Privacy Notice

About HPC - Healthcare Property Consultants:

Established in 2009, HPC – Healthcare Property Consultants (also known as HPC) are an independent firm offering specialist advice and services to those operating and investing in the UK care sector. HPC’s services include the sale and acquisition of property, land and businesses, valuation, strategic advice, business appraisal and feasibility studies.

We are the Data Controller.

As we set the rules and reasons for collecting personal data from you, we are classed as the Controller of your personal data. This means that we determine what happens to your data and it is our responsibility to ensure that your data is controlled effectively and is protected at all times. Should you have any questions about the processing of your personal data you can contact us directly using the following methods: [post] Healthcare Property Consultant, Commer House, Station Road, Tadcaster LS24 9JF. [Telephone] – 01904 222107. [Email] – enquiries@healthcarepc.co.uk

Why we need your personal data and what we need to do with it.

Your personal data will be managed in accordance with the new Data Protection Regulation – (GDPR) under the following principles:

1. Lawfulness, Fairness and Transparency:

We will only process your data if you the ‘data subject’ has given explicit consent to do, or we are required to process your personal data as part of the performance of your contract with HPC Healthcare Property Consultants

2. Purpose Limitation:

Your data will only be collected for specified, explicit, contractual as well as legitimate purposes, and will be collected for:

• Marketing purposes
• Newsletter subscriptions
• Other products/services provided by HPC – Healthcare Property Consultants that will be offered to you the ‘data subject’ under legitimate interest

If we have collected your information to fulfil a legal contract we will use it to communicate with you about similar services, products or industry news.

If we have collected your information for a specific purpose, we will not use it for anything else unless you have been informed and, where relevant, your permission obtained.

3. Data Minimisation:

We will not ask for more information than we need for the purposes for which we are collecting it.

4. Data Accuracy:

We will update our records when you inform us that your details have changed.

5. Storage Limitation:

We will only retain your personal data for the length of time needed to complete the initial request.

6. Integrity and Confidentiality:

We have implemented appropriate technical and operational measures to protect the integrity and confidentiality of your personal data. Where consent has been obtained to process your data, you have the right to be forgotten and your personal data to be erased without undue delay. Where we require to hold your data (for contractual reasons), your data will be removed once the term of the contract has expired.

Policies and processes we have to protect your rights as the ‘Data Subject'

Under the GDPR you have a number of ‘rights’ which you can freely exercise at any time. Should you wish to do so, please contact the person named at the end of this Notice. These rights include;

• the right to object to automated decision making, whereby we may use your data for profiling purposes to make a decision.
• the right to access all of the data we process on you. This will be supplied to you within 30 days from the request being received.
• the right to be forgotten and your personal data be erased without undue delay
• the right to object/withdraw your consent
• the right for any inaccurate data we hold on you to be corrected. We will make your amendments without undue delay
• the right to restrict us from processing your personal data which can be reversed through consent from you the ‘data subject’
• the right to have your personal data to be ported from HPC – Healthcare Property Consultants to another controller

We will provide you with a full explanation if we need additional time to comply or where we cannot comply with one of these rights within the timescales required by the Regulation.

Transferring personal data

Due to the nature of the business, we work with a variety of GDPR compliant businesses who act as our processors which store and process your personal data on the instruction of HPC Healthcare Property Consultants ‘the controller’. Below is a list these processors:

• Vital Technology Group
• Designition Ltd
• Colour Options Ltd
• MailChimp

International Transfers

At no time does your personal information leave the EU.

Talking to us about your rights or this Notice

Should you wish to speak to us about the way we process your data, or wish to exercise your rights as listed above, please contact HPC HealthCare Property Consultants - Data Protection lead, Claire Barker; cb@healthcarepc.co.uk

However, if you wish to direct your questions to the ICO, you can find their details at www.ICO.org.uk