Privacy Policy
Carers Matter Norfolk Privacy Notice
Carers Matter Norfolk is committed to protecting your privacy and being transparent about how we process your personal information. This document describes what data we collect, why we collect it, how we use it, how we keep it secure, and the conditions under which we share it. It also outlines your rights under the General Data Protection Regulation 2016 and the Data Protection Act 2018. It also contains important information about your rights as an individual and how to contact us. Further information is available on the Privacy section of our website (https://carersmatternorfolk.org.uk/).
What is Carers Matter Norfolk?
Carers Matter Norfolk (CMN) is a service funded by Norfolk County Council to provide information, advice, carer’s assessments and support to unpaid carers.
The service has been commissioned by Norfolk County Council under the provisions of the Care Act 2014.
Norfolk Carers Partnership is the lead provider of this service for adult carers and works with Caring Together, Norfolk and Suffolk Care Support and Voluntary Norfolk to deliver the services.
Who are we?
Norfolk Carers Partnership Limited is a company incorporated in England, registered at Companies House under number 12280318 .
It is part of Bridges Outcomes Partnerships which is a social enterprise launched by Bridges Fund Management that works with Government and the social sector to design and deliver outcomes-based contracts.
Since 2012, the team has worked with commissioners and expert social sector organisations providers to design and deliver over 50 social outcomes contracts across the UK. So far, these projects have helped over 20,000 beneficiaries, supported 98 social and private sector delivery organisations, and achieved £80m worth of outcomes-based payments for 64 local and national Government commissioners.
Norfolk Carers Partnership Limited is the Data Controller in relation to the processing of your personal data for the purpose of delivering this service. In this notice, the term ‘we’ means Norfolk Carers Partnership Limited and our Delivery Partners. This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Our delivery partners are:
Caring Together https://www.caringtogether.org/
Norfolk & Suffolk Care Support https://norfolkandsuffolkcaresupport.co.uk/
Voluntary Norfolk https://www.voluntarynorfolk.org.uk/
The types of information we use
The types of information we may collect and keep on record about you includes:
Personal details such as your name, address, date of birth, contact details, and NHS number
Physical and mental health conditions
Family details e.g. information about the person(s) you care for
Information about your caring role
Information regarding your lifestyle and social circumstances
Details of your GP
If you provide it, socio-demographic information such as your ethnicity, gender, religion, employment and accommodation details
We process your information in order to provide you with the best possible support whilst on the programme, as well as to meet the requirements of our contracts and other legal obligations.
We cannot process your information without having a valid, lawful reason for doing so.
How and why we collect and use your information
All organisations must have a valid, lawful reason to process your information. We collect and use your information for the purposes of administering the services we are contracted to deliver on behalf of Norfolk County Council. Key reasons for processing your information are:
To bring you on board the programme. We will receive information including name, address, date of birth, NHS number, and further information
If required, to support a Carers Assessment application under the Carers Act 2014
Maintaining contact with you throughout the support process
If required, refer you to Norfolk County Council for an eligibility determination or a combined assessment with the person(s) you care for
Referrals are made to us in 2 ways:
Self-referral from the person providing care
Referrals, from family, friends, professionals or other organisations
We endeavour to provide you with the highest quality of service and therefore need to keep information about you, your health, and the services we have provided and those which we plan to provide to ensure that:
We provide a good basis for any support or advisory services we offer to you
The support and the services we provide are safe, effective, appropriate and relevant to you
We work effectively with others providing you with information, support, advice or other support related services
Your information may also be used for:
Performance monitoring and quality assurance purposes to help us assess the quality and standard of our services to you and in order to help us meet contractual requirements with our delivery partners and commissioners
Conducting investigations in response to a complaint or enquiry
Accounting and record keeping e.g. keeping accounts related to business activities and financial management
Research and evaluation such as participating in feedback surveys
Research and evaluation
In order to ensure that we provide you with the best possible service, we may from time to time conduct research and evaluation. Sometimes we will do this by aggregating and anonymising the data, which means that no one can identify you or use pseudonymised data where there is a clear legal basis. On occasion we may ask you to take part in a new piece of research and provide additional information or share your information with a third party for the purpose of research, this will only ever be done with your knowledge and consent.
Sharing your Personal Information
Our aim is to assist you as best as possible during the time that we provide support to you. As such, we may work with other organisations to identify certain services that we think you could benefit from. In this way, you do not have to repeat yourself and provide the same information over again. We may therefore share information about you with the following partner organisations to support the service we provide and to assist with your care:
Norfolk County Council who are the commissioners of this support and stipulate within our contracts with them what information is to be shared, how we share it and the information security requirements that must be adhered to.
