Privacy Policy
Who we are
Aspire Health and Care is a mental health care service which was founded by Dr. Ivan Bakaltchev, formerly a Consultant Psychiatrist working in the NHS. His vision was to offer a new approach to mental health care, creating a supportive and seamless service across multiple disciplines, with the aim of providing better care with better outcomes for those suffering with mental illness.
We are committed to respecting and protecting your privacy. For the purposes of General Data Protection Regulation (GDPR) and Data Protection legislation, we are the data controller and will process personal data in accordance with GDPR and legislation which relate to the processing of personal data. Please read the following policy to understand our policy and procedure regarding your personal data.
This Privacy Policy applies to current and former employees, workers, contractors, and our service users including clients under the care of Aspire Health and Care.
​
Contact us
If you have any questions or concerns about this Privacy Policy or how we process your information, please contact us:
Name: Aspire Health and Care
Address: 35 Dovecote Lane, Beeston, Nottingham, NG9 1HR
Phone Number: 0330 094 77 50
Email Address: info@aspiremhc.co.uk
​
Types of personal information we collect
We currently collect and process the following information:
​
Employees:
-
Name, title, and date of birth.
-
Contact details such as address, telephone numbers and email addresses.
-
Details of marital status and dependents.
-
Details of next of kin and emergency contacts.
-
National Insurance number.
-
Bank account details, payroll, and tax status information.
-
Salary, annual leave, pension, and benefits information.
Service Users:
-
Personal contact details such as name, title, address, telephone numbers and personal email addresses.
-
Date of birth.
-
Marital status and dependents.
-
Next of kin and emergency contact details.
-
National Insurance number.
-
Bank or credit card details or other payment information.
-
Identification information contained within Passport, Driving Licence and/or Proof of address.
-
Information about your status, nationality, and residency.
We may also handle the following categories of sensitive personal data:
​
Employees:
-
Information about your race or ethnicity, religious beliefs, sexual orientation, and political opinions.
-
Trade Union membership.
-
Information about your physical and mental health, including any medical condition, health, and sickness records including:
-
Pre-employment medical screening questions.
-
Where you leave employment and the reason for leaving is determined to be ill-health, injury or disability, the records relating to that decision.
-
Details of any absences (other than holidays) from work including time on statutory parental leave and sick leave.
-
-
Information about criminal convictions and offences.
Service Users:
-
Information about your race or ethnicity, religious, philosophical, and moral beliefs, sex life, sexual orientation, and political opinions.
-
Information about your physical and mental health, including any medical conditions and medication.
-
Identification information containing biometric data such as a passport.
​
How we get the personal information and why we use it
Most of the personal information we process is provided to us directly by you for one of the following reasons:
Employees:
We will use your personal information in the following circumstances:
-
Where we need to perform the contract we have entered with you.
-
Where we need to comply with a legal obligation.
-
Where it is necessary for legitimate interests pursued by us or a third party and your interests and fundamental rights do not override those interests.
We may also use your personal information in the following situations, which are likely to be rare:
-
Where we need to protect yours or someone else’s interests.
-
Where it is needed in the public interest or for official purposes.
​
The situations in which we will use your personal information include:
-
Making a decision about your recruitment or appointment (for example CV, application form).
-
Checking you are legally entitled to work in the UK.
-
Paying you and deducting tax and national insurance contributions.
-
Providing your salary, pensions, insurance, and benefits administration.
-
Enrolling you in a pension arrangement in accordance with our statutory automatic enrolment duties.
-
Administering/upholding the contract we have entered into with you.
-
HR, business management and planning purposes.
-
Making decisions about salary reviews.
-
Conducting inductions, appraisals, or performance reviews, handling disciplinary and grievance matters, performance management, career planning, training, promotion, secondments, etc.
-
Dealing with legal disputes involving you or other employees.
-
Managing different types of leave, e.g., sickness, maternity, paternity leave.
-
Determining your fitness to work.
-
To facilitate settling of expenses staff have incurred in the course of the business in accordance with their employment contracts.
-
To facilitate communications between employees within the business.
-
Internal record keeping purposes to enable us to maintain an audit trail in respect of approvals of decisions, voting and any internal surveys.
