Scope

Kasacare services retains certain information about its employees, customers, suppliers and other users to allow it to monitor performance, achievements, health and safety and to comply with manufacturer warranties. It applies to all data that the company holds relating to identifiable individuals, even if that information falls outside the Data Protection Act 1998.

To be compliant with GDPR, information is collected lawfully and used fairly, stored safely and not disclosed to any other person unlawfully, to do this, the company complies with the Data Protection Principles, which are set out in the Data Protection Act 1998.

Principles

Kasacare services, as far as, reasonably practicable complies with the Data Protection Principles contained in the Data Protection Act to ensure all data is:

• Fairly and lawfully processed
• Processed for a lawful purpose
• Adequate, relevant and not excessive
• Accurate and up to date
• Held for any no longer than is absolutely necessary
• Processed in accordance with the rights of the data subject
• Protected in the appropriate way
• Not transferred to any other countries without adequate protection and consent

Sensitive personal data

Kasacare services ensures there is stronger legal protection for more sensitive information such as:

• Ethnic background
• Political opinions
• Religious beliefs
• Health
• Sexual health
• Gender
• Criminal records

Responsibilities

All staff who work for or with Kasacare services have responsibility for ensuring data is collected, stored and handled in a safe secure and appropriate manner.

Data Protection Officer

Kasacare services has appointed the Registered Manager, Kaiza Kuyava, as the Data Protection Officer who will endeavour to ensure all personal data is processed in compliance with the GDPR and the Data Protection Act 1998.

Why we need to store your personal data

Kasacare services provides health and social care services and staff to the health and social care sector. It is necessary to pass on information about staff to those services, or individuals that employ them. We also need to share certain data with CQC, local authorities and other regulatory bodies as requested. We also hold details about the services and individuals who we supply with staff or services.

Data storage

Data stored electronically must be protected from unauthorised access, accidental deletion and malicious hacking attempts. We are committed to protecting all Personal Data we collect and use. To that end, we take all reasonable precautions to prevent the loss, misuse or alteration of your Personal Data held within our data repositories. Please ensure you access our Websites from a trusted browser/computer. You should ensure your device has sufficient anti-virus or malware protection. Questions about the storage of data can be directed to the Data Governance team.

Data accuracy

Kasacare services takes all reasonable steps to ensure data is kept accurate and up to date. The more important it is that the personal data is accurate, the greater the effort staff must put in to ensure its accuracy.

Right of access

Data subjects have the right of access to information held by Kasacare services, if an individual contacts the company requesting this information, this is called "Subject Access Request".

Subject access request from individuals should be made by email to info@kasacare.co.uk, addressed to the Data Governance team and are each charged at £10+ VAT (the fee must be paid prior to any Subject Access Request being carried out).

The disclosure of data for other reasons

In certain circumstances, the Data Protection Act allows personal data to be disclosed to government and law enforcement agencies without the consent of the data subject.

Providing information

Kasacare services aims to ensure that individuals are aware that their data is being processed. Kasacare services will not give, sell, share or trade any Personal Data to any party outside of Kasacare services except as outlined in this Policy or with appropriate consent. We may disclose or share Personal Data to a third party in the following limited circumstances:

• to comply with the terms of trading, policies or other contractual requirements of Kasacare services 
• where we believe that the disclosure is necessary to establish the threat of and prevent or respond to fraud, defend our Websites or infrastructure against possible attacks or protect the property and safety of Kasacare services, our Customers, Suppliers or the public
• to the extent that we are required to do so by law or in connection with any legal proceedings or prospective legal proceedings
• in connection with any potential sale, transfer, merger, consolidation or other transaction involving all or part of Kasacare services or its holding companies
• where required, provide our suppliers (or their authorised data partners) or service users with information which may contain Personal Data confirming the recipient and delivery address for services.
• to companies that provide services that help us with our business activities including but not limited to processing customer payments, logistics and repairs
• to companies that work with us to provide a product or service necessary to meet a customer's enquiry or requirement

Website data

By visiting our Website, we may collect anonymous information (via cookies) about your computer and your visits to our Websites such as your IP address, geographical location, browser type, referral source, length of visit and number of page views. We may use this information in the administration of our Websites or to improve the website's usability. This information may be recorded by a third party on our behalf.

If you register or create an account directly on any of our Websites or via a third party procurement system (usually in preparation to purchase from us), we may collect and store some basic personal information mainly (but not limited to) your name, address, email, company or institution and telephone number to allow us to fulfil our obligations to you when processing an order.

Marketing to you

We may send you marketing communications relating to our business which we think may be of interest to you (providing you have opted in to receive such information or not opted out or unsubscribed if you have previously had a contractual relationship with us by purchasing a product or service). If you are a business (non-consumer) contact working for a business or institution who we have had a previous contractual history with, or again as a non-consumer contact you have been referred to us by one of our suppliers or vendors following your enquiry to them, we may add your contact information to our business CRM system. We will, however, ask you to opt into receiving marketing communication before sending any marketing information to you.

This policy summarises the main Kasa care services Data Protection policy written in compliance to GDPR and the Data Protection Act 1998 and is reviewed on a regular basis by Senior Management. You should revisit this page occasionally to ensure you are happy with any changes.