What data do we have?

So that we can provide a safe and professional service, we need to keep certain records about you. We may process the following types of data:

• Your basic details and contact information e.g. your name, address, date of birth and next of kin;

We also record the following data which is classified as “special category”:

• Health and social care data about you, which might include both your physical and mental health data.
• We may also record data about your race, ethnic origin, sexual orientation or religion.

Why do we have this data?

We need this data so that we can provide high-quality care and support. By law, we need to have a lawful basis for processing your personal data.

We process your data because:

• We have a legal obligation to do so

We process your special category data because

• It is necessary due to social security and social protection law (generally this would be in safeguarding instances);
• It is necessary for us to provide and manage our services;

We may also process your data with your consent.  If we need to ask for your permission, we will offer you a clear choice and ask that you confirm to us that you consent.  We will also explain clearly to you what we need the data for and how you can withdraw your consent at any time. 

Where do we process your data?

So that we can provide you with high quality care and support we need specific data. This is collected from or shared with:

1. You or your legal representative(s);
2. Third parties.

We do this face to face, via phone, via email, via our website, via post, via application forms and via apps.

Third parties are organisations we might lawfully share your data with. These include:

• Parts of the health and care system such as local hospitals, the GP, the pharmacy, social workers, clinical commissioning groups, and other health and care professionals;
• Schools and other educational establishments;
• The Local Authority;
• Your family or friends – with your permission;
• Organisations we have a legal obligation to share information with;
• The police or other law enforcement agencies if we have to by law or court order;
• Our funders (always anonymised unless specific consent received)

What data do we have?

So that we can provide a safe and professional service, we need to keep certain records about you. We may record the following types of data:

• Your basic details and contact information e.g. your name, address, date of birth, National Insurance number and next of kin;
• Your financial details e.g. details so that we can pay you, insurance, pension and tax details;
• Your training records.

We also record the following data which is classified as “special category”:

• Health and social care data about you, which might include both your physical and mental health data – we will only collect this if it is necessary for us to know as your employer, e.g. fit notes or in order for you to claim statutory maternity/paternity pay;
• We may also, with your permission, record data about your race, ethnic origin, sexual orientation or religion.

As part of your application you may – depending on your job role – be required to undergo a Disclosure and Barring Service (DBS) check (Criminal Record Check).  A copy of the DBS check result (if carried out by SELFA) or the DBS Certificate is retained on your staff file and may be shared with partner organisations.

Why do we have this data?

We require this data so that we can contact you, pay you and make sure you receive the training and support you need to perform your job. By law, we need to have a lawful basis for processing your personal data.

We process your data:

• We have a legal obligation under UK employment, social security or protection law;
• We have a legitimate interest in processing your data

We process your special category data because

• It is necessary for us to process requests for sick pay or maternity pay.

If we request your criminal records data it is because we have a legal obligation to do this due to the type of work you do. This is set out in the Data Protection Act 2018 and the Rehabilitation of Offenders Act 1974 (Exceptions) Order 1975.

We may also process your data with your consent. If we need to ask for your permission, we will offer you a clear choice and ask that you confirm to us that you consent. We will also explain clearly to you what we need the data for and how you can withdraw your consent. 

Where do we process your data?

Data is collected from or shared with:

1. You or your legal representative(s);
2. Third parties.

We do this face to face, via phone, via email, via our website, via post, via application forms and via apps.

Third parties are organisations we have a legal reason to share your data with. These include:

• Her Majesty’s Revenue and Customs (HMRC);
• Our pension schemes (NEST Pensions);
• Organisations we have a legal obligation to share information with e.g. for safeguarding;
• The police or other law enforcement agencies if we have to by law or court order.
• Partner organisations (e.g. other service providers working with SELFA, schools where providing services on their premises.

What data do we have?

As part of our work providing high-quality care and support, it might be necessary that we hold the following information on you:

• Your basic details and contact information e.g. your name, address and phone number.

Why do we have this data?

By law, we need to have a lawful basis for processing your personal data.

We process your data because we have a legitimate business interest in holding next of kin information about the individuals who use our service and keeping emergency contact details for our staff.

We may also process your data with your consent. If we need to ask for your permission, we will offer you a clear choice and ask that you confirm to us that you consent. We will also explain clearly to you what we need the data for and how you can withdraw your consent. 

Where do we process your data?

So that we can provide high quality care and support we need specific data. This is collected from or shared with:

1. You or your legal representative(s);
2. Third parties

We do this face to face, via phone, via email, via our website, via post, via application forms and via apps.

Third parties are organisations we have a legal reason to share your data with. These may include:

• Other parts of the health and care system such as local hospitals, the GP, the pharmacy, social workers, and other health and care professionals;
• Schools and other educational establishments;
• The Local Authority;
• The police or other law enforcement agencies if we have to by law or court order.

In order to provide you with the best experience while using our website, we process some data about you.

Types of Data Collected

Personal Data

While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you (“Personal Data”).  Personally identifiable information may include, but is not limited to:

• Email address
• First name and last name
• Phone number
• Address, State, Province, ZIP/Postal code, City
• Cookies and Usage Data

Usage Data

We may also collect information how the Service is accessed and used (“Usage Data”).  This Usage Data may include information such as your computer’s Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

Tracking Cookies Data

We use cookies and similar tracking technologies to track the activity on our Service and hold certain information.

