Privacy Notice
Privacy Notice
Last updated: 25 February 2025
Precedo Healthcare Services is committed to protecting the privacy and security of personal information. This Privacy Statement explains how we collect, use, disclose, and protect personal data in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the Data Protection Act 2018.
1. Who We Are
Precedo Healthcare Services provides supported living and domiciliary care services. Our registered office is Office 5, Stubley Works, Wreakes Lane, Dronfield, Derbyshire, S18 1PN and we can be contacted at 01246 299700 / enquiries@precedohealthcare.co.uk
2. What Personal Data We Collect
We may collect and process the following categories of personal data:
• Service Users: Name, date of birth, contact details, medical and health information, care plans, next of kin details, financial details (such as funding arrangements), and other relevant information required for care provision.
• Employees & Contractors: Name, contact details, identification documents, employment history, payroll details, pension and tax details, training records, and regulatory compliance data.
• Suppliers & Partners: Business contact details, contractual and financial information.
• Website Visitors: IP address, browser type, cookies, and other website usage data where applicable.
We may also collect and process special category data, including:
• Health and social care data (physical and mental health information) necessary for service provision.
• Data on race, ethnic origin, sexual orientation, or religion where required by law or with explicit consent.
3. How We Use Your Personal Data
We process personal data for the following purposes:
• To provide safe and effective healthcare and support services.
• To comply with legal and regulatory obligations, including safeguarding requirements.
• To manage employment, payroll, and training obligations.
• To respond to inquiries and provide information about our services.
• To improve our website and service delivery.
• To share relevant information with health and social care partners, regulatory authorities, and law enforcement where legally required.
4. Lawful Basis for Processing
We process personal data under the following lawful bases:
• Consent: Where individuals have given explicit consent.
• Contractual Necessity: Where processing is necessary to fulfil a contract.
• Legal Obligation: To comply with legal or regulatory requirements, including the Health and Social Care Act 2012 and the Mental Capacity Act 2005.
• Legitimate Interests: Where processing is necessary for legitimate business interests, provided that individuals’ rights do not override those interests.
• Social Protection Law: Where necessary for safeguarding and service management.
5. Sharing of Personal Data
We may share personal data with:
• Regulatory bodies and authorities (e.g., CQC, NHS, Local Authorities).
• Healthcare professionals and partner organisations involved in service provision.
• IT and service providers who process data on our behalf.
• Law enforcement agencies if required by law or court order.
• Her Majesty’s Revenue and Customs (HMRC) and pension providers for employment obligations.
• The Disclosure and Barring Service (DBS) where required for employment vetting.
We do not sell or rent personal data to third parties.
6. Data Security
We implement appropriate technical and organisational measures to ensure personal data is protected against unauthorised access, loss, or misuse. This includes encryption, access controls, and secure storage.
7. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes outlined in this statement and to comply with legal and regulatory obligations. Retention periods vary depending on the nature of the data and legal requirements.
8. Your Rights
Under GDPR, individuals have the following rights:
• The right to access their personal data.
• The right to rectify inaccurate or incomplete data.
• The right to erasure (in certain circumstances).
• The right to restrict processing.
• The right to data portability.
• The right to object to processing.
• The right to lodge a complaint with the Information Commissioner’s Office (ICO) if they believe their data rights have been violated.
Individuals may need to provide identification (e.g., passport or driver’s licence) when exercising these rights to ensure data security.
9. Cookies & Website Usage
Our website may use cookies to enhance user experience. Users can manage cookie preferences via their browser settings.
10. National Data Opt-Out
At this time, we do not share any data for planning or research purposes under the national data opt-out scheme. We review all confidential patient information annually to determine if such sharing is applicable.
11. Contact Us
For any questions about this Privacy Statement or to exercise your data protection rights, please contact:
Amanda Cattell – Data Protection Officer
Precedo Healthcare Services
Office 5,
Stubley Works,
Wreakes Lane,
Dronfield,
Derbyshire
S18 1PN.
E: ac@precedohealthcare.co.uk
T: 01246 299700