Data Security

Information & Data Secuirty

Privacy Notice (How we use Service User’s information)

The categories of information that we collect, process, hold and share include:

  • Personal information (such as name, date of birth and address)
  • Characteristics (such as gender, ethnicity and disability)
  • Information relating to next of kin and extended family details
  • Medical history
  • Health information
  • Photographs
  • Advanced directives
  • Religious beliefs
  • CCTV images

Why we collect and use this information

We use this personal data to:

  • Provide quality care to service users and monitor their health and wellbeing
  • Assess the quality of our services
  • Evaluate and improve our policies on adult care
  • Request services from external providers where required
  • Provide for religious requirements
  • Protection of our residents, visitors to the building and staff

Collecting this information

Whilst the majority of information you provide to us is mandatory, some of it is provided to us on a voluntary basis. In order to comply with the General Data Protection Regulations (GDPR) which replace the existing Data Protection Act on 25 May 2018, we will inform you whether you are required to provide certain information to us or if you have a choice in this.

The lawful basis on which we use this information

We collect and process information about service users in our care, to whom we provide services, with their signed Consent, under Article 6.1(b) – Performance of a contract and Article 6.1(f) – Legitimate interest, of the General Data Protection Regulations (GDPR).

Storing this information

Data is stored securely and only accessed by those who need to use it for the specified purposes below.

We hold data for no longer than is necessary and adhere to retention periods as set out in the Records Management Code of Practice for Health and Social Care 2016.

Who we share this information with

We routinely share this information with

  • Medical professionals
  • City of Bradford Metropolitan District Council
  • Support Services
  • Equipment providers
  • Social Workers

Why we share this information

Medical Professionals – to provide continued medical care and attention when required for the protection of our service user’s health and wellbeing.

CBMDC – to ensure placements are provided and funding is allocated correctly for service users (where appropriate)

Support Services – to provide additional support to our service users.

Equipment providers – – for the provision of specific equipment which may be needed to support our service users with movement and independence.

Social Workers – to ensure continued suitable care for service users.

We do not share information about our service users with anyone without consent unless the law and our policies allow us to do so. We do not use your personal data for marketing purposes or automated decision making.

Requesting access to your personal data

Under data protection legislation (GDPR from 25.05.18), service users have the right to request access to information about them that we hold. To make a request for your personal information contact-

Zoe Duffy
Data Controller
Formations Care Services Ltd
2 St Paul’s Road
BD18 3EP.

You also have the right to:

  • object to or restrict the processing of personal data that is likely to cause, or is causing, damage or distress
  • prevent processing for the purpose of direct marketing
  • object to decisions being taken by automated means
  • in certain circumstances, have inaccurate personal data rectified, blocked, erased or destroyed; and
  • claim compensation for damages caused by a breach of the General Data Protection Regulations 2018
  • Move, copy or transfer your personal data

If you have a concern about the way we are collecting or using your personal data, you should raise your concern with us in the first instance or directly to the Information Commissioner’s Office at


Zoe Duffy
Data Controller
Formations Care Services Ltd
2 St Paul’s Road
BD18 3EP.