access request’. See Rights to Access|
|Transfer||We will not transfer or store your personal data outside of Europe (the European Economic Area), outside of the control of the UK/European regulations.|
1. This cookies policy applies to Utopia Care CIC website(s) at https://utopiacare.co.uk/. By using Utopia Care CIC’s website you consent to the policy.
Similarly to the above, we may gather information about your general Internet use by using a cookie file. Where used, these cookies are downloaded to your computer automatically. This cookie file is stored on the hard drive of your computer, as cookies contain information that is transferred to your computer’s hard drive. They help us to improve our website and the service that we provide to you.
Your rights as a customer or employee of Utopia Care Right to Access
You have the right to request a copy of the data we hold about you and we must comply with your request within one calendar month. As a community interest company, we may refuse or charge for requests that are manifestly unfounded or excessive. If your request is refused, we will write to you within one month to let you know. You will then have the right to complain to the supervisory authority and to a judicial remedy.
Right to be forgotten
You have the right to request that your information be deleted where the use of that information would no longer meet the requirements of the General Data Protection Regulation. Once the request is made, the information must be deleted within one month. Where the information in question has been made public or transferred to a third party, we must also take reasonable steps to inform those third parties about the request for deletion including any links to, or copies of that personal information. The above does not apply when it is necessary to keep the information in relation to legal proceedings, to comply with a statutory obligation, or to perform tasks in the public interest.
You have the right to have inaccurate and incomplete information about you amended and completed.
Right to restriction
You have the right to request restriction if your information is no longer processed (other than it being stored) or is incorrect or the processing is unlawful but you object to its deletion and you want us to hold your information as you may need it for legal reasons.
Right to object
You have the right to object if you are being profiled. Profiling is where decisions are made about you based on certain things in your personal information, for example health conditions.
Rights to complain
You have the right to complain to the Information Commissioner’s Office (ICO) if you think there is a problem with the way in which Utopia Care are handling your information. To contact the ICO, please call 0303 123 1113 or visit their website at https://ico.org.uk.
If you have any questions concerning your information, you can contact the Data Controller at: email@example.com
Utopia Care CIC
776-778 Barking Road
Changes to this Notice
The privacy notice may be updated from time to time to reflect any changes or to reflect any changes to the data protection legislation or any other relevant legislation.