Data Protection Policy

Purpose of This Policy • Processed lawfully, fairly, and transparently • Collected for specified, explicit purposes • Limited to what is necessary • Accurate and up to date • Retained only as long as necessary • Kept secure Scope • All staff and contractors • All personal data systems • All digital and paper records Legal Basis for Processing • Consent • Contract • Legal obligation • Vital interests • Legitimate interests Types of Data We Process Personal Data: • Name, contact details, demographics • Communications and enquiries • Website submissions Special Category Data: • Health information • Social care assessments • Court or safeguarding documentation Technical Data: • IP address • Cookies and analytics • System logs How We Use Personal Data • Deliver services • Manage communication • Meet safeguarding duties • Maintain records • Improve services Data Sharing • With consent • Legal or safeguarding requirements • Authorised professionals • Regulators or courts Data Retention • In line with legal and regulatory requirements • Secure deletion after retention period Data Security • Encryption • Secure systems • Restricted access • Secure disposal Your Rights • Access • Correction • Erasure • Restriction • Objection • Portability Data Breaches • Investigated immediately • Mitigation steps taken • ICO notified if required ICO Registration We are registered with the Information Commissioner’s Office. Contact Email: hello@hawkinssocialwork.com Phone: 07903 768771 Data Protection Lead: Mr Thomas Hawkins