— Privacy & Data Protection
Privacy Notice
How Revive Rise Ltd collects, uses, stores, and protects personal data — for service users, staff, and their families.
1
Introduction
This is Revive Rise’s Privacy Notice.
Revive Rise processes personal data about our service users, staff, and — where necessary — their friends or relatives. “Processing” includes collecting, recording, storing, sharing, or destroying information. As your provider/employer, we are committed to being transparent about why we need your personal data and how we use it.
If you have any questions or concerns about how we use your information, you can contact us at:
— Data Controller
Phone: 024 7692 0269
Email: paul@reviverise.co.uk
2
Service Users
What data do we collect?
To provide safe, high-quality care, Revive Rise keeps essential records about you. This includes:
- Basic details: name, address, date of birth, next of kin
- Financial details: funding arrangements or payment information
We also process special category data, including:
- Health and social care information (physical and mental health)
- Information relating to race, ethnicity, sexual orientation or religion (only if relevant to your care and recorded with your permission)
Why do we collect this data?
We collect this information to deliver safe, person-centred care. Our lawful bases under UK GDPR include:
Legal obligation
Vital interests
Public task
Consent
Special category data is processed because:
- It is necessary for social protection and safeguarding
- It is required to provide and manage social care services
- We must share certain information with the Care Quality Commission (CQC)
Common Law Duty of Confidentiality
We meet this duty because:
- You give implicit consent for care
- You give explicit consent for other uses
- We have legal requirements to share information
- Public interest may override confidentiality (e.g., preventing serious crime)
Where do we process your data?
We collect and share information:
- Directly with you or your legal representative
- With third parties involved in your care
This may occur face-to-face, by phone, email, post, apps, or secure digital systems.
Third parties include:
- GPs, hospitals, pharmacies, social workers
- Local Authority
- Family/friends (with your permission)
- CQC
- Police or law enforcement (where legally required)
3
National Data Opt-Out
Revive Rise reviews all processing annually to determine whether the National Data Opt-Out applies.
At present, Revive Rise does not share confidential patient information for planning or research purposes, so the National Data Opt-Out does not apply.
If this changes, we will update this notice and ensure service users can exercise their right to opt out.
4
Staff
What data do we collect?
To employ you safely and legally, Revive Rise collects:
- Basic details: name, address, date of birth, NI number, next of kin
- Financial details: payroll, tax, pension
- Training records
Special category data may include:
- Health information (fit notes, maternity/paternity evidence)
- Equality information (only with your permission)
We also check criminal records (DBS) where required. We do not keep copies of DBS certificates.
Why do we collect this data?
Our lawful bases include:
Employment law, HMRC requirements
Workforce planning, training records
CQC regulatory requirements
Special category data is processed for statutory pay and employment purposes.
Criminal records data is processed under the Data Protection Act 2018 and the Rehabilitation of Offenders Act 1974 (Exceptions Order).
Where do we process staff data?
We collect and share information:
- Directly with you
- With authorised third parties
This may occur via phone, email, post, apps, or secure digital systems.
Third parties include:
- HMRC
- Pension providers
- Payroll provider (if applicable)
- CQC
- DBS service
- Police or law enforcement (where legally required)
5
Friends and Relatives
What data do we collect?
We may hold:
- Basic contact details (e.g., next of kin, emergency contact)
Why do we collect this data?
Our lawful basis is legitimate interest, ensuring we can contact someone in emergencies or where required for care planning.
Consent may be used where appropriate.
Where do we process this data?
Information may be collected directly from you or shared with relevant health and care professionals where necessary.
6
How We Store and Retain Your Information
Revive Rise stores personal information securely in line with the NHS Records Management Code of Practice, which also applies to adult social care.
We retain information for the legally required time periods and then:
- Securely destroy records (e.g., shredding, certified digital deletion)
- Archive records where required
- Anonymise data where appropriate
7
Your Rights
You have the right to:
- Request a copy of your data
- Ask us to correct inaccurate data
- Request erasure of data no longer required
- Request restriction of processing
- Withdraw consent (where consent is used)
- Object to processing carried out under legitimate interest or public task
We may need proof of identity before releasing information.
Complaints can be made to:
— Regulator
Information Commissioner’s Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF