My Life – My Choice Ltd.
Privacy Notice
1. Identify the Data Controller
State clearly: Andrea Brighouse – Managing Director
My Life – My Choice Ltd. is the Data Controller responsible for the personal information we collect and process.
Include the registered address, telephone number and general contact email, not just individual staff emails.
2. Explain What Information Is Collected
List the categories of information you process, for example:
- · Personal details (name, address, date of birth, contact details)
- · Care and support records
- · Health information
- · Safeguarding information
- · Employment information
- · Financial information
- · Emergency contact details
- · Professional and agency communications
3. Explain Why Information Is Collected
Rather than saying you'll tell people later, explain the purposes:
- · Delivering care and support services
- · Safeguarding children and adults
- · Managing medication and healthcare needs
- · Recruitment and employment administration
- · Regulatory compliance
- · Financial administration and invoicing
- · Quality assurance and service improvement
4. Include Lawful Bases
Specify the UK GDPR lawful bases you rely upon, such as:
- · Performance of a contract
- · Compliance with a legal obligation
- · Vital interests
- · Legitimate interests
- · Explicit consent where required
- · Provision of health and social care
5. Add Information Sharing
Include who information may be shared with:
- · Local authorities
- · NHS services
- · Regulatory bodies such as CQC and Ofsted
- · Safeguarding authorities
- · Payroll providers
- · Professional advisers
- · Law enforcement agencies where legally required
6. Strengthen Individual Rights Section
List all rights clearly:
- · Right to be informed
- · Right of access
- · Right to rectification
- · Right to erasure (where applicable)
- · Right to restrict processing
- · Right to data portability
- · Right to object
- · Rights relating to automated decision-making
7. Include Security Statement
- We take appropriate technical and organisational measures to protect personal information against unauthorised access, loss, alteration or disclosure.
8. Clarify Retention Periods
- How Long We Keep Information
- Record Type Retention Period
- Children's records 75 years
- Adult care records 8 years after care and support ends
- Employee records 6 years after employment ends
- Financial records 7 years
- Unsuccessful
- referrals/applicants Deleted immediately following the decision not to proceed
9. ICO Details
Provide full information:
If you are unhappy with how we have handled your personal information, you have the right to complain to the Information Commissioner's Office (ICO).
Website: www.ico.org.uk
Telephone: 0303 123 1113