This notice explains how Adisham House uses personal information about website visitors, people making enquiries, prospective residents and their representatives, relatives, professionals, suppliers and other members of the public. Residents should also read the separate Resident Privacy Notice. Job applicants should read the Recruitment and Job Applicant Privacy Notice.
Adisham House is the data controller for the personal information described in this notice. Adisham House, Pond Hill, Adisham, Near Canterbury, Kent CT3 3LH. Telephone: 01304 840170. Email: adishamhouse@btinternet.com.
The Data Protection Officer is Mr Jamie Bishop (Service Provider). In his absence, contact Mr Leigh Crocker (Registered Manager) using the details above.
Depending on how you contact or interact with us, we may collect:
We usually obtain information directly from you. We may also receive information from a resident or prospective resident, their representative, health or social care professionals, local authorities, commissioners, referrers, suppliers or other organisations where it is lawful and relevant to the purpose for which we are dealing with you.
We process personal information only where we have a lawful basis. Depending on the activity, this may be because processing is necessary to take steps at your request before entering a contract or to perform a contract; to comply with a legal obligation; to protect vital interests; to perform a public-interest task where applicable; because of our legitimate interests; or because you have given consent where consent is the appropriate basis.
Our legitimate interests may include responding to enquiries, arranging visits, managing relationships with families and professionals, operating and securing our website and systems, managing suppliers, handling complaints and legal claims, preventing fraud or misuse, and improving our services. We consider necessity and the impact on your rights before relying on legitimate interests.
A care enquiry may contain health information or other special category data. We only use such information where an additional legal condition applies, for example where necessary for health or social care, safeguarding/substantial public interest, vital interests, or explicit consent where consent is appropriate. If an enquiry progresses to admission, the Resident Privacy Notice explains the more extensive processing involved in providing care.
The Adisham House website provides ways to contact us about our services and vacancies. Information submitted through a form or sent by email is used to respond to and manage the enquiry. Substantive information about a resident, applicant, complaint or other matter should be moved into the appropriate record system rather than kept indefinitely in an email mailbox.
Our website may use cookies or similar technologies. Strictly necessary technologies may be used where required to operate or secure the website. Other cookies or similar technologies will be used only in accordance with applicable rules and, where required, your choice or consent.
Please see the separate Cookie Notice for more information. The actual cookie list and durations must be checked against the live website and consent-management tool whenever the website changes.
We may share information, where necessary and lawful, with staff who need it; health and social care professionals; local authorities, commissioners and safeguarding bodies; professional advisers and insurers; website, hosting, email, IT and other service providers; regulators, courts and public authorities; and other parties where disclosure is required or permitted by law.
We do not sell personal information. Processors acting for us must be subject to appropriate confidentiality, security and data-protection requirements.
We will identify whether any website, email, hosting, cloud or other service provider processes personal information outside the UK. Where a restricted transfer occurs, we will use an appropriate transfer mechanism and safeguards and provide information about those safeguards on request.
We apply the Adisham House Data Retention Schedule. Routine business email is deleted when no longer operationally required, with substantive decisions filed in the appropriate record system. Visitor logs are normally kept for 12 months unless linked to an incident or safeguarding matter. Complaints, recruitment information and other records follow their relevant schedule periods. Website/server and cookie records should be retained only for a justified period appropriate to their purpose and the configuration actually in use.
We use appropriate technical and organisational measures designed to protect personal information against accidental or unlawful loss, alteration, destruction, disclosure or access.
Depending on the circumstances, you may have rights of access, rectification, erasure, restriction, data portability and objection, as well as rights concerning automated decision-making and the right to withdraw consent where consent is relied upon. These rights are not absolute and some apply only in particular circumstances. Contact the Data Protection Officer to exercise a right.
If you are concerned about how we have handled your information, contact the Data Protection Officer. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data-protection supervisory authority.
We review this notice at least annually and when our website, systems, suppliers or processing activities materially change.
