Data Protection Policy

Evolving Lives Support Accommodation Ltd

Policy Statement

Evolving Lives Support Accommodation Ltd is committed to protecting the privacy and

confidentiality of personal data belonging to our employees, service users, suppliers, and

stakeholders. This Data Protection Policy outlines our commitment to complying with data

protection laws and ensuring that all personal data is processed securely and responsibly.

Policy Objectives

1. Legal Compliance: We will comply with all applicable data protection laws, including

the General Data Protection Regulation (GDPR) and the Data Protection Act 2018, in our

processing of personal data.

2. Data Collection and Use: We will only collect and process personal data for legitimate

and specified purposes. Personal data will be collected fairly and transparently, and

individuals will be informed about the purposes of data collection.

3. Data Minimization: We will only collect and retain personal data that is necessary for

the purposes for which it is being processed. We will avoid collecting excessive or

irrelevant data.

4. Data Accuracy: We will take reasonable steps to ensure that personal data is accurate,

up-to-date, and relevant. Individuals have the right to request correction of any inaccurate

data.

5. Data Security: We will implement appropriate technical and organizational measures to

protect personal data against unauthorized access, loss, destruction, or alteration. This

includes encryption, access controls, and regular security assessments.

6. Data Subject Rights: We respect the rights of data subjects, including the right to

access, rectify, erase, and restrict the processing of their personal data. We will respond

to data subject requests in a timely manner.

7. Data Transfers: If personal data is transferred to countries outside the European

Economic Area (EEA), we will ensure that adequate safeguards are in place to protect the

data.

8. Breach Reporting: We have processes in place to identify, assess, and report data

breaches to the relevant supervisory authority and affected individuals where required.

9. Data Retention: Personal data will be retained only for as long as necessary to fulfill the

purposes for which it was collected, in accordance with our data retention policy.

Responsibilities

• Data Protection Officer: The Data Protection Officer is responsible for overseeing data

protection within the organization and ensuring compliance with data protection laws.

• Employees: All employees are responsible for ensuring that personal data is handled in

accordance with this policy and data protection laws.

Implementation

• Consent: We will obtain consent from individuals before collecting and processing their

personal data, where required by law.

• Privacy Notices: We will provide clear and transparent privacy notices to individuals

explaining the purposes and legal basis for processing their personal data.

• Data Protection Impact Assessments (DPIAs): We will conduct DPIAs for high-risk

processing activities to assess and mitigate potential privacy risks.

• Training: We will provide training to employees on data protection principles and

practices to ensure understanding and compliance.

Contact Information

For questions or concerns related to this Data Protection Policy, please contact:

enquiries@evolvinglives.co.uk

01/01/23