Website Privacy Policy

Scope of this Notice

We take the privacy of our website users seriously. This privacy notice tells you what to expect when HCRG Care Group collects personal information through its website.

We will not collect information about your health and care through this website. Each of our health and care services maintains its own patient privacy notice in relation to your health and care. Please see the website of the service you have engaged with.

For candidates: We have a separate privacy notice held in our careers section.  This is also issued to you if you apply for a vacancy or are successfully recruited into a role.

Please be aware that our site may link to other websites. If you follow a link to any of these websites, please note that they will have their own cookies and privacy policies. We do not accept any responsibility or liability for the privacy and security practices of such third-party websites and your use of such website is entirely at your own risk.

If you would like this information in an alternative format – such as large print, easy read, or an alternative language, please let us know using the contact details below.

Key Definitions

UK Data Protection Laws:

• UK General Data Protection Regulation (UK GDPR).
• Data Protection Act 2018 (DPA 18).

Personal data: Any information relating to an identifiable individual. This might include your name, NHS number, contact details. It can also be location data or an online identifier.

Special categories of personal data are defined as: Racial or ethnic origin, politics, religious or philosophical beliefs, trade union membership, genetics, and biometrics (where used for identification) information concerning your health, sex life or sexual orientation.

Data Controller: An entity or individual that determines how and why personal data is processed.

Data Processor: A entity or individual that processes personal data on the behalf of the data controller.

Who are we?

This website is owned and operated by HCRG Care Limited. For the purposes of this privacy notice, HCRG Care Limited and, its subsidiaries will be known as ‘HCRG Care Group’.

The data controller for this website is HCRG Care Limited (registered company number 5466033) of The Heath Business and Technical Park, Runcorn, Cheshire, WA7 4QX.

Who can you contact regarding your personal information we hold?

Data Protection Officer
Deborah Tonkin
The Heath Business Park
Runcorn
Cheshire
WA7 4QX
via email: Ask.IG@hcrgcaregroup.com

If you are not happy about the way your information is handled, you have the right to lodge a complaint with a supervisory authority.  In the UK, this is the Information Commissioners Office (ICO).

The Information Commissioner’s Office
Wycliffe House
Cheshire
SK9 5AF
Helpline: 0303 123 1113 (local rate)
Email: casework@ico.org.uk
Website: www.ico.org.uk

What Information do we collect about you?

When you visit our website www.baneschildandfamily.co.uk  we collect standard internet log information and details of visitor behaviours. This is statistical data only which we collect in order to find out the numbers of visitors to the site and the pages visited. The information is collected in such a way that does not identify individuals and we do not make any attempts to identify visitors this way.

Where we do collect personal information on the site, this will be made obvious to you through the relevant pages.

Web Server Log Files

IP addresses are used by your computer every time you are connected to the Internet. Your IP address is a number used by computers on the network to identify your computer. IP addresses are automatically collected by our web servers so that data (such as the web pages you request) can be sent to you.

Web server log files are used to record information about our site, such as system errors. Log files do not contain any personal information or information about other sites which you have visited.

Cookies

Please see section 11.

Social Media

When you contact us through social media such as Facebook and Twitter, we hold your information and reason for contact in our social media management portal to enable us to easily access and manage our engagement with you.  This may result in us sharing your information with other parties within HCRG Care Group e.g., individuals involved in your care, managing your complaint etc.

Other Contact

In order to provide you with a range of services, we may collect personal information from this website, from telephone responses, from written information sent to us and from other communications. We may for example, keep a record of your name, social media account name, mailing address, email address, telephone number, preferences, and any other information you provide to us or is collected by us. We may supplement the information that you provide to us with information that we receive or obtain from other sources.

If you don’t provide this information, we will be unable to interact with you.

What is our legal basis for processing your information?

We process your information for our legitimate interests of being able to respond to your enquiries, concerns, or compliments, make improvements to our website and the service that we are providing.

Who do we share your Information with?

We may provide information about you (on the understanding that such information will be kept confidential) to employees and agents of HCRG Care Group to administer any accounts, products and services provided to you by HCRG Care Group now or in the future.

We may also share the information you’ve provided to help with the resolution of a complaint or concern.

Otherwise, we may disclose information about you to third parties:

• Where we have a duty to do so or if the law permits or requires us to do so.
• To anyone to whom we transfer or may transfer our rights and duties under our agreement with you.

Where is your data stored and how long do we keep it for?

Your information is stored on secure servers hosted within the UK with isolated backups that are kept remotely for three months.

Marketing

We provide newsletters and other information to a wide range of groups within our service including individual involved with our Citizens’ Panels, Carers Groups and volunteer networks.

In these circumstances we provide each group with detailed privacy notices about how their information will be used with options for changing preferences and fully opting out.

Opt-out and preference change links are available on all email contacts we send you.

Legal Basis

• We will rely on your consent to receive our newsletters and information about our services.
• On occasions it may be in our legitimate interests.

How can I access a copy of my Information?

UK data protection laws provide you with the following rights:

The right to be informed

As a data controller, we are obliged to provide understandable and transparent information about the way we process your data (this is provided by our privacy policy)

The right of access

You are entitled to request a copy of the personal data we hold about you.

The right to rectification

You are entitled to request changes to information if it is inaccurate or incomplete.

The right to erasure

Where no overriding legal basis or legitimate reason continues to exist for processing personal data, you may request that we delete the personal data.

The right to restrict processing

Under certain circumstances, you may ask us to stop processing your personal data. We will still hold the data but will not process it any further.

The right to data portability

Subject to certain conditions, you may request a copy of your personal data to be transferred to another organisation.

The right to object to processing

You have the right to object to our processing of your data where:

• Processing is based on legitimate interest.
• Processing involves automated decision-making and profiling.
• Processing would be for a purpose beyond your care and treatment, e.g., direct marketing and scientific or historic research.

You can opt-out to the sharing of this information under the National Data Opt-Out. Further information can be found on the following website:
https://digital.nhs.uk/national-data-opt-out

Please note that the above rights may not apply in all circumstances, but we will respond within a month of any requests. If you have any questions or concerns about the information we hold on you, please contact our Data Protection Officer.

How to request a copy of your information:

Please email the Access to Records Team accesstorecordsteam@hcrgcaregroup.com or write to us at The Heath Business Park, Runcorn, Cheshire, WA7 4QX.

Keep us updated of any changes:

Please let us know if you change your address or contact details etc. so that we can keep your information accurate and up to date.

Cookies

A cookie is a string of information that a website stores on a visitor’s computer, and that the visitor’s browser provides to the website each time the visitor returns. This helps us to distinguish you from other visitors to our web site. The following lists the cookies used on this website:

Google Analytics

_ga, _gat,_gid, cb-enabled (once accepted)

These cookies help tell us understand how many people have been to the site before, what time people visited the site and what pages were looked at.

Google Maps

_ga, _gat,_gid, cb-enabled (once accepted)

These are used by Google to track how many people use their maps. For more information, please refer to Google’s Privacy notice for more information:

http://www.google.co.uk/intl/en/policies/privacy/faq/#toc-terms-cookie

Authentication

On login, wordpress uses the wordpress_[hash] cookie to store your authentication details wp_set_auth_cookie( $user_id, $remember, $secure )

Use is limited to the admin console area. After login wordpress sets the wordpress_logged_in_[hash] cookie, which indicates when you are logged in and who you are, for most interface use, WordPress also sets a few wp-settings-{time}-[UID] cookies. The number on the end is your individual User ID (or UID) from the user database table.

Using the login pages

wp_setcookie($username, $password, $already_md5 = false, $home = ”, $siteurl = ”)

When you log into WordPress from http://example.com/wp-login.php, WordPress stores the following two cookies:

• Your user name.
• A double-hashed copy of your password.

The cookies are set to expire two weeks from the time they are set.

For more information about WordPress’s cookies, please refer to their Privacy notice which can be found at http://codex.wordpress.org/WordPress_Cookies

For more information about cookies, including how to view the cookies that have been set and how to manage or delete them, please visit www.allaboutcookies.org

Legal Basis:

• Legitimate interests of being able to maintain the functionality and usability of our website and other social media outlets.

Changes to our privacy notice

We will update this privacy notice from time to time to reflect any changes to our ways of working.