Privacy Policy

At Kripa Blossom, safeguarding your privacy is of utmost importance to us. We are dedicated to ensuring the protection of your personal information. Whenever you engage with Kripa Blossom and provide identifiable information, rest assured that we will handle it in strict accordance with the principles outlined in this privacy statement.

Contact Information for our Data Protection Officer

To address any enquiries concerning this privacy notice or the processing of personal data by Kripa Blossom, please reach out to our Data Protection Officer using the contact details provided below:

Name: Seun Majekodinmi - Data Protection Officer

Email: info@kripablossom.com 

Purpose of Data Collection and Processing

We collect and process your personal data based on various lawful grounds, including but not limited to:

• Consent: We always seek your explicit consent to process your data, ensuring the provision of specialised case management services to you.
• Contract: If we have a contractual agreement with a third party necessitating the processing of your personal data, we fulfil this obligation.
• Legal Obligation: As healthcare professionals, we are mandated by law to maintain accurate clinical records and may be legally required to share personal information in court proceedings.

Nature and Collection of Information

We may gather the following information via email, telephone calls, postal correspondence, questionnaires/forms, or face-to-face interactions:

• Name
• Date of Birth
• Contact details (address, email, phone)
• Medical history and lifestyle details, including inputs from other healthcare providers
• Solicitor particulars
• Employer information
• Assessment data
• Photographs of clients participating in activities
• Information about clients' properties
• Details about insurance companies
• Contacts of key individuals related to the client, e.g., family, support staff, etc.

Usage of Collected Information

• The information we collect serves the following purposes:
• Communication with you/your representative regarding your treatment
• Professional record-keeping of client data
• Provision of comprehensive case management and care or support services
• Sharing information with pertinent parties as required

Data Retention

Personal data is retained as per the principle of necessity outlined by the Regulation. For adults, we retain data for 7 years, and for children, data is retained until 7 years following their 18th birthday, unless an extended period is deemed necessary upon review. Details on retention principles can be found at the following link: https://ico.org.uk/for-organisations/guide-to-data-protection/principle-5-retention/

Your Rights

Under GDPR, you possess a range of rights, surpassing those granted by the Data Protection Act 1998. We generally respond to your rights requests within a month, with some exceptions.

• Right to be Informed: This privacy notice provides you with the requisite information about data processing.
• Right of Access: You can request access to your personal data and specified information as per GDPR.
• Right to Rectification: You can request rectification of inaccurate data we hold about you.
• Right to Erasure: You have the right to request the erasure of your personal data, subject to legal bases.
• Right to Restriction of Processing: You can ask for processing restrictions under specific circumstances.
• Right to Data Portability: This right is applicable if data processing is based on consent or contractual purposes, in electronic form.
• Right to Object: You can object to processing based on your situation, with certain exceptions.
• Rights in Relation to Automated Decision-Making: You can object to decisions solely based on automated processing.
• Right to Complain: If dissatisfied with our data processing, you can      lodge a complaint with the Information Commissioner. For further details, you can contact:

Information Commissioner's Office
Wycliffe House,
Water Lane,
Wilmslow, SK9 5AF
Website: https://ico.org.uk