Privacy Policy

Privacy Notice

GGN Limited (“we”, “our”, or “us”), trading as Golders Green Nursing, is committed to safeguarding the privacy and personal data of all individuals who use our services. This Privacy Notice explains how we collect, use, store, and share your personal data in accordance with UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We are a Care Quality Commission (CQC) registered provider of nurse-led care and home support services, and this Privacy Notice specifically addresses how we manage and protect personal and health information in that context. It also includes our responsibilities as a user of NHS digital systems, including GP Connect.

 

Who We Are

Data Controller:

  • GGN Limited (Company Number: 11123306)
  • 4 Redbourne Avenue, London, N3 2BS
  • Email: [email protected]
  • Telephone: 0208 371 9592 (ask for the Privacy Officer)
 

We are registered with the Information Commissioner’s Office (ICO) under registration number Z8257810.

 

Your Rights Under Data Protection Laws

You have the following rights under UK data protection law:

  • To be informed – you have the right to know how your data is used.
  • Access – you can request a copy of your data.
  • Rectification – you can ask us to correct inaccurate or incomplete data.
  • Erasure – you can request deletion of your data in certain circumstances.
  • Restrict processing – you can request that we limit how we use your data.
  • Data portability – you can request that your data be transferred to another provider.
  • Object – you can object to certain uses of your data.
  • Rights in relation to automated decision-making – we do not use automated decision-making or profiling.
 

You can exercise these rights by contacting our Privacy Officer using the contact details above.

 

The Personal Data We Collect

We may collect and process the following types of data:

For Clients and Patients:

  • Full name, date of birth, address, contact details
  • Next of kin and emergency contacts
  • Health and medical information, including access to NHS records via GP Connect (with consent and appropriate lawful basis)
  • Care plans, risk assessments, and care notes
  • Information shared by healthcare professionals involved in your care
 

For Staff and Applicants:

  • Contact details, qualifications, references, DBS and background checks
  • Employment records, training history, and rota information
 

For Website Visitors:

  • IP address, location data, browser type, and use of cookies

 

Lawful Bases for Processing

We process personal data under the following lawful bases:

  • Consent – where required, we will ask for your explicit consent.
  • Contract – where processing is necessary to provide care services under a contract with you.
  • Legal obligation – where we must comply with laws and regulations (e.g. CQC requirements).
  • Vital interests – where necessary to protect someone’s life.
  • Public task – where we are carrying out a task in the public interest (e.g. care delivery funded by local authorities).
  • Legitimate interests – where we have a justifiable business reason to use your data, balanced against your rights.
 

Special category (health) data is processed under Article 9 of the UK GDPR, specifically where it is necessary for health or social care provision.

 

Use of NHS GP Connect

Golders Green Nursing is authorised to access GP Connect, a secure NHS Digital system that allows us to access relevant sections of your NHS medical records. This enhances the continuity and safety of care by enabling our nursing and care team to view up-to-date GP-held information (such as medications and diagnoses).

We will only access your NHS records where:

  • You are receiving care from us;
  • There is a lawful basis under UK GDPR and Health & Social Care Act 2012;
  • Access is necessary for the provision of care;
  • Access is in line with NHS Information Governance and role-based access control.
 

Individuals can opt out of their GP patient record being  shared via GP Connect by contacting their GP practice.

For more information, see the NHS GP Connect privacy information at: https://digital.nhs.uk/services/gp-connect

 

How We Use Your Data

We use your data to:

  • Deliver care services to you safely and effectively;
  • Coordinate with other health and social care professionals;
  • Maintain care records and meet legal/regulatory obligations (e.g. CQC, NHS);
  • Communicate with you and your family;
  • Respond to feedback, complaints, or concerns;
  • Train and supervise our staff;
  • Manage rotas, payroll, and business operations.

 

Sharing Your Data

We only share your personal data when necessary and with appropriate safeguards in place. This may include:

  • Health professionals (e.g. GPs, hospitals, social workers)
  • Regulatory bodies (e.g. CQC, Local Authorities)
  • Care staff and agency workers (on a need-to-know basis)
  • Third-party processors who help us deliver services (e.g. IT support, payroll providers)
 

All third parties must comply with our strict data processing agreements.

 

Data Retention

We retain personal data in accordance with legal, regulatory, and NHS guidance, including the Records Management Code of Practice for Health and Social Care (2021). This includes keeping care records for a minimum of 8 years after the end of care, or longer in some cases.

 

Cookies and Website Data

Our website uses cookies to improve your experience. Cookies are small files that help us analyse site traffic and tailor services. You can adjust your browser settings to disable cookies if you prefer.

 

Your Data Rights in Practice

To request access, correction, or erasure of your personal data, please write to our Privacy Officer using the contact details above. We will respond within one calendar month.

You may be asked to provide ID before we release information.

 

Complaints

If you are unhappy with how your data has been used, please contact us first so we can address your concerns. You also have the right to raise a complaint with the Information Commissioner’s Office:

ICO Contact Details:

  • Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
  • Telephone: 0303 123 1113
  • Website: www.ico.org.uk

 

Updates to This Policy

We review and update this Privacy Notice regularly. The latest version will always be available on our website. Significant updates will be brought to your attention where appropriate.

Last updated: 30/05/2025