The General Data Protection Regulation (GDPR) is European Union (EU) legislation that became directly applicable in EU Member States (e.g., the UK) on 25 May 2018. It is a regulation by which the European Parliament, the Council of the EU and the European Commission intend to strengthen and unify data protection for all individuals within the EU.
The GDPR is designed to replace the existing Data Protection Act 1998 and allow individuals to better control their personal data, as well as enable organisations to think harder about the privacy and controls they have on the data they hold and process about individuals. These modernised and unified rules will allow businesses to make the most of the opportunities and benefit from reinforced consumer trust.
Welcome to the DMP Healthcare LTD privacy notice.
DMP Healthcare LTD respects your privacy and is committed to protecting your personal data. This privacy notice will inform you how we look after your personal data if you are a visitor to this website; and, if you are a resident, or a prospective resident, of one of our homes.
This notice is to inform you about your privacy rights and how the law protects you.
This privacy notice aims to give you information on how DMP Healthcare LTD collects and processes your personal data, including any data you may provide:
when contacting us in relation to our care home services;
if you are a resident; and/or as a user of this website.
This website is not intended for children and we do not knowingly collect data relating to children.
It is important that you read this privacy notice so that you are fully aware of how and why we are using your data.
DMP Healthcare LTD ("we", "us" or "our") is the controller and responsible for your personal data.
DMP Healthcare Limited, a company registered in England and Wales under company number 10860386 and with our registered office at 14 Lyon Road, Congress House, Harrow, Middlesex, United Kingdom, HA1 2EN.
Who is or Data Protection Champion – Heer Shah firstname.lastname@example.org
This version was last updated on 20th December 2020 and a copy can be obtained by contacting us.
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.
When you leave our website, we encourage you to read the privacy notice of every website you visit.
Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
If you contact us using the details on our website, or via our contact us form, we will use the contact information you provide to respond accordingly to your query, and for any subsequent correspondence. We do not collect any other data that identifies visitors to our website.
We may collect, use and share Aggregated Data such as statistical or demographic data for research purposes. Aggregated Data may be derived from your personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity; for example, we may use this data to calculate the percentage of users accessing a specific website feature.
If we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy notice.
We may collect, use, store and transfer different kinds of personal data about you and your family members or representatives, which we have grouped together follows:
Where we need to collect personal data by law, or under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with care home services).
In this case, we may have to cancel our service but we will notify you if this is the case at the time.
We collect personal information from you of your contact with us, including by phone (we may record or monitor phone calls to make sure we are keeping to legal rules, codes of practice and internal policies, and for quality assurance purposes), by email, through our websites, by post, by filling in forms, through social media or face-to-face (for example, in medical consultations, diagnosis and treatment).
We also collect information from other people and organisations. For all our residents, we may collect information from:
We will only use your personal data when the law allows us to; we will use your personal data in the following circumstances:
Legitimate interest is one of the legal reasons why we may process your personal information. Taking into account your interests, rights and freedoms, legitimate interests which allow us to process your personal information include:
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.
If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.
Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
We share your information within DMP Healthcare, with funders arranging services on your behalf, with people acting on your behalf (for example, your next of kin) and with others who help us provide services to you (for example, health-care providers and medical-assistance providers) or who we need information from to allow us to handle or confirm claims or entitlements (for example, professional associations). We also share your information in line with the law. For more information about who we share your information with, please see below.
We sometimes need to share your information with other people or organisations for the purposes set out in this privacy notice.
We may transfer personal outside of the European Economic Area (EEA). Where we transfer personal data outside of the EEA it is only with appropriate safeguards in place, to ensure your personal information is treated by those third parties in a way that is consistent with and which respects the EU and UK laws on data protection.
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
Details of retention periods for different aspects of your personal data are set out below:
Type of data
Length of time
Website queries and corresponding contact details
Date of birth
Special categories of data; nationality, sex, ethnicity, religion, marital status, sexuality
GP contact details
Photograph for care and medication files
Next of kin contact details
Lasting Power of Attorney details
Care plan and associated documents
Financial contact details
Fee invoices and financial records
Credit card details
Deprivation of Liberty documentation
Duty of Candour records
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your working relationship with us.
Under certain circumstances, you have the right to:
If you would like to make a request with regard to any of your data subject rights, please contact: 14 Lyon Road, Congress House, Harrow, Middlesex, United Kingdom, HA1 2EN or Email: email@example.com