Starlight Support Services Ltd provides supported accommodation, supported living, domiciliary care servcies.

As data controller, we are responsible for determining how personal information is collected and used.

We may collect and process personal information including:

• Name, address and contact details

• Date of birth

• Emergency contact information

• Employment information

• Recruitment and application information

• Referral information

• Health and support needs information

• Correspondence and communications

• Website enquiry information

• Information provided through forms, telephone calls, emails and meetings

When you visit our website, we may also collect technical information such as:

• IP address

• Browser type

• Device information

• Website usage data

• Cookie information

• Deliver care and support services

• Manage referrals and enquiries

• Recruit and manage staff

• Safeguard children, young people and vulnerable adults

• Meet legal and regulatory obligations

• Investigate complaints and incidents

• Improve our services

• Communicate with service users, families, professionals and stakeholders

• Protect the health, safety and wellbeing of those we support

We process personal information under one or more of the following lawful bases:

• Consent

• Performance of a contract

• Compliance with a legal obligation

• Protection of vital interests

• Performance of a task carried out in the public interest

• Legitimate interests

Where special category information is processed, we ensure that an additional condition under UK GDPR is also met.

We may share information where necessary with:

• Local Authorities

• Healthcare professionals

• Social workers

• Regulatory bodies

• Safeguarding agencies

• Legal advisers

• Auditors

• Information technology providers

• Emergency services

• Other organisations where required by law

We will only share information where there is a lawful basis to do so.

Starlight Support Services Ltd takes the security and confidentiality of personal information seriously. We have appropriate technical and organisational measures in place to protect personal information from unauthorised access, loss, misuse, disclosure, alteration, or destruction.

Personal information is only accessible to authorised individuals who require access to perform their duties and responsibilities.

All employees, agency staff, contractors, and volunteers have a legal, professional, and contractual duty to keep personal information secure and confidential.

The measures we have in place to protect personal information include:

• Mandatory Data Protection, Information Governance, and Cyber Security training for staff

• Compliance with the Data Security and Protection Toolkit (DSPT) requirements

• Policies and procedures for the secure handling, storage, retention, and disposal of personal information

• Role-based access controls and secure password-protected systems

• Regular monitoring and auditing of information systems

• Information security incident and data breach reporting procedures

We regularly review our security arrangements to ensure personal information remains protected and handled in accordance with data protection legislation and recognised industry standards.

Under data protection legislation, you have a number of rights regarding your personal information.

These include:

• The right to be informed

• The right of access

• The right to rectification

• The right to erasure

• The right to restrict processing

• The right to data portability

• The right to object

• Rights relating to automated decision making and profiling

Some rights may only apply in certain circumstances.

If you have any questions about how we use your personal information or wish to exercise your information rights, please contact our Data Protection Officer.

Morakinyo E. Odunayo

Email: mo@starlightsupportservices.co.uk

Telephone: 01212317091

Address: Starlight Support Services Ltd

3, Brindley Place, B1 2JB,

Birmingham.