1. Purpose of our Privacy Statement
1.1 Under the Data Protection Act 2018 and General Data Protection Regulation, we are required to explain why we are asking for this information about you, how we intend to use the information you provide and whether we will share this with anyone else.
2. Who are we?
2.1 We are Sanctuary Care Limited and its wholly owned subsidiaries, part of Sanctuary Group (“Sanctuary”) which is one of the UK’s leading providers of housing, care and commercial services. Our address is Chamber Court, Castle Street, Worcester, Worcestershire, WR1 3ZQ.
3. Our Data Protection Officer
3.1 Our Data Protection Officer is responsible for overseeing what we do with your information and monitoring our compliance with data protection laws.
3.2 If you have any concerns or questions about our use of your personal data, you can contact our Data Protection Officer by writing to The Data Protection Officer, Sanctuary House, Chamber Court, Castle Street, Worcester, Worcestershire, WR1 3ZQ or emailing dataprotection@sanctuary.co.uk.
4. Why are we collecting your information?
4.1 The information that you provide to us is used to monitor Health and Safety.
5. What information are we collecting?
5.1 The information which we are collecting about you includes your Name, Profession (if applicable) contact details and signature as recorded on the visitors form.
5.2 Some of the information we collect will include personal data. We may also collect special categories of personal data (also called ‘sensitive personal data’), which includes information about your health.
6. What we are going to do with your information?
6.1 The information you provide to us will be used for the following purposes:
- It will be stored and used by us in accordance with this privacy statement and also in accordance with your rights under the Data Protection Act 2018 and General Data Protection Regulation;
- It will be used to ensure that the Health and Safety at Work Act 1974 is upheld to enable all personnel on site to be accounted for, including visitors and contractors, for safety and security reasons.
6.2 Some of the information which we collect may be special categories of personal data (‘sensitive personal data’), such as information about any disability you may have. By providing us with this information, you consent to our use of this information for this purpose.
7. What is the legal basis for using your information?
7.1 In accordance with data protection laws, we need a ‘legal basis’ for collecting and using information about you. There are a variety of different legal basis for processing personal data which are set out in the data protection laws.
7.2 The lawful basis on which we rely in order to use the information, including the special categories of personal information, your ‘sensitive data’ collected about you for the purposes set out in this notice will be:
7.2.1 That you have provided your explicit consent to our use of your information.
8. Sharing your information
Members of Sanctuary Group
8.1 Sanctuary Group is made up of a number of related companies. Your information will only be accessed by other companies in the Group where it is necessary to do so. The obligations which are set out in this notice shall apply to the other members of the Group to the same extent that they apply to us. For more information on which companies make up Sanctuary Group, please go to www.sanctuary.co.uk/about-sanctuary.
Regulators and other legal obligations
8.2 We may also be required to share your information with our regulators who are permitted access to this information by law and with other organisations where we have a legal obligation to share the information with them.
Transferring Your Information Abroad
8.3 We will not transfer the information you provide to us outside of the European Economic Area.
9. Security of your information
9.1 The information that you provide will be stored securely on our systems. Our security measures and procedures reflect the seriousness with which we approach security and the value we attach to your information.
9.2 Only relevant members of staff will have access the information you provide to us.
10. Can we use your information for any other purpose?
10.1 In limited circumstances we may use your information for a purpose other than those set out in this policy. If we intend to do so, we will provide you with information relating to that other purpose before using it for the new purpose.
11. Storing your information and deleting it
11.1 We will store the personal data which you provide to us on the visitor signing in and out sheet for 3 years post visit as detailed in our documentation retention schedule, whereby after this period the documentation will be destroyed securely in accordance with GDPR.
12. Your rights
12.1 In relation to the information which we hold about you, you are entitled to:
- Ask us for access to the information;
- Ask us to rectify the information where it is inaccurate or is incomplete;
- Ask us to erase the information and take steps to ask others who we have shared your information with to also erase it;
- Ask us to limit what we do with your information;
- Object to our use of your information and ask us to stop that use;
- Instruct us to provide you with the information we hold about you in a structured and commonly used format or transmit that information directly to another organisation.
12.2 Our obligations to comply with the above rights are subject to certain exemptions.
12.3 Where we are using your information because you have provided your consent to that use, you are entitled to withdraw your consent at any time. The lawfulness of our use of your information before consent was withdrawn is not affected.
12.4 To exercise any of the rights referred to above, you should contact our Data Protection Officer as per 3.2.
12.5 You also have the right to complain to the Information Commissioner’s Office (the ‘ICO’) if you are not satisfied with the way we use your information. You can contact the ICO by writing to Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
Download a PDF version of our Privacy Statement - Visitors (PDF 144KB)