Who we are

Valuing Care Ltd (“Valuing Care”, “we”, “us”) is a specialist cost-of-care consultancy working with local authorities and NHS organisations. We are registered in England and Wales under company number [number], and our registered office is at [address].

We are registered with the Information Commissioner’s Office (ICO) under reference Z2110673.

Our Data Protection Officer

Our Data Protection Officer is Christine Hicks, Director and Company Secretary. You can contact her at christine.hicks@olm.group with any question about this notice or about how we use your personal data.

When we are the Data Controller

We decide how and why your personal data is used (we are the Data Controller) in the following cases:

• Business contacts. We hold the contact details of people working for other organisations, such as local authorities, NHS bodies and care providers. We use them for contract management, service communications and marketing about our services.
• Our employees. Staff are covered by our separate Employee Privacy Notice.

When we act on behalf of our customers

When we provide Purchaser and our other services to local authorities and NHS organisations, we process personal data on their behalf. In those cases we are the Data Processor and our customer is the Data Controller. This includes information about people who receive care.

If your data is held for this purpose, the privacy notice of the relevant council or NHS organisation explains how it is used. Please send any request about it to that organisation. If you contact us instead, we will direct you to them and let them know about your request.

What information we collect about business contacts

We collect your name, job title, organisation, work email address, work phone number, and a record of our correspondence and meetings with you. [If applicable: we also collect information about how you interact with our emails and website.]

Where we get it

We get this information directly from you, and from publicly available sources such as organisation websites and professional networking sites. [Confirm the sources.]

Why we use it and our lawful basis

We use business contact data on the basis of our legitimate interests: managing our contracts and relationships, providing our services, and telling public-sector organisations about services relevant to their role. [Confirm with the DPO.]

Who we share it with

We do not sell your data. We use trusted service providers to run our business, including [CRM provider, email and office software provider]. These providers process data only on our instructions.

[If data is transferred outside the UK: name the countries and the safeguards in place, for example the UK International Data Transfer Agreement or adequacy regulations.]

How long we keep it

We keep business contact data for [period / criteria, for example “as long as there is an active business relationship, and for X years after our last contact”].

Your rights

You have the right to:

• be informed about how we use your data (this notice)
• request a copy of your data (a Subject Access Request)
• have inaccurate data corrected
• have your data erased in certain circumstances
• restrict how we use your data
• data portability, where it applies
• object to our use of your data, including an absolute right to object to direct marketing at any time.

We do not carry out automated decision-making or profiling.

We do not act as the Data Controller for any information about children.

To exercise any of these rights, contact our Data Protection Officer. Requests can be made verbally or in writing. We will respond without undue delay and within one month at the latest.

Complaints

If you are unhappy with how we have handled your data, please contact our Data Protection Officer first. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

Changes to this notice

We review this notice regularly and will post any updates on this page.