Privacy Policy

New Path Care Limited (“we”, “us”, “our”) is committed to protecting your personal data and respecting your privacy. This policy explains what personal data we collect, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

New Path Care Limited is the data controller for personal data processed in connection with our services. We are registered at Companies House under number 14530103.

For all data protection enquiries, contact us at info@newpathcare.org.

2. What data we collect and why

We collect and process personal data in the following contexts:

Referrals and placements

When a local authority or placing authority submits a referral, we collect information about the child or young person including their name, date of birth, care history, educational needs, health information, and risk assessments. We also collect contact details for social workers, carers, and other professionals involved in the child's care. This data is necessary to assess suitability, plan care, and fulfil our statutory obligations as a registered children's home.

Legal basis: Legal obligation (Children Act 1989; Care Standards Act 2000; Children's Homes (England) Regulations 2015); and legitimate interests.

Staff and job applicants

We collect personal data from employees and job applicants including names, contact details, employment history, qualifications, references, enhanced DBS certificate information, and health data relevant to fitness for work. This is necessary to manage the employment relationship and to comply with our safeguarding obligations.

Legal basis: Contract; legal obligation; and legitimate interests.

Website visitors and enquiries

When you contact us through our website or by email, we collect the information you provide (name, email address, organisation, and message content) in order to respond to your enquiry.

Legal basis: Legitimate interests; or consent where explicitly given.

3. Special category data

In the course of providing residential childcare, we necessarily process special category data, including health and medical information, information about ethnicity and religion, and information relating to the welfare and safeguarding of children. We process this data on the basis of legal obligation and, where applicable, the substantial public interest condition under Schedule 1 of the Data Protection Act 2018.

4. Who we share data with

We may share personal data with the following categories of recipients where necessary and lawful to do so:

• Local authorities and placing authorities responsible for children in our care
• Healthcare professionals, CAMHS, and other therapeutic services
• Schools and educational providers
• Ofsted, in its capacity as our regulator
• The Disclosure and Barring Service (DBS)
• Our insurers and professional advisers
• Police and other agencies where there is a safeguarding or legal obligation to disclose

We do not sell personal data to third parties or share it for marketing purposes.

5. How long we keep your data

We retain personal data for as long as necessary for the purpose for which it was collected and in accordance with applicable legal and regulatory requirements. Key retention periods include:

• Children's care records: Retained until the young person reaches the age of 25, or 15 years from the date the placement ended, whichever is later, in accordance with statutory guidance.
• Staff records: For the duration of employment and for six years after the employment ends.
• DBS certificate records: Six months after a recruitment decision, unless a longer period is required by law.
• Website enquiry data: Two years from the date of last contact, unless a longer retention period is required.

6. Transfers outside the UK

We do not routinely transfer personal data outside the United Kingdom. If any transfer is required, we will ensure appropriate safeguards are in place in accordance with UK GDPR.

7. Your rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can ask us to correct inaccurate data.
• Right to erasure: In certain circumstances, you can ask us to delete your data.
• Right to restriction: You can ask us to restrict how we use your data in certain circumstances.
• Right to data portability: Where processing is based on consent or contract, you can request your data in a portable format.
• Right to object: You can object to processing based on legitimate interests.

To exercise any of these rights, please contact us at info@newpathcare.org. We will respond within one calendar month. Please note that some rights are subject to conditions and limitations under data protection law, particularly where processing is required by law or for safeguarding purposes.

8. Cookies

Our website uses cookies. Please see our Cookies Policy for details.

9. Complaints

If you have a concern about how we handle your personal data, please contact us in the first instance. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), which is the UK's supervisory authority for data protection:

• Website: ico.org.uk
• Helpline: 0303 123 1113

10. Changes to this policy

We may update this policy from time to time. The current version will always be published on this page with the date it was last updated. We encourage you to review this policy periodically.