-
Managing and safeguarding our systems.
-
Security purposes.
-
Complying with health and safety obligations.
-
To prevent fraud.
-
Performing workforce analysis, project management and planning.
-
Education, training, and quality purposes.
-
Equal opportunities monitoring.
-
To ensure network and information security, including preventing unauthorised access to our computer and electronic communications systems and preventing malicious software distribution.
​
Some of the above grounds may overlap and there may be several grounds that justify our use of your information.
We process sensitive personal information for the following purposes:
-
Managing sickness absence, providing reasonable adjustments in the workplace.
-
For legal reasons, e.g., to comply with employment and health and safety obligations or to respond to requests for information from the police.
We may use information about your gender or race or national or ethnic origin, religious, philosophical, or moral beliefs, or your sexual life or sexual orientation, to ensure meaningful equal opportunity monitoring and reporting.
Service Users:
In most cases, we will use your personal information to provide you with health and social care, or treatment or to manage our health and social care services. In rare cases, we may need to use your personal information to protect yours or someone else’s interests, or if it is in the public interest for us to do so.
We will only use your personal information when the law allows us to. We will use your personal information in the following circumstances:
-
Where you have provided us with your consent
-
Where we need to comply with a legal obligation
-
Where it is necessary for legitimate interests pursued by us or a third party and your interests and fundamental rights do not override those interests.
We may also use your personal information in the following situations, which are likely to be rare:
-
Where we need to protect your interests (or someone else’s interests.)
-
Where it is needed in the public interest or for official purposes.
Some of the above grounds may overlap and there may be several grounds that justify our use of your information.
The situations in which we will use your personal information include:
-
Provide services to you.
-
Facilitate settling of any applicable fees.
-
Facilitate communications between your care providers.
-
Helping us develop, operate, deliver, and improve the quality of the care we provide or, more generally, the type of services that we offer.
-
Sending important notices to you or to those acting on your behalf, such as updates to your care and/or treatment plans or changes to our terms, conditions, and policies. (Because this information is important to your interaction with Aspire, you may not opt out of receiving these communications).
-
For security and health and safety purposes, such as use of our CCTV systems.
-
For internal purposes such as auditing, data analysis, and research to improve our services and our communication with you.
We process sensitive personal information for the following purposes:
-
To provide you with physical or mental health care, social care, or treatment
-
Safeguarding reasons.
-
For legal reasons, for example, to comply with health and safety obligations or to respond to requests for information from the police.
We will not sell, share, or give information to third parties for marketing purposes.
We also receive personal information indirectly, from the following sources in the following scenarios:
Employees:
-
Previous employers in the form of a reference.
Service Users:
-
Your GP, social worker, care team, or other external professionals.
-
Next of kin/Emergency contact.
Under the General Data Protection Regulations (GDPR), the lawful bases we rely on for processing this information are:
(a) Consent: the individual has given clear consent for you to process their personal data for a specific purpose.
(b) Contract: the processing is necessary for a contract you have with the individual, or because they have asked you to take specific steps before entering into a contract.
(c) Legal obligation: the processing is necessary for you to comply with the law (not including contractual obligations).
(d) Vital interests: the processing is necessary to protect someone’s life.
(e) Public task: the processing is necessary for you to perform a task in the public interest or for your official functions, and the task or function has a clear basis in law.
(f) Legitimate interests: the processing is necessary for your legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect the individual’s personal data which overrides those legitimate interests. (This cannot apply if you are a public authority processing data to perform your official tasks.)
​
Your Data Protection Rights
Under Data Protection Law, you have rights including:
-
Right of access – You have the right to ask us for copies of your personal information.
-
Right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
-
Right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
-
Right to object to processing – You have the right to object to the processing of your personal information in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact us at info@aspiremhc.co.uk if you wish to make a request.
​
How to complain
If you have any concerns about our use of your personal information, you can make a complaint to us at GDPR, Aspire Health and Care, Dovecote, 35 Dovecote Lane, Beeston, NG9 1HR
You can also complain to the ICO if you are unhappy with how we have used your data:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
ICO Website: https://www.ico.org.uk