1. Introduction

Solutions2Care is committed to protecting the privacy and confidentiality of all personal data and sensitive information collected, processed or stored in the course of our operations. This policy outlines our commitment to comply with data protection laws, including the General Data Protection Regulation (GDPR) and maintain the confidentiality of all data entrusted to us.

2. Scope

This policy applies to all employees, contractors, vendors and third parties who may access, process, or manage personal data or confidential information on behalf of the Company.

3. Data Protection Principles

The Company adheres to the following data protection principles:

3.1. Lawfulness, Fairness and Transparency

• We collect and process personal data in a lawful, fair and transparent manner.

3.2. Purpose Limitation

• We collect data only for specified, explicit and legitimate purposes.

3.3. Data Minimisation

• We ensure that personal data collected is adequate, relevant and limited to what is necessary for the intended purposes.

3.4. Accuracy

• We take reasonable steps to ensure the accuracy of personal data and update it as necessary.

3.5. Storage Limitation

• We retain personal data only for as long as needed for the purposes for which it was collected.

3.6. Integrity and Confidentiality

• We implement appropriate security measures to protect personal data from unauthorized access, disclosure, alteration or destruction.

3.7. Accountability and Compliance

• We maintain records of our data processing activities and conduct regular assessments to ensure compliance with data protection laws.

4. GDPR Compliance

The Company complies with the requirements of the GDPR, which include:

4.1. Data Subject Rights

• We respect the rights of data subjects, including the right to access, rectify, erase or restrict the processing of their personal data.

4.2. Data Protection Impact Assessments (DPIAs)

• We conduct DPIAs for high-risk data processing activities.

4.3. Data Breach Notification

• We have processes in place to promptly notify relevant authorities and affected individuals in the event of a data breach.

5. Confidentiality

The Company is committed to maintaining the confidentiality of all information that is not publicly available, including but not limited to:

• Personal data of employees, customers and partners.
• Business strategies and plans.
• Financial data.
• Proprietary technology and intellectual property.

6. Responsibilities

All employees, contractors and third parties must:

• Comply with this policy and related data protection and confidentiality procedures.
• Safeguard personal data and confidential information.
• Report any data breaches or security incidents immediately to the designated Data Protection Officer (DPO).
• Complete data protection and confidentiality training as required.

7. Review and Updates

This policy will be reviewed periodically to ensure its effectiveness and compliance with applicable laws and regulations. Updates will be made as necessary.

8. Contact Information

For questions or concerns regarding data protection, GDPR compliance or confidentiality, please contact our Data Protection Officer (DPO) at.

This Data Protection, GDPR and Confidentiality Policy is effective as of 2nd October 2023.

Solutions2Care

265 Dovecote

Yate

Bristol

BS37 4PG

01454 883712 

contact@solutions2Care.co.uk

Solutions2Care.co.uk