Delivery Partners who we work with to provide the service:
Caring Together
Norfolk & Suffolk Care Support
Voluntary Norfolk
Organisations or individuals who we can make a supported referral to
Organisations who are evaluating the service that we are providing you
To ensure the appropriate people are involved in your care in line with your wishes, to protect the health of the general public or to check the quality of service we have given you; with your consent (and in line with strict information sharing protocols), we may also share your information with:
Your family members
Social Services
Local Authorities
We will not share information that identifies you to any third party, other than those listed above for any reason, unless:
You ask us to do so
We ask and you give us specific permission to do so
We are required to do this by law e.g. by request of a court order
We are required to share personal information with other organisations, such as the HRMC or law enforcement agencies for the detection and prevention of fraud and other crime
We are required to share information for financial or audit purposes
We have special permission because we believe that the reasons for sharing are so important that they override our obligation of confidentiality e.g. to prevent someone from being seriously harmed
We do not transfer your personal information outside the EEA.
Carers Matter Norfolk cannot process your personal information without having a valid, lawful reason for doing so. The service has been commissioned by Norfolk County Council under the provisions of the Care Act 2014, but our ability to provide services to you is also based on what information you are prepared to disclose to us.
All CMN partners can see all data in the case management system. However, typical information flow is –
Caring Together receives the referral and does initial triage and Part A of the Assessment. They will support low-risk carers.
Voluntary Norfolk complete Assessment Part B and support high risk carers (referred by Caring Together) in the community
Caring Together receive referrals from Voluntary Norfolk for high risk carers who want Carers Breaks
Norfolk & Suffolk Care Support receive referrals from Voluntary Norfolk for high-risk carers who want Training
We will share your data with Norfolk County Council for SALT returns, sample cases selected randomly for service audits and quality assurance, if you request an eligibility determination and/or combined assessments.
How long will we keep your personal information?
We will only retain information for as long as contractually and legally necessary. Information is retained according to contractual requirements set by Norfolk County Council. Once we are no longer required to keep your information, it will be securely destroyed, in accordance with destruction guidelines. The following table provides you with summary information on how long we may keep your information:
Type of Information Length of time
Your participant file Six years
Information relating to fraud or any legal complaints you have made against us For as long as we reasonably consider that you might legally bring an additional or repeat claim against us or to meet other statutory obligations
Financial information relating to payments we have made to you whilst on the programme Six years following the end of the tax year
How the law protects you
The law protecting your personal information is the General Data Protection Regulation (GDPR) and Data Protection Act 2018. As custodians of your personal information, Carers Matter Norfolk are committed to ensuring that your personal data is processed lawfully and respectfully, and by ensuring that we are compliant with the law.
In accordance with the GDPR, Carers Matter Norfolk and its partners must have a valid lawful reason to process your information. If you want to know more about the legal basis for processing your information, please go to: https://carersmatternorfolk.org.uk/ where you can find additional information.
Consent
Where we need your agreement to process your information, for example, to pass your contact details to someone offering a specific service, we will ask for your consent, and will clearly state why your information is needed and who we will share your information with. If you agree to your information being shared, we will record your consent on your record. We will regularly review consent to make sure that the relationships, and purposes for processing, have not changed.
Right to Withdraw Consent
Where you have provided consent for us to share your information with a specific organisation or individual, you have the right to withdraw your consent at any time. Should you wish to withdraw your consent, please tell a member of staff, or, send a written request to the Data Protection Officer (dpo@bridgesoutcomespartnerships.org), who will process your request.
Keeping your information safe
We are committed to taking all reasonable measures to ensure we maintain the confidentiality and security of personal data for which we are responsible, whether electronically or on paper. We do so to ensure that we are always compliant with data protection laws and information security standards, for example, the General Data Protection Regulation (GDPR), the Data Protection Act 2018 (DPA) and the Human Rights Act 1998 (HRA – as our service is commissioned by a public body)).
Carers Matters Norfolk will ensure that it has appropriate security measures in place to prevent personal information from being accidentally lost, used or accessed in an unauthorised way. We limit access to your personal data to those who have a genuine business need to know it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality. We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.
All our staff are required to complete mandatory data protection and information security training to ensure they understand their responsibilities in relation to processing your personal information. Internal and external audits are also undertaken to ensure that data protection laws are being complied with.
