JS Parker Ltd (JSP) is a UK based organisation offering high quality specialist case management, rehabilitation, expert and training services.
To provide our services and run our business, we collect and manage personal information about individuals and in our capacity as a data controller, we are registered with the Information Commissioners Office. We observe UK data protection legislation, recently updated by the General Data Protection Regulation (GDPR)(EU)2016/679 and are committed to protecting and respecting the privacy rights of all those individuals whose personal information we hold.
If you have any questions, comments or concerns about our use of personal information please contact our Data Protection Lead at email@example.com. Alternatively, you can write to the Data Protection Lead, JS Parker Ltd, 7 South West Centre, Troutbeck Road, Sheffield S7 2QA.
Why do we collect personal information?
We only collect and process personal information for the lawful purposes of:
- service provision and development
- business & finance management – including the appropriate marketing of our services
- employment & employment administration
Our legal bases for processing personal information include:
- meeting the requirements of a contract
- meeting our legal obligations
- an individual has given their explicit consent
Categories of personal information that we may collect and manage
- name, address, email address, telephone number, date of birth
- family and next of kin details/emergency contact details
- records of contact we have had by telephone calls, appointments, visits and meetings etc
- education & training history - mostly frequently of staff, support workers and other professionals not employed by us
- employment records and pension details – most frequently for those that work for us either directly or are providing services on a contractual basis
- financial details
- lifestyle and social circumstances
We may also collect and manage personal information that falls into special categories:
- physical and mental health, disabilities, allergies, treatment and care
- records from others who provide care, such as health professionals, support workers and relatives
- racial and ethnic origin
- sexual life
- religious or similar beliefs
- offences (including alleged offences), criminal proceedings and outcomes
- trade union membership
- employment tribunal applications, complaints, accidents, and incident details
Uses of personal information
- to ensure our services are bespoke, relevant and tailored to our clients’ needs
- to inform recommendations for and management of safe and effective support and care
- to work effectively with others who may be involved in the provision of care
- to review our service to ensure it is of the highest standard possible
- for employment purposes
- to train new staff
- for research and audit purposes
- to prepare statistics used for business development and decision making
- to keep interested parties informed about our company and our news
Our staff have an obligation of confidentiality and are required to protect personal information and ensure it is only used for the purpose for which it was obtained, unless we are required to do so otherwise by law. They are required to undertake annual training in data protection, confidentiality, and system security.
To prevent unauthorised access or disclosure, we operate encrypted electronic systems and organisational and information governance procedures to safeguard and secure the information we collect.
Personal information is not shared with any third party outside JSP, its associates, its agents or other companies with which we have arranged services for the benefit of any individual for whom we hold personal data.
GDPR allows us to request contact information from our staff and those receiving care and share it with NHS Test and Trace to help minimise the transmission of COVID-19 and support public health and safety.
We will use the details you provide on your application form, together with the supporting documents requested and additional details provided by any referees and recorded following any interview process to process your application from application through selection and interview processes and if selected to support and enable your appointment into the vacancy including any manual or electronic communications related to the processes.
We process the personal information provided on your application and the other information referred to above for the purposes of identifying you, processing your application, verifying the information provided and assessing your suitability for the role (including any relevant criminal convictions via DBS & POVA (Scotland), your Right to Work status and any pre-employment medical checks), deciding whether to offer you a job, communicating that outcome (together with any feedback) and transferring if you are successful your applicant data into your employee records to enable appointment.
We consider the processing of your personal information for the above purposes to be either necessary for us to take steps with a view to creating a contractual relationship with you (e.g. to assess your application for employment with us), or necessary for compliance with a legal obligation (e.g. equal opportunities monitoring), or necessary for the performance of tasks we carry out in the public interest (e.g. non-statutory reporting or research). We require you to provide us with the information we ask for during the application process in order to assess your application properly except where its supply is marked as optional. Application decisions are not automated.
If your application is successful, your information will be kept as part of your personnel record for the duration of your employment. If you are unsuccessful, your information will be normally kept for six months after completion of the application process before being destroyed.
Our website – www.casemanagement.co.uk
We are committed to safeguarding and preserving the privacy of all visitors to our website. When visiting our website, we may request your personal information such as your email address. We will always make it clear when we are requesting your information and explain what we will use it for.
We do not collect any personal information from our website without your consent.
News and articles
We often publish news and stories of our clients’ journeys and achievements and those of their support workers and our staff. We always obtain explicit consent from all parties involved in any article before publishing – however when necessary we may change names and use stock imagery to accompany an article in order to protect our client’s identity and that of their family, support workers and others.
We would like to stay in touch with all interested parties to share our company news. On our website there is the facility for individuals to sign up to our electronic newsletter which is sent by us from time to time. The only information we collect for this purpose is an email address, which is used exclusively by us for this purpose.
We do not collect any personal information about you using cookies.
Information on deleting or controlling cookies is available at www.AboutCookies.org
Please note that deleting or declining cookies may prevent you from taking full advantage of our website.
You can prevent your data from being collected and used by Google Analytics by downloading the Google Analytics opt-out Browser add-on: https://tools.google.com/dlpage/gaoptout
Links to other websites:
Individual rights under GDPR
Under data protection legislation, individuals have the right to:
Be informed – the right to be informed about ways in which we collect and manage their personal data.
