What is a privacy notice?
A Privacy Notice is a statement by TrustBridge to clients, families, carers, the public, and staff that describes how we collect, use, retain, and disclose personal information. This notice may also be referred to as a Privacy Statement, Fair Processing Statement, or Privacy Policy. It is part of our commitment to ensure that we process your personal information/data fairly and lawfully.
Why issue a privacy notice?
TrustBridge recognizes the importance of protecting personal and confidential information in all that we do and takes care to meet our legal and regulatory duties. This notice is one of the ways we demonstrate our commitment to your values and our dedication to transparency and openness.
It also explains your rights regarding the control of your information.
Why and how we collect information
We may request or hold personal confidential information about you, which will be used to support the delivery of high-quality, safe, and appropriate care.
What are we governed by?
The key pieces of legislation/guidance we are governed by are:
- Date Protection Act 1998
- Human Rights Act 1998 (Article 8)
- Health and Social Care Act 2012, 2015
- Copyright Design and Patents Act 1988
- Computer Misuse Act 1990
- The Common Law Duty of Confidentiality
- Records Management—Code of Practice for Health and Social Care 2016
- Accessible Information Standards
- General Data Protection Regulations (GDPR)
These records may include:
- Basic details such as your name, address, date of birth, and next of kin.
- Contact we have had with you, including reviews and care assessments.
- Details of your care, including medical and life history, gathered from healthcare professionals and relatives.
Additionally, it may contain sensitive personal information such as your sexuality, race, religion or beliefs, and whether you have a disability, allergies, or health conditions. Having a complete picture is essential for us to provide care that meets your needs. Information is collected through various channels, including healthcare professionals, or directly from you.
How we use information
- To help us make informed decisions about your care.
- To ensure that your care is safe and effective.
- To work effectively with other organizations who may be involved in your care
- To review care provided to ensure it is of the highest standard possible
- For quality checks and audits
- To demonstrate compliance to our regulator
How is information retained and kept safe?
Information is retained in secure electronic and paper records, with access restricted to only those who need to know. Ensuring that your information is kept safe and secure is crucial to protecting your confidentiality.
We safeguard your privacy through various means, including restricting access, adhering to strict policies and procedures, following stringent contractual conditions, and ensuring robust sharing or processing agreements are in place.
We will retain your information for seven years after the end of your care package. The Data Protection Act 1998 regulates the processing of personal information, governed by strict principles to ensure that your information is kept safe and secure. Each TrustBridge office is registered with the Information Commissioners Office (ICO).
Our technology allows us to protect information primarily by restricting access. Our guiding principle is to hold your information in strict confidence.
Sharing your information
To provide the best care possible, there are times when we need to share information about you with others. We may share your information with various Health and Social Care organizations and regulatory bodies. These organizations may contact you for specific reasons, and they are obligated to inform you of the purpose of their contact. Information sharing is governed by specific rules and laws to ensure your privacy and confidentiality are maintained.
Your right to withdraw consent for us to share your personal information
You have the right to refuse or withdraw consent to information sharing at any time. We will fully explain the potential consequences, which may include our inability to provide care for you. For more information, you can contact the Data Controller or Data Protection Officer. If you wish to make a complaint, you also have the right to contact the Information Commissioner’s Office (ICO).