Menu
Privacy Policy
Altogether Care Privacy Notice
How we use and protect your information
At Altogether Care, we want you to be confident that your information is kept safe and secure with us and understand how we use it to provide great care and a more personalised experience.
This privacy policy explains how we use any personal information we collect about you when you enquire about or use our services, visit this website or apply to work for us.
What information do we collect about you?
We may collect the following information from you and other sources:
When you enquire about our services, we may collect:
- Personal data that you provide such as your name, age and contact details when you contact us through our website, by phone, email, post, face to face or social media.
- Information collected from our website such as IP addresses and browsing behaviour (please see our cookie section).
- The IP address your router transmits to our web servers.
- Your browser user agent, including browser type, device type and operating system.
- Basic recruitment information such as your education, qualifications, identification documents and right to work confirmations if you are applying for a position with us.
If you do not provide us with information, we may not be able to respond to your enquiry or provide appropriate care information.
When you use our services, we may collect:
- Your name, date of birth, address and contact details
- Next of kin and GP practice details
- Account login details
- Information about your health, wellbeing, treatment and care
- Information about your needs, preferences and personal circumstances
- Information from compliments, complaints and incidents
- Feedback and survey responses
- Payment information (handled securely by third-party providers)
Some of this information is sensitive (special category data), including health and care information.
Information from other sources
We work closely with third parties such as health and care partners and subcontractors providing NHS or local authority services. We may receive information from them such as referrals, reports and test results.
GP Connect
To support your direct care, we may also access relevant information from your GP record using GP Connect. This is a secure NHS service that allows authorised health and social care professionals to view important clinical information held by your GP practice where it is necessary to support your care.
GP Connect is used only for direct care purposes and is not used for administrative, research or marketing purposes.
Access is role-based, limited and restricted to trained staff who have a legitimate relationship with you and need the information to support your care. Not all staff can view the same information.
How we use the information about you
We use your personal data to:
- Manage your account and care arrangements
- Provide care and support services
- Communicate with you and professionals involved in your care
- Maintain accurate care records and care plans
- Respond to enquiries, concerns or complaints
- Process payments and manage contracts
- Monitor and improve our services
To ensure you receive the best possible care, your health record may include sensitive information such as details of appointments, conditions, treatments and outcomes. This may be shared with professionals who have a legal and legitimate need to support your care.
GP Connect use
Where GP Connect is used:
- Information is accessed securely in real time via NHS systems
- We do not download or hold a full copy of your GP record
- Relevant information may be included in your care record where necessary to support your care
GP Connect improves safety by allowing staff to access accurate, up to date clinical information when needed.
Legal basis for processing
We process your personal data under the following lawful bases:
- To perform a contract with you
- To comply with legal obligations
- For our legitimate interests in delivering safe and effective care
- To protect vital interests where necessary
For health and care information (special category data), we process this for the provision of health and social care in line with UK data protection law.
Your GP practice remains the data controller for your GP medical record. Altogether Care is the data controller for the care records we create as part of the services we provide.
UK data protection law requires organisations to identify both a lawful basis and a condition for processing sensitive data such as health information.
Sharing your information
We may share your information with:
- GP practices and NHS services
- Hospitals and community teams
- Local authorities and commissioners
- Other care providers
- Safeguarding teams and regulators (including CQC)
- Emergency services
Information is only shared where necessary, lawful and proportionate.
Your choices and rights
You have rights under data protection law, including the right to:
- Access your information
- Request corrections
- Object to certain uses
- Request restriction of processing
GP Connect – your choice
You have the right to object to your GP information being shared via GP Connect.
If you wish to do this, you should contact your GP practice directly. Your GP practice manages your GP record and any opt-out request.
How we store and protect your data
The confidentiality and security of your information is extremely important to us.
We protect your information through:
- Secure IT systems
- Controlled access for staff
- Staff training and confidentiality agreements
- Data protection and information governance policies
- Monitoring and auditing of system access
GP Connect security
All access to GP records via GP Connect is:
- Logged
- Monitored
- Regularly audited
This ensures access is appropriate and meets NHS information governance standards.
Cookies and website use
We use cookies and similar technologies to improve your experience and ensure our website functions effectively.
More information is available in our cookie policy.
Contact and further information
If you have any questions about this privacy notice or how your data is used, please contact:
Mr. Steve Knell, Chief Executive Officer
e: SteveK@altogethercare.co.uk
t: 01305 300161
e: SteveK@altogethercare.co.uk
t: 01305 300161
Changes to this notice
We review this privacy notice regularly and update it where necessary.
