Privacy Policy
Harbour Bridge Community Care Ltd is committed to protecting your privacy and handling your personal data in a lawful, fair, transparent, and secure manner. This Privacy Policy explains how Harbour Bridge Community Care Ltd collects, uses, stores, shares, and protects personal data when you contact us, use our services, visit our premises, or otherwise interact with us.
1. Introduction and company information
This Privacy Policy applies to the personal data processed by Harbour Bridge Community Care Ltd as the data controller.
Company name: Harbour Bridge Community Care Ltd
Address: Harbour Bridge Community Hub, 24 St John's Street, Cardiff, CF10 1GL, UK
Email: [email protected]
Phone: +44 29 2048 7361
Harbour Bridge Community Care Ltd is a community-focused organisation providing support and community care services. We are committed to maintaining the confidentiality and integrity of the personal information entrusted to us.
2. Data collection and processing
We may collect and process the following categories of personal data:
- Identity data: name, title, date of birth, and identifiers where relevant.
- Contact data: address, email address, telephone number, and emergency contact details.
- Service and support data: information you provide when requesting or receiving community care, support, or related services.
- Communication data: correspondence with us by email, telephone, form submissions, and other communications.
- Administrative data: appointment details, attendance records, feedback, complaints, and service records.
- Technical data: IP address, browser type, device information, and website usage data where applicable.
- Special category data: where necessary and appropriate, we may process health information, disability-related information, or other sensitive information relevant to the support provided.
We collect personal data directly from you where possible, and in some cases from third parties where permitted by law, such as referrers, carers, authorised representatives, healthcare professionals, or public bodies.
3. Purpose of data processing
We process personal data for the following purposes:
- to provide, manage, and administer our community care and support services;
- to assess needs, eligibility, safeguarding requirements, and service suitability;
- to communicate with you and respond to enquiries, requests, or complaints;
- to maintain records, case notes, and service documentation;
- to improve our services, quality standards, training, and operational efficiency;
- to comply with legal, regulatory, safeguarding, and contractual obligations;
- to protect the vital interests of individuals where necessary;
- to manage our website, premises, administration, and internal systems;
- to investigate and prevent fraud, misuse, or security incidents; and
- to send administrative updates or relevant service information.
4. Legal basis for processing
We only process personal data where we have a lawful basis to do so. Depending on the circumstances, our legal bases may include:
- Consent: where you have given clear consent for specific processing.
- Contract: where processing is necessary to enter into or perform a contract with you.
- Legal obligation: where processing is required to comply with applicable law.
- Vital interests: where processing is necessary to protect someone’s life or health.
- Legitimate interests: where processing is necessary for our legitimate interests or those of a third party, and your interests and rights do not override those interests.
- Substantial public interest or other applicable lawful grounds: where permitted by applicable privacy laws for special category data or other sensitive processing.
Where we process special category data, we rely on an additional lawful condition permitted by applicable law, such as explicit consent, safeguarding, health or social care purposes, vital interests, or another relevant lawful condition.
5. Data sharing and third parties
We may share personal data with third parties where necessary and lawful, including:
- service providers acting on our behalf, such as IT, cloud hosting, email, administration, and record-keeping providers;
- professional advisers, auditors, insurers, and legal representatives;
- healthcare professionals, social care professionals, or referrers where relevant to the support provided and permitted by law;
- public authorities, regulators, law enforcement, or safeguarding bodies where required or permitted by law;
- contractors or partners involved in delivering community care or support services;
- payment, accounting, or financial service providers where applicable.
We require third parties who process personal data on our behalf to protect it appropriately and to use it only for the purposes we specify.
6. Data transfer to third countries
Where personal data is transferred outside the United Kingdom, we will take appropriate steps to ensure that it remains protected in accordance with applicable privacy laws. This may include using approved contractual safeguards, adequacy regulations, or other lawful transfer mechanisms.
We will only transfer personal data internationally where necessary for the operation of our services or the use of service providers, and we will seek to ensure a comparable level of protection.
7. Storage duration
We retain personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, accounting, reporting, safeguarding, and record-keeping obligations.
The retention period depends on factors such as:
- the nature of the information;
- the purpose for which it was collected;
- applicable legal and regulatory requirements;
- the need to resolve disputes or enforce rights; and
- the need to maintain accurate service and safeguarding records.
When personal data is no longer required, we will securely delete, destroy, or anonymise it.
8. User rights
Depending on applicable law, you may have the following rights in relation to your personal data:
- Access: request confirmation that we process your data and obtain a copy of it.
- Rectification: request correction of inaccurate or incomplete data.
- Erasure: request deletion of your data in certain circumstances.
- Restriction: request that we limit the processing of your data in certain circumstances.
- Data portability: request a copy of certain data in a structured, commonly used, machine-readable format.
- Objection: object to processing based on legitimate interests or direct marketing where applicable.
To exercise any of these rights, please contact us using the details below. We may need to verify your identity before responding. These rights may be subject to legal exceptions and limitations.
9. Withdrawal of consent
Where we rely on your consent to process personal data, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out before consent was withdrawn.
To withdraw consent, please contact Harbour Bridge Community Care Ltd using the contact details provided in this Privacy Policy. If you withdraw consent, we may be unable to provide certain services or communications that rely on that consent.
10. Right to complain
If you have concerns about how we handle your personal data, we encourage you to contact us first so we can try to resolve the issue.
You also have the right to complain to the relevant supervisory authority in the United Kingdom. If you are in the UK, this is usually the Information Commissioner’s Office (ICO).
Website: https://ico.org.uk
11. Data security
We implement appropriate technical and organisational measures to protect personal data against accidental loss, destruction, unauthorised access, disclosure, alteration, or misuse. These measures may include:
- access controls and authentication;
- staff confidentiality obligations and training;
- secure storage and restricted access to records;
- encryption or other security protections where appropriate;
- regular review of systems and procedures;
- incident response and breach management processes.
While we take reasonable steps to protect personal data, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
12. Contact information
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact:
Harbour Bridge Community Care Ltd
Harbour Bridge Community Hub, 24 St John's Street, Cardiff, CF10 1GL, UK
Email: [email protected]
Phone: +44 29 2048 7361
13. Changes to privacy policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data protection practices. Any changes will be posted on this page with an updated effective date where appropriate.
We encourage you to review this Privacy Policy periodically to stay informed about how Harbour Bridge Community Care Ltd protects your personal data.