Cookies are files with small amount of data which may include an anonymous unique identifier.  Cookies are sent to your browser from a website and stored on your device.  Tracking technologies also used are beacons, tags, and scripts to collect and track information and to improve and analyse our Service.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.  However, if you do not accept cookies, you may not be able to use some portions of our Service.

Examples of Cookies we use:

• Session Cookies. We use Session Cookies to operate our Service.
• Preference Cookies. We use Preference Cookies to remember your preferences and various settings.
• Security Cookies. We use Security Cookies for security purposes.

Use of data

SELFA uses the collected data for various purposes:

• To provide and maintain our Service

Transfer of Data

Your information, including Personal Data, may be transferred to — and maintained on — computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction.

If you are located outside United Kingdom and choose to provide information to us, please note that we transfer the data, including Personal Data, to United Kingdom and process it there.

Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

SELFA will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of your data and other personal information.

Disclosure of Data

SELFA may disclose your Personal Data in the good faith belief that such action is necessary to:

• To comply with a legal obligation
• To protect and defend the rights or property of SELFA
• To prevent or investigate possible wrongdoing in connection with the Service
• To protect the personal safety of users of the Service or the public
• To protect against legal liability

Security of Data

The security of your data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure.  While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

Service Providers

We may employ third party companies and individuals to facilitate our Service (“Service Providers”), to provide the Service on our behalf, to perform Service-related services or to assist us in analysing how our Service is used.

These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

Analytics

We may use third-party Service Providers to monitor and analyse the use of our Service.

Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Service. This data is shared with other Google services. Google may use the collected data to contextualize and personalize the ads of its own advertising network.

You can opt-out of having made your activity on the Service available to Google Analytics by installing the Google Analytics opt-out browser add-on.  The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js, and dc.js) from sharing information with Google Analytics about visits activity.

For more information on the privacy practices of Google, please visit the Google Privacy Terms web page: http://www.google.com/intl/en/policies/privacy/.

Links to Other Sites

Our Service may contain links to other sites that are not operated by us.  If you click on a third party link, you will be directed to that third party’s site.  We strongly advise you to review the Privacy Policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

Children’s Privacy

We do not knowingly collect personally identifiable information from anyone under the age of 13.  If you are a parent or guardian and you are aware that your children have provided us with Personal Data, please contact us.  If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.

SELFA (“us”, “we”, or “our”) uses cookies on the www.selfa.org.uk website (the “Service”). By using the Service, you consent to the use of cookies.

Our Cookies Policy explains what cookies are, how we use cookies, how third-parties we may partner with may use cookies on the Service, your choices regarding cookies and further information about cookies.

What are cookies

Cookies are small pieces of text sent to your web browser by a website you visit. A cookie file is stored in your web browser and allows the Service or a third-party to recognize you and make your next visit easier and the Service more useful to you.

Cookies can be “persistent” or “session” cookies. Persistent cookies remain on your personal computer or mobile device when you go offline, while session cookies are deleted as soon as you close your web browser.

How SELFA uses cookies

When you use and access the Service, we may place a number of cookies files in your web browser.

We use cookies for the following purposes:

• To enable certain functions of the Service
• To provide analytics

We use both session and persistent cookies on the Service and we use different types of cookies to run the Service:

• Essential cookies. We may use essential cookies to authenticate users and prevent fraudulent use of user accounts.
• Analytics cookies. We may use analytics cookies to track information how the Service is used so that we can make improvements. We may also use analytics cookies to test new advertisements, pages, features or new functionality of the Service to see how our users react to them.

Third-party cookies

In addition to our own cookies, we may also use various third-parties cookies to report usage statistics of the Service, deliver advertisements on and through the Service, and so on.

What are your choices regarding cookies

If you’d like to delete cookies or instruct your web browser to delete or refuse cookies, please visit the help pages of your web browser.

Please note, however, that if you delete cookies or refuse to accept them, you might not be able to use all of the features we offer, you may not be able to store your preferences, and some of our pages might not display properly.

The data that we keep about you is your data and we ensure that we keep it confidential and that it is used appropriately. You have the following rights when it comes to your data:

1. You have the right to request a copy of all of the data we keep about you. Generally, we will not charge for this service;
2. You have the right to ask us to correct any data we have which you believe to be inaccurate or incomplete. You can also request that we restrict all processing of your data while we consider your rectification request;
3. You have the right to ask that we erase any of your personal data which is no longer necessary for the purpose we originally collected it for. We retain our data in line with our Retention Schedule, a copy of which is available on request.
4. You may also request that we restrict processing if we no longer require your personal data for the purpose we originally collected it for, but you do not wish for it to be erased.
5. You can ask for your data to be erased if we have asked for your consent to process your data. You can withdraw consent at any time – please contact us to do so.
6. If we are processing your data as part of our legitimate interests as an organisation or in order to complete a task in the public interest, you have the right to object to that processing. We will restrict all processing of this data while we look into your objection.

You may need to provide adequate information for our staff to be able to identify you, for example, a passport or driver’s licence. This is to make sure that data is not shared with the wrong person inappropriately. We will always respond to your request as soon as possible and at the latest within one month.

If you would like to complain about how we have dealt with your request, please contact:

            Information Commissioner’s Office

            Wycliffe House

            Water Lane

            Wilmslow

            Cheshire

            SK9 5AF

https://ico.org.uk/global/contact-us/