Privacy Policy

1. Introduction

Forge Care Limited (“Forge Care,” “we,” “our,” or “us”) is committed to protecting and respecting your privacy. This privacy policy, together with our Legal Notice and any other documents referred to within it, sets out the basis on which we collect, use, and process any personal data that you provide to us. Personal data refers to any information that can identify you, either directly or indirectly, as an individual (the data subject). By “processing,” we mean any activity involving your personal data, including collection, recording, storage, retrieval, use, disclosure, transfer, and deletion.

Please read this policy carefully to understand our views and practices regarding your personal data and how we will treat it.

2. The Types of Personal Data We May Collect from You

We collect personal information about individuals in various ways, including from the individual directly (such as young people, parents/guardians, foster carers, contractors, customers, and visitors) or from third parties (such as a local authority social worker placing a young person with us).

We may collect and process the following types of personal information:

1. Personal details (e.g., name, date of birth, email address, home address, telephone number, National Insurance number, unique pupil number, gender, disability, sexual orientation, criminal convictions, racial or ethnic origin, religious or other beliefs).
2. Family details (e.g., contact details and relationships).
3. Financial information (e.g., bank details).
4. Safeguarding and health information (e.g., special educational needs, physical and mental health conditions).
5. Education details (e.g., school admission, attendance, absences, behaviour, exclusions, certificates, exams, test records, and progress).
6. Visual images, personal appearance, and behaviour (e.g., photographs, CCTV recordings).
7. Information related to offences or alleged offences.
8. Details of goods and services provided.

Certain types of personal data, including health information, criminal records, and religious beliefs, are classified as “sensitive” personal data. We will only process this type of information when we have explicit consent, a legal obligation, or another lawful reason to do so.

3. Why We Collect Personal Information

We collect personal information to fulfill our legitimate business needs, including:

1. Providing education and training.
2. Offering residential care, healthcare, and welfare services.
3. Facilitating fostering for children and young people.
4. Managing school properties and library services.
5. Maintaining financial records.
6. Administering school admissions and alumni associations.
7. Supporting and managing staff.
8. Conducting advertising and marketing activities.

4. Legal Basis and Purpose for Using Your Personal Information

We collect and use your personal information under the following legal bases:

1. Performance of a contract: If you have entered into an agreement with us (e.g., as a staff member, foster carer, or contractor), we process your data as necessary to fulfill that contract.
2. Legitimate interests: We process your data where necessary to operate our business, including security measures such as CCTV surveillance, record-keeping, and communication with you.
3. Legal obligations: We are required by law to collect and share certain information, such as tracking pupil progress for Ofsted or cooperating with local authorities on child welfare matters.
4. Public interest tasks: We may process data to protect children and vulnerable persons, including sharing information with authorities in safeguarding situations.
5. Vital interests: We may process data in emergency situations, such as contacting family members or responding to medical needs.
6. Consent: In cases where your consent is required (e.g., for marketing communications or using photographs for promotional purposes), you have the right to withdraw your consent at any time.

5. Sharing Your Personal Information

We may share personal information with:

1. Family members and representatives.
2. Ofsted, the Department for Education, and local authorities.
3. Care and education regulatory bodies.
4. The police, courts, and security organisations.
5. Contractors providing services on our behalf.
6. Healthcare professionals, social workers, and welfare organisations.
7. Staff, governors, and school boards.
8. Debt collection and financial organisations.
9. Foster parents and education/training bodies.

6. International Data Transfers

We may transfer personal data outside the United Kingdom. Any transfers will be conducted in full compliance with UK data protection laws and will only occur within the European Economic Area (EEA) or under legally approved safeguards.

7. Data Retention

We retain personal information for as long as necessary for its intended purposes or as required by law. For example, child protection records must be retained for 25 years after birth. We regularly review and delete data that is no longer needed.

8. Data Security

We implement strict security procedures to protect personal data from loss, unauthorised access, destruction, or misuse. Our electronic records are stored securely and staff receive regular data protection training.

9. Automated Decision Making

We do not use automated decision-making processes that affect individuals. Any important decisions involving personal data are made by a human.

10. Your Data Protection Rights

Under data protection laws, you have the right to:

1. Request access to your personal data.
2. Request correction of inaccurate data.
3. Request deletion of personal data under certain circumstances.
4. Object to data processing where we rely on legitimate interests.
5. Restrict processing under specific conditions.
6. Request transfer of data to another service provider.
7. Withdraw consent for processing based on consent.
8. To exercise your rights, contact us at info@forgecare.co.uk or write to:
9. Data Protection Officer, Forge Care Limited The Forge, Waggestaff Drive, Nuneaton, Warwickshire, United Kingdom, CV10 9SL

11. IP Addresses and Cookies

Our website may collect information such as your IP address, operating system, and browser type. We use cookies to enhance website functionality and improve user experience. You can refuse cookies through your browser settings, but this may affect website functionality.

12. Updates to This Privacy Policy

We may update this policy from time to time. Any changes will be posted on this page.

13. Contacting Our Data Protection Officer

If you have any concerns about how we process your data, you can contact our Data Protection Officer using the details provided in Section 10.

14. Contacting the Information Commissioner

If you are not satisfied with how we handle your data, you can contact the Information Commissioner’s Office (ICO) at www.ico.org.uk.

15. Contact Us

For any questions about this privacy policy, please contact us at: info@forgecare.co.uk.