We believe a retirement home should be:

Where each person is an individual.
Where there are no unnecessary rules and regulations.
Where dignity, peace and comfort take priority.
Where companionship, interest and activity flourishes.
And where people are supported to lead the fullest possible lives.

Privacy Policy

The Old Vicarage Care Home in Weekley, Kettering, Northamptonshire

ROYAL BAY GROUP GDPR PRIVACY NOTICE

At Royal Bay Care Homes we take privacy very seriously and are currently updating all our records and processes to ensure that we are fully meeting the data protection standards introduced by the General Data Protection Regulation (GDPR) on 25 May 2018.

We are registered as data processors with the Information Commissioner’s Office (ICO).

The categories of information that we collect, hold and may share include:

personal information (such as name, address, date of birth, email address)
characteristics (such as ethnicity, language, nationality, country of birth).

The lawful basis on which we use this information

We collect and use information under the following lawful bases established by the GDPR.

Legitimate interests: the processing involves using your data in ways you would reasonably expect and which have a minimal privacy impact.
Legal obligation: the processing is necessary for us to comply with the law (submitting data to Government Departments for example).

Who we share information with

We routinely share information with:

local authorities
government departments

Why we share information

We do not share information with anyone without your consent unless the law and our policies allow us to do so.

We are required to share certain data with official bodies (such as HMRC or the Department for Work and Pensions (DWP) or CQC) on a statutory basis.

Data collection requirements

To be granted access to any information we hold, organisations must comply with strict terms and conditions covering the confidentiality and handling of the data, security arrangements and retention and use of the data.

We do not keep data for any longer than necessary and do not allow its use for any purpose other than that for which it has been collected. Should new processes be introduced into the organisation or innovative uses of the data we hold, you will be kept informed at each stage.

Requesting access to your personal data

Under the GDPR, you have the right to request access to information about you that is held by this organisation. To make a request for your personal information, contact Tim Wilson, Communications Director, who will deal with the request within 30 days.

You also have the right to:

object to processing of personal data that is likely to cause, or is causing, damage or distress
prevent processing for the purpose of direct marketing
object to decisions being taken by automated means and
in certain circumstances, have inaccurate personal data rectified, blocked, erased or destroyed.

If you have a concern about the way we are collecting or using your personal data, we request that you raise your concern with Tim Wilson in the first instance. This does not affect your right to complain to the Information Commissioner’s Office (ICO) (ico.org.uk).