In addition, all our staff are required to work according to company policies and are subject to the Common Law Duty of Confidence.
All participating organisations that provide services within Carers Matters Norfolk are registered with the Information Commissioner and have appointed a Data Protection Officer (where appropriate).
Your rights
The GDPR and Data Protection Act 2018 grants you certain rights regarding your personal information and the way in which it is processed. This gives you more control over what organisations are doing with your information. These include the right to:
be informed of why and how we process your data
request a copy of the information we hold on you
have any incorrect information updated and put right
deletion of information, once we have no legal right to hold it
restrict processing in certain circumstances
object to unwarranted processing
ask us to transfer your personal information to another organization
object to any automated decision-making including profiling
The right to be informed
We are committed to ensuring that you are always aware of what we are doing with your information and are kept abreast of any changes to the processing of your information. We do so through this Privacy Notice, which is reviewed and updated as and when required.
The right of access
You have the right to ask for the personal information we hold about you. This is known as a Subject Access Request. However, while we will do our best to comply with your request, there may be circumstances where we are unable to fulfil your request, for example, where information we hold has been provided to us in confidence.
When requesting your personal information, you will need to include the following information:
your full name, address and contact telephone number;
any information used by the organisation to identify or distinguish you from others of the same name (account numbers, unique ID’s etc);
details of the specific information you require and any relevant dates
The right to rectification
We endeavour to ensure that the information we hold about you is always accurate, however, there may be instances where the information we hold is no longer up to date. You can ask that we rectify any information about you that is incorrect. We would be happy to rectify such information but may need to verify the accuracy of the information first. Please speak to a member of staff so that any inaccuracies can be investigated and corrected where necessary.
The right to erasure
You have the right to request that certain personal information be erased from our systems if you feel that there is an underlying legal issue to us processing your information, or, where you withdraw your consent.
While you may request for your information to be erased, this does not mean that we will necessarily be able to comply with your request, as there may be a legal reason that we are required to keep your information. As such, each request is considered on a case-by-case basis.
The right to restrict processing
You have the right to request us to ‘restrict’ the processing of your personal information, for example, if you are unsatisfied about the accuracy of the data and we undertake an investigation. We can continue to use your personal data following a request for restriction where we need to use it to establish, exercise or defend legal claims, or we need to use it to protect the rights of another individual or the company.
The right to data transfer to another organisation (portability)
You have the right to request us to provide you with a copy of the personal information that you have provided to us, and which we process electronically. The data must be in a machine-readable format that facilitates transmission from controller-to-controller. This allows you further use of the data and enables you to move between service providers without any loss of data.
While you may request data portability, this does not mean that we will be able to comply with your request, as there may be reasons that we are unable to comply your request. As such, each request is therefore considered on a case-by-case basis.
The right to object to how we use personal information
You have the right to object to us processing your personal information for the following reasons:
Direct marketing,
Scientific/historical research and statistics,
Legitimate interests and processing regarding the performance of a public interest or official authority task.
While you may object, this does not mean that we will necessarily be able to comply with your request, as there may be reasons that we are unable to comply, such as other legal obligations. Each request is therefore considered on a case-by-case basis.
The right to object to automated decision making, including profiling
We do not carry out any automated decision making or profiling regarding you or the personal information.
If you have any questions in relation to your rights, or if you would like to receive a copy of your records, correct or request erasure of your personal information, or object to the processing of your personal data, please contact the Data Protection Officer.
To make a request:
You can tell your key worker who will start the process for you
You can email dpo@bridgesoutcomespartnerships.org
Please note: Your request will need to include sufficient information to enable us to correctly identify your records (e.g. full name, address, date of birth, and NHS number if known) otherwise we may need to return to you for verification purposes before we can process your request.
Complaints and Disputes
If you raise a query or complaint in relation to your data rights, we will endeavour to respond as soon as possible. Requests for a copy of your information will be responded to within a one-month period. If you are still not satisfied with how Carers Matter Norfolk is processing your information, you can write to the Information Commissioner’s Office at:
Information Commissioners Office, Wycliffe House. Water Lane, Wilmslow, Cheshire, SK9 5AF
Review of this privacy notice
We review this Privacy Notice to ensure we keep you up to date about what we are doing with your personal information and any changes in processing.
If you require this notice in a different format or you need further information or assistance, please contact the Data Protection Officer via the contact details listed above.
This Cookie Policy was last updated on 21 December 2023 and applies to citizens and legal permanent residents of the United Kingdom.
