Privacy Notice

At Ryde House Group we are committed to protecting and respecting your privacy.

This policy explains when and why we collect personal information, how we use it, the conditions under which we may disclose it and how we will keep it secure.

This policy is compliant with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We may need to change this policy from time to time. If we do then we will try to communicate these changes directly to you however it may not always be possible. Please check this document from time to time to see what, if any, changes have been made.

Any questions in relation to this policy or our privacy practices should be sent by email to dpo@rydehouse.com or in writing to:

Data Protection Officer Ryde House Ryde House Drive Ryde Isle of Wight PO33 3FE

Who are we?

We are Ryde House Group and we provide care and support to adults with learning disabilities through our residential care homes, our day services, and the support we provide to people in their own homes and in the community.

Ryde House Homes Ltd (company number 05195749) is the data controller for the personal information described in this notice.

What is Personal Information?

The UK GDPR defines personal information as any information relating to an identified or identifiable natural person. An identifiable natural person is anyone who can be identified directly or indirectly by reference to the information held. Your personal data may include but is not limited to: name, job title, date of birth, home address, telephone number/s, email addresses, emergency contact, employee number, photo.

'Special categories' of personal data (formerly called 'sensitive' data) may relate to racial or ethnic origin, religious beliefs, data concerning physical and/or mental health, and data relating to sexual orientation.

We may hold and use information about you because you are:

A current, former or prospective employee
A representative of a current, former or prospective employee
A current, former or prospective service user
A family member, friend or representative of a current, former or prospective service user
A professional involved in the care or support of any of our current, former or prospective service users
A professional involved in the support or welfare of a current, former or prospective employee
A representative of a third party agency with whom we work
A contractor involved in the provision of goods or services to us
Any other natural person contacting us or working with us in any other capacity

What is Privacy?

Privacy is the confidentiality of your personal information. This is of paramount importance to Ryde House Group.

We are registered with the Information Commissioner as required under data protection law and are committed to compliance with the UK GDPR.

What information do we collect and how?

Information that you give us:

You may provide us with information by completing one of our forms or by contacting us by phone or email.

If you contact us we will hold your personal information for as long as is required to deal with that request.

What is our legal basis for processing your personal information?

In order that processing is compliant with data protection legislation we must identify a lawful basis for processing personal data.

Personal information obtained during recruitment:

Information related to recruitment is processed because it is necessary to take steps at your request before entering into a contract, and to meet our legal obligations as a registered care provider, including our duty to carry out safe recruitment checks.

Personal information obtained during employment:

We require information in order to manage your employment with Ryde House Group. Information used for this purpose is processed on the basis of contract.

Information related to any aspect of payroll is processed on the basis of legal obligation.

Where any additional information is required we will process this under either legitimate interests or, in some cases, on the basis of consent. We will always make you aware of the lawful basis we are relying on.

Personal information obtained for provision of care services:

Personal information obtained in relation to the provision of care services is processed because it is necessary to meet our legal obligations as a registered care provider, and in our legitimate interests and those of the person we support. Where the information concerns someone's health or care, we also rely on the provision of health or social care as our additional condition, and on safeguarding where a concern arises.

Information about visitors to our premises:

Some of our buildings have CCTV in outdoor areas, and some of our homes have video doorbells. These operate in our legitimate interests in keeping our buildings and the people in them safe. Signage is displayed wherever a camera operates.

Your rights as a Data Subject

Under the legislation you may have the following rights depending on the lawful basis under which we process your information:

The right to be informed about our collection and use of your personal data.
The right to access the personal data we hold about you.
The right to have your personal data rectified if any of your personal data held by us is inaccurate or incomplete.
The right to erasure, i.e. the right to ask us to delete or otherwise dispose of any of your personal data.
The right to restrict (i.e. prevent) the processing of your personal data.
The right to object to us using your personal data for a particular purpose or purposes.
The right to data portability. This means that, if you have provided personal data to us directly, we are using it with your consent or for the performance of a contract, and that data is processed using automated means, you can ask us for a copy of that personal data to re-use with another service or business in many cases.

There is no charge for exercising these rights. We will respond within one month, and will tell you if we need longer because your request is complex. We may need to check your identity first, and where you are acting on someone else's behalf we will need evidence of your authority to do so.

We do not make decisions about anyone using automated processing alone.

For further information about use of your personal data or exercising your rights please contact the Data Protection Officer.

Further information about your rights can also be obtained from the Information Commissioner's Office (ICO) or the Citizens Advice Bureau.

How long will you keep my personal data?

We will hold your information for no longer than is necessary and in line with our retention plan. We will only process your information for the purposes that it was obtained. How long we keep something depends on what it is, why we hold it, and how long the law or our regulator requires us to keep it.

For further information on our retention plan please contact the Data Protection Officer.

How and where do you store my personal data?

Your personal information is stored securely in line with UK data protection principles. We aim to keep it in the United Kingdom. Where a supplier stores or accesses information outside the UK, we make sure an approved safeguard is in place.

For further information please contact the Data Protection Officer.

How do you share my personal data?

We may share personal information with the following individuals or organisations:

Regulatory or supervisory bodies (CQC, HSE, ICO, HMRC)
Local authority and NHS commissioners
Insurance providers
Police or law enforcement agencies
Safeguarding authorities
Health services and health professionals
Occupational health services
The companies that provide our care planning, rota, payroll and IT systems, who act on our behalf and may not use your information for their own purposes

We will never lease, distribute or sell your personal data to any third parties.

We will always try to be open about sharing and to ask you first. We will share information without asking where the law requires it, where someone is at risk of harm, or where we must notify the Care Quality Commission, the local authority or the police.

Complaints

If you are unhappy or wish to complain about how your information is used, you should contact a member of staff in the first instance to resolve your issue. If you are still not satisfied, you can complain to the Information Commissioner's Office. Their website address is www.ico.org.uk and their telephone number is 0303 123 1113.

The Data Protection Officer of Ryde House Group is Spencer Wilby. Please contact dpo@rydehouse.com for more information.

We keep our privacy notice under review, and we will make new versions available on our privacy notice page at www.rydehouse.com/privacy-notice.

This privacy notice was last updated on 25 August 2026.