Complaints, SARs & FOI
Introduction
Tiger Lily Care holds and uses personal data for the purposes of Complaints, Subject Access Requests, and Freedom of Information Requests.
We collect and store information about your health and care that has been received directly from you or organisations such as Local Authorities, GP Practices, NHS Trusts, and NHS Integrated Care Systems.
Under UK GDPR and the Data Protection Act 2018, you have the right to see or be given a copy of any personal data we hold about you. To gain access to a copy of your information, you will need to make a Subject Access Request (SAR) to Tiger Lily Care. You can do so by contacting us.
Under the Freedom of Information Act 2000, you have the right to request copies of non-personal information held by Tiger Lily Care, regarding services we provide within its scope. To gain access to a copy of your information, you will need to make a Freedom of Information (FOI) Request to Tiger Lily Care.
Should you wish to make a complaint to Tiger Lily Care, then there many be a need for us to view and access your patient data or request some from you directly. This will allow Tiger Lily Care to investigate the complaint. Information on our complains process can be found here: https://tigerlilycare.co.uk/legal/complaints-policy
Purpose of the processing
Legal obligations of Tiger Lily Care to manage, investigate and respond to requests for copies of personal data, FOI requests, and complaints.
Lawful Basis for the processing
The lawful justifications for the processing and possible sharing of this data are:
Article 6(1)(c): “the processing is necessary for compliance with any legal obligation to which the controller is subject”
Where your complaint or SAR involves processing of special category data the relevant condition for processing that data will be Article 9(2)(g) “substantial public interest” as defined by the Data Protection Act 2018, Schedule 1, Part 2, Section 6(2)(a) “the exercise of a function conferred on a person by an enactment or rule of law”.
Data Recipient or Categories of Recipient
Where a complaint you make is about another organisation, we may share details of your complaint with that organisation. We would only do so after informing you of this.
Right to Object
You have the right under Article 21 of the UK GDPR to object to your personal information being processed. Please contact Tiger Lily Care if you wish to object to the processing of your data. You should be aware that this is a right to raise an objection which is not the same as having an absolute right to have your wishes granted in every circumstance.
Tiger Lily Care processes personal data under Article 6(1)(c) on a lawful and legitimate basis where the organisation is obliged under law to comply with
- The UK General Data Protection Regulations (GDPR)
- The Data Protection Act 2018
- The Freedom of Information Act
- The NHS Constitution
- The Local Authority Social Services and National Health Service Complaints (England) Regulations 2009
By complying with these laws, Tiger Lily Care has compelling legitimate grounds for the processing which override the interests, rights and freedoms in the right to object.