1. Introduction
Our website, https://carersmatternorfolk.org.uk (hereinafter: “the website”) uses cookies and other related technologies (for convenience all technologies are referred to as “cookies”). Cookies are also placed by third parties we have engaged. In the document below we inform you about the use of cookies on our website.
2. What are cookies?
A cookie is a small simple file that is sent along with pages of this website and stored by your browser on the hard drive of your computer or another device. The information stored therein may be returned to our servers or to the servers of the relevant third parties during a subsequent visit.
3. What are scripts?
A script is a piece of program code that is used to make our website function properly and interactively. This code is executed on our server or on your device.
4. What is a web beacon?
A web beacon (or a pixel tag) is a small, invisible piece of text or image on a website that is used to monitor traffic on a website. In order to do this, various data about you is stored using web beacons.
5. Cookies
5.1 Technical or functional cookies
Some cookies ensure that certain parts of the website work properly and that your user preferences remain known. By placing functional cookies, we make it easier for you to visit our website. This way, you do not need to repeatedly enter the same information when visiting our website and, for example, the items remain in your shopping cart until you have paid. We may place these cookies without your consent.
5.2 Statistics cookies
We use statistics cookies to optimize the website experience for our users. With these statistics cookies we get insights in the usage of our website. We ask your permission to place statistics cookies.
5.3 Marketing/Tracking cookies
Marketing/Tracking cookies are cookies or any other form of local storage, used to create user profiles to display advertising or to track the user on this website or across several websites for similar marketing purposes.
5.4 Social media
On our website, we have included content from Facebook, Twitter and LinkedIn to promote web pages (e.g. “like”, “pin”) or share (e.g. “tweet”) on social networks like Facebook, Twitter and LinkedIn. This content is embedded with code derived from Facebook, Twitter and LinkedIn and places cookies. This content might store and process certain information for personalized advertising.
Facebook, Twitter and LinkedIn are located in the United States.
6. Placed cookies
Google reCAPTCHA
Functional
Consent to service google-recaptcha
WordPress
Functional
Consent to service wordpress
Wordfence
Functional
Consent to service wordfence
Complianz
Functional
Consent to service complianz
Google Analytics
Statistics
Consent to service google-analytics
Google Maps
Purpose pending investigation
Consent to service google-maps
YouTube
Purpose pending investigation
Consent to service youtube
Purpose pending investigation
Consent to service facebook
Purpose pending investigation
Consent to service twitter
Purpose pending investigation
Consent to service linkedin
Miscellaneous
Purpose pending investigation
Consent to service miscellaneous
7. Consent
When you visit our website for the first time, we will show you a pop-up with an explanation about cookies. As soon as you click on “Save preferences”, you consent to us using the categories of cookies and plug-ins you selected in the pop-up, as described in this Cookie Policy. You can disable the use of cookies via your browser, but please note that our website may no longer work properly.
7.1 Manage your consent settings
Functional Always active
Statistics
Statistics
Marketing
Marketing
8. Enabling/disabling and deleting cookies
You can use your internet browser to automatically or manually delete cookies. You can also specify that certain cookies may not be placed. Another option is to change the settings of your internet browser so that you receive a message each time a cookie is placed. For more information about these options, please refer to the instructions in the Help section of your browser.
Please note that our website may not work properly if all cookies are disabled. If you do delete the cookies in your browser, they will be placed again after your consent when you visit our website again.
9. Your rights with respect to personal data
You have the following rights with respect to your personal data:
You have the right to know why your personal data is needed, what will happen to it, and how long it will be retained for.
Right of access: You have the right to access your personal data that is known to us.
Right to rectification: you have the right to supplement, correct, have deleted or blocked your personal data whenever you wish.
If you give us your consent to process your data, you have the right to revoke that consent and to have your personal data deleted.
Right to transfer your data: you have the right to request all your personal data from the controller and transfer it in its entirety to another controller.
Right to object: you may object to the processing of your data. We comply with this, unless there are justified grounds for processing.
To exercise these rights, please contact us. Please refer to the contact details at the bottom of this Cookie Policy. If you have a complaint about how we handle your data, we would like to hear from you, but you also have the right to submit a complaint to the supervisory authority (the Information Commissioner’s Office (ICO)).
10. Contact details
For questions and/or comments about our Cookie Policy and this statement, please contact us by using the following contact details:
Care Outcomes Partnership Ltd
38 Seymour Street, London, W1H 7BP
United Kingdom
Website: https://carersmatternorfolk.org.uk
Email: impact@carersmatternorfolk.org.uk
Phone number: 0800 083 1148