Access – the right to ask for a copy of the personal information we hold about them. This is known as a subject access request. We will always aim to comply with these requests within 30 days. Depending on the information required and the circumstances of the request, we may decide to charge a reasonable fee for providing such information. We may also consider special rules relating to the type and amount of information to be provided.
Rectification - the right to have any incorrect personal information we hold about them corrected.
Be forgotten - the right to ask that we erase all personal information that we hold about them.
Restrict processing - the right to restrict our processing of their personal information.
Data portability - the right to move, copy or transfer electronic personal information that we hold about them.
For more information about individuals’ rights under data protection legislation, please visit www.ico.gov.uk. To exercise any of your individual privacy rights, please contact our data protection lead at firstname.lastname@example.org or write to us using the contact details at the beginning of this document.
For details on how to make a complaint to us, our complaints procedure is available on our website (how to make a complaint). If you remain dissatisfied following your complaint, you may wish to contact the Information Commissioner, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF (www.ico.gov.uk)
If you have any questions or concerns or complaints regarding our use of personal information, please contact our data protection lead on email@example.com or write to us using the details at the top of this privacy notice.
Review of this policy
Reviewed July 2018. This policy will be reviewed annually or more frequently as needed.
NHS Test and Trace
Recording people’s details: how we use your information
To support NHS Test and Trace (which is part of the Department for Health and Social Care) in England, we are collecting and keeping a limited record of staff and visitors who come onto our premises for the purpose of contact tracing.
By maintaining records of staffs and visitors and sharing these with NHS Test and Trace where requested, we can help to identify people who may have been exposed to the coronavirus.
As a member of staff/visitor of JS Parker Ltd you will be asked to provide some basic information and contact details. The following information will be collected:
- The names of all staff or visitors, or if it is a group of people, the name of one member of the group
- A contact phone number for each visitor, or for the lead member of a group of people
- Date of visit and arrival time and departure time
JS Parker Ltd, as the data controllers for the collection of your personal data, will be responsible for compliance with data protection legislation for the period of time it holds the information. When that information is requested by the NHS Test and Trace service, the service would at this point be responsible for compliance with data protection legislation for that period of time.
The NHS Test and Trace service as part of safeguarding your personal data, has in place technical, organisational and administrative security measures to protect your personal information that it receives from the venue/establishment, that it holds from loss, misuse, and unauthorised access, disclosure, alteration and destruction.
In addition, if you only interact with one member of staff during your visit, the name of the assigned staff member will be recorded alongside your information.
NHS Test and Trace have asked us to retain this information for 21 days from the date of your visit, to enable contact tracing to be carried out by NHS Test and Trace during that period. We will only share information with NHS Test and Trace if it is specifically requested by them.
For example, if another visitor at the venue reported symptoms and subsequently tested positive, NHS Test and Trace can request the log of people’s details for a particular time period (for example, this may be all staff and visitors who visited on a particular day or time-band, or over a 2-day period).
We will require you to complete a form on arrival or use the QR code available in all our sites.
Under government guidance, the information we collect may include information which we would not ordinarily collect from you and which we therefore collect only for the purpose of contact tracing. Information of this type will not be used for other purposes, and NHS Test and Trace will not disclose this information to any third party unless required to do so by law (for example, as a result of receiving a court order). In addition, where the information is only collected for the purpose of contact tracing, it will be destroyed by us 21 days after the date of your visit.
However, the government guidance may also cover information that we would usually collect and hold onto as part of our ordinary dealings with you (perhaps, for example, your name, date of birth and phone number). Where this is the case, this information only will continue to be held after 21 days and we will use it as we usually would, unless and until you tell us not to.
Your information will always be stored and used in compliance with the relevant data protection legislation.
The use of your information is covered by the General Data Protection Regulations Article 6 (1) (c) – a legal obligation to which we are subject to. The legal obligation to which we’re subject, means that we’re mandated by law, by a set of new regulations from the government, to co-operate with the NHS Test and Trace service, in order to help maintain a safe operating environment and to help fight any local outbreak of corona virus.
By law, you have a number of rights as a data subject, such as the right to be informed, the right to access information held about you and the right to rectification of any inaccurate data that we hold about you.
You have the right to request that we erase personal data about you that we hold (although this is not an absolute right).
You have the right to request that we restrict processing of personal data about you that we hold in certain circumstances.
You have the right to object to processing of personal data about you on grounds relating to your particular situation (also again this right is not absolute).
If you are unhappy or wish to complain about how your information is used, you should contact a member of staff in the first instance to resolve your issue.
If you are still not satisfied, you can complain to the Information Commissioner’s Office. Their website address is www.ico.org.uk.
Our Data Protection Lead is Lucy Naven: firstname.lastname@example.org
Our Data Protection Officer is Nicola Petts: Nicola.Petts@activecaregroup.co.uk
We keep our privacy notice under regular review, and we will make new versions available on our privacy notice page on www.casemanagement.co.uk .
This NHS test and trace appendix was last updated on 21 September 2020.