Privacy policy

A clear overview

Nightingale Retirement Care Limited is the data controller for Nettlestead Care Home. This notice explains what personal information we use, why we use it, who we may share it with and the choices available to you.

We only collect information that is relevant to an enquiry, a care assessment, the provision and administration of care, recruitment, website operation or another legitimate relationship with Nettlestead.

Information we may collect

• Contact and identity information, such as your name, address, email address and telephone number.
• Enquiry and relationship information, including your questions, visit arrangements, correspondence and your relationship to a resident or prospective resident.
• Care and health information needed to assess or provide safe, appropriate care. This can include special-category personal data.
• Financial and administrative information needed for quotations, contracts, invoices and payment records.
• Recruitment information, such as employment history, qualifications, references, availability and information required for relevant checks.
• Website and device information, such as your IP address, browser information and cookie choices.

We normally receive information directly from you. Where appropriate, we may also receive it from a relative, representative, health or social-care professional, local authority, service provider or other person involved in arranging or providing care.

How and why we use information

Where we rely on consent, you can withdraw it at any time. This will not affect processing that was lawful before withdrawal. Where information is needed for a contract or legal obligation, we will explain if not providing it means we cannot progress an enquiry or safely provide a service.

Who we may share information with

We share information only where there is a legitimate and lawful reason. Depending on the circumstances, recipients may include:

• authorised Nettlestead and Nightingale Retirement Care Limited staff;
• health and social-care professionals, pharmacies, emergency services, local authorities and other organisations involved in a person’s care;
• the Care Quality Commission and other regulators or public authorities;
• professional advisers, insurers, auditors and legal representatives;
• carefully selected technology, payment, storage, communications and other service providers acting on our instructions; and
• law-enforcement bodies or other parties where disclosure is required or permitted by law.

We do not sell personal information. Service providers must protect information and may use it only for the agreed service.

International transfers

Some technology providers may process information outside the United Kingdom. Where this occurs, we use an appropriate legal safeguard, such as an adequacy regulation or approved contractual protections, and apply proportionate security measures.

How long we keep information

We keep information only for as long as it is needed for the purpose described, to provide care safely, and to meet legal, regulatory, insurance and record-keeping requirements. Retention periods vary according to the type of record and the relationship involved. When information is no longer required, it is securely deleted, anonymised or destroyed.

You can ask us about the retention period that applies to a particular record.

Your data-protection rights

Depending on the circumstances, you may have the right to:

• ask for a copy of your personal information;
• correct inaccurate or incomplete information;
• ask us to delete information;
• restrict or object to particular uses;
• receive certain information in a portable format;
• withdraw consent; and
• complain to the Information Commissioner’s Office.

Some rights are subject to legal limits, for example where we must retain a care record or protect another person’s rights. We will explain any restriction when responding. We do not make decisions about care or recruitment solely by automated means that produce legal or similarly significant effects.

Cookies and website choices

Essential cookies help the website operate securely. Optional analytics or marketing technologies should only run in line with the choices made through the cookie banner. You can review or change those choices at any time.

Review cookie choices

Keeping information secure

We use organisational and technical safeguards appropriate to the sensitivity of the information. Access is limited to people who need it for their role, and staff receive confidentiality and data-protection guidance.

Changes to this notice

We review this notice when our services, systems or legal obligations change. The review date at the top of the page shows when this version was last checked.