Introduction

This is Rapid Response Secure Care’s Privacy Notice. As part of the services we offer, we process personal data about our staff, service users, and, in some instances, their friends or relatives. Processing can mean collecting, recording, organising, storing, sharing, or destroying data. We are committed to being transparent about why we need your personal data and what we do with it. This privacy notice also explains your rights regarding your data. If you have any concerns or questions, please contact us at info@rrsambulance.co.uk.

Service Users

What data do we have?
To provide a safe and professional service, we need to keep certain records about you, including:

• Your basic details and contact information (e.g., name, address, date of birth, next of kin)
• Your financial details (e.g., payment or funding arrangements)

We also record special category data, including:

• Health and social care data (e.g., physical and mental health information)
• Data about race, ethnic origin, sexual orientation, or religion (if recorded)

Why do we have this data? We need this data to provide high-quality care and support. By law, we must have a lawful basis for processing your personal data, including:

• Legal obligations under the Health and Social Care Act 2012 or Mental Capacity Act 2005
• Social security and social protection law
• Public interest obligations (e.g., CQC requirements)

Common law duty of confidentiality We satisfy the common law duty of confidentiality because:

• You have provided consent
• We have a legal requirement to collect, share, and use the data
• The public interest in sharing the data overrides the duty of confidentiality (e.g., with law enforcement)

Where do we process your data? We collect data from or share it with:

• You or your legal representative(s)
• Third parties (e.g., local hospitals, GP, pharmacy, social workers, clinical commissioning groups, Local Authority, CQC, law enforcement agencies)

National Data Opt-Out We review our data processing annually to assess if the national data opt-out applies. Currently, we do not share any data for planning or research purposes for which the national data opt-out would apply. Staff What data do we have? We need to keep certain records about you, including:

• Basic details and contact information (e.g., name, address, date of birth, National Insurance number, next of kin)
• Financial details (e.g., payment, insurance, pension, tax details)
• Training records

We also record special category data, including:

• Health and social care data (if necessary for employment, e.g., fit notes, maternity/paternity pay claims)
• Data about race, ethnic origin, sexual orientation, or religion (with permission)

Why do we have this data? We need this data to contact you, pay you, and ensure you receive the training and support required to perform your job. Legal bases for processing include:

• Legal obligations under UK employment law
• Legitimate interests (e.g., training data for Skills for Care’s Adult Workforce Data Set)
• Public interest obligations (e.g., CQC requirements)

Where do we process your data? We collect data from or share it with:

• You or your legal representative(s)

• Third parties (e.g., HMRC, pension and healthcare schemes, external payroll provider, CQC, law enforcement agencies, DBS Service)

Friends/Relatives  What data do we have? We may hold the following information about you:

• Basic details and contact information (e.g., name, address)

Why do we have this data? We process your data based on legitimate business interests, such as holding next of kin and lasting power of attorney information about individuals who use our service and keeping emergency contact details for our staff. Where do we process your data? We collect data from or share it with:

• You or your legal representative(s)
• Third parties (e.g., local hospitals, GP, pharmacy, social workers, Local Authority, law enforcement agencies)

6. How do we store your personal information?

Your information is securely stored for the time periods specified in the NHS Records Management Code of Practice. We securely dispose of your information by shredding paper records or wiping hard drives to legal standards of destruction.

7. Our Website

We process some data about you to provide the best experience while using our website. This includes processing IP addresses and information submitted through contact forms or online applications.

8. Your Rights

You have the following rights regarding your data:

1. Request a copy of all data we keep about you.
2. Ask us to correct any inaccurate or incomplete data.
3. Request that we erase data no longer necessary for the purpose we originally collected it for.
4. Restrict processing if we no longer require your data but you do not wish for it to be erased.
5. Withdraw consent if we asked for your permission to process your data.
6. Object to processing based on our legitimate interests or public task.

We may require adequate identification before processing requests. We will respond to requests within one month. If you would like to complain about how we have handled your data, please contact: Information Commissioner’s Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF https://ico.org.uk/global/contact-us/ Contact Details for Rapid Response Secure Care: Address : 51 Gazelle Road, Weston Industrial Estate, Weston Super Mare,BS24 9ES Email   :   info@rrsambulance.co.uk