Serene Soul Care Data Protection Policy
1. Introduction
Serene Soul Care is committed to protecting the privacy, confidentiality, and security of all personal data we hold. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, ensuring that personal data is used lawfully, fairly, and transparently.
This policy sets out how we collect, use, store, and protect personal data relating to our clients, their families, our staff, and partners.
2. What Data We Collect
- Client information such as names, addresses, contact details, medical history, care plans, next of kin, and health records.
- Staff information such as employment records, payroll details, references, DBS checks, training records, and emergency contacts.
- Business contacts such as supplier information, emails, and communication records.
3. How We Use Data
We only process personal data when it is necessary for:
- Providing safe, effective, and personalised care.
- Meeting our contractual obligations.
- Complying with legal and regulatory requirements.
- Managing staff employment and payroll.
- Communicating with families, professionals, and suppliers.
We will never sell or misuse personal data for marketing or commercial gain.
4. Data Protection Principles
We follow the key principles of UK GDPR:
- Lawfulness, fairness and transparency – data is collected and processed openly.
- Purpose limitation – used only for clear, legitimate purposes.
- Data minimisation – only the data needed is collected.
- Accuracy – kept up to date and correct.
- Storage limitation – retained only for as long as necessary.
- Integrity and confidentiality – kept secure at all times.
5. Data Sharing
We may share data with trusted third parties, but only when necessary and with safeguards in place. Examples include:
- Local authorities, NHS bodies, and regulatory agencies.
- Pharmacies, GPs, or healthcare professionals involved in client care.
- Payroll providers and HR services.
All partners and suppliers must comply with data protection laws.
6. Data Security
- Personal data is stored securely in locked cabinets or encrypted systems.
- Access is restricted to authorised staff only.
- Staff are trained in data protection and confidentiality.
- Electronic communications are protected with passwords and encryption.
7. Rights of Individuals
Under UK GDPR, individuals have the right to:
- Access their personal data..
- Request correction of inaccurate data.
- Request deletion of data (where appropriate).
- Restrict or object to processing.
- Request data transfer to another provider.
Requests will be handled within one month in line with legal requirements.
8. Data Retention
- Client records are kept for a minimum of 7 years after care ends (or longer if required by law).
- Staff records are kept for the duration of employment plus 6 years.
- After retention periods, data is securely destroyed or anonymised.
9. Responsibilities
- Data Protection Officer (DPO): [Insert Name/Role] responsible for overseeing compliance.
- All staff are required to handle personal data responsibly, following this policy and their training.
10. Reporting Concerns
Any data breach or concern must be reported immediately to the DPO. If required, Serene Soul Care will notify the Information Commissioner’s Office (ICO) and affected individuals within the legal timeframe.
Need Care Support?
Book a free consultation with Serene Soul Care to discuss your family’s care needs.
About Serene Soul Care
Serene Soul Care provides compassionate, person-centred home care services across the UK, helping individuals live independently and comfortably in their own homes. Our trained carers offer tailored support, including personal care, companionship, and specialist care, ensuring dignity, wellbeing, and peace of mind for both clients and their families.
