1. Introduction

Ashton Care (Bognor Regis) Ltd ("we", "us", "our") recognises the importance of your privacy. This notice explains how we collect, use, disclose and safeguard your personal information where we share or access care information to support your care and treatment, including through shared records with partner organisations. It describes your rights and how the law protects you. We are committed to complying with the UK GDPR and the Data Protection Act 2018.
Ashton Care (Bognor Regis) Ltd is the data controller of personal information collected in connection with the care services we provide. Our contact details are:
 

• Address: 98-100 Chichester Road, Bognor Regis, PO21 5AA

• Email: mail@ashtoncare.co.uk

• Phone: 01243 838223
  
   

2. What information we collect

We may collect personal information about you that is necessary to deliver safe and effective care and support. This may include:
 

• Identifying information: name, date of birth, address, contact details, NHS number (or other health identifiers where relevant)

• Health and care information: diagnoses, medications, allergies, care plans, support needs, risk assessments and notes relevant to your ongoing care

• Social care needs: assessments, support plans, staffing records related to delivery of care

• Other information necessary for direct care, scheduling, billing, safeguarding and lawful purposes
   

This information may come directly from you, your family or representative, healthcare professionals (for example your GP or hospital) and other partner organisations involved in your care.


3. Why we use your information

We use your information so that we can:
 

• Provide, plan, manage and review your care safely and effectively

• Share relevant information with health and social care professionals who are directly involved in your care

• Ensure continuity and coordination of care across providers

• Comply with legal obligations, regulatory requirements and safeguard vulnerable adults
   

Sharing care information in this way helps avoid unnecessary repetition of your story and supports better decision-making in your care delivery.


4. Lawful basis for processing

We process your personal information on several lawful bases, including:

• Legal obligation: to comply with UK law, including health and social care regulations

• Performance of a contract: where we have a contract with you or your representative

• Vital interests: to protect your life or prevent significant harm

• Legitimate interests: where necessary for direct care and coordination with other care providers and where this is not overridden by your rights
   

In most care situations, sharing and accessing your information with relevant professionals for direct care is considered a legitimate and expected part of service delivery.


5. Who we share your information with

To support your care, we may share your personal information with:

• NHS and other healthcare providers directly involved in your care

• Primary care services, for example your GP practice

• Hospital and community healthcare services

• Local authority adult social care teams

• Other regulated care providers who support you under a care plan
   

Only those professionals who are directly involved in your care will have access to your detailed records and access is controlled to ensure confidentiality and security.


6. How we protect your data

We take your privacy seriously and implement appropriate organisational and technical measures to protect your information from unauthorised access, loss, misuse or disclosure. Staff and authorised partners are required to follow strict confidentiality and data protection policies.


7. Your rights

Under data protection laws, you have several rights in relation to your personal information, including:
 

• The right to be informed about how your information is used

• The right of access to the information we hold about you

• The right to rectification if your information is inaccurate

• The right to erasure in certain circumstances

• The right to restrict or object to processing

• The right to data portability where applicable
  
   

8. Withdrawing consent or objecting

If you wish to object to information sharing for direct care or withdraw consent where it is not required by law, please discuss this with your care coordinator or contact us. Be aware that withholding certain information could impact our ability to deliver safe and effective care.


9. How long we keep your data

We will retain your personal data only as long as necessary to fulfil care, legal, contractual and regulatory obligations. Retention periods vary depending on the type of information.


10. Complaints and contact details

If you have questions or concerns about this privacy notice or how your information is used, please contact:
 

• Data Protection Contact: Rebecca Newman-Smith (or relevant DPO)

• Email: rebecca@ashtoncare.co.uk

• Phone: 01243 838223
   

If you remain dissatisfied, you have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK’s independent authority for data protection.