Liverbird Supported Living (“we”, “our”, “us”) is committed to protecting the privacy and security of the personal information of the children we support, their families, and the professionals we work with. This Privacy Policy explains how we collect, use, and protect personal data in line with the **UK General Data Protection Regulation (UK GDPR)** and the **Data Protection Act 2018**.
1. Who We Are
Liverbird Supported Living provides supported accommodation and care for children aged 16–18. We act as a **data controller** when we process personal data relating to our services.
2. What Personal Data We Collect
We may collect and process the following information:
* Personal details (name, date of birth, contact details).
* Information relating to care needs, health, and education.
* Records of communications with us.
* Professional information from local authorities, social workers, and other agencies.
We only collect information that is necessary to provide safe and effective support.
3. How We Use Personal Data
We use personal data to:
* Provide supported accommodation and care services.
* Safeguard the welfare of children in our care.
* Communicate with families, local authorities, and professionals.
* Comply with legal and regulatory requirements.
4. Legal Basis for Processing
We process personal data under the following legal bases:
* **Contractual obligation** – to deliver care and accommodation services.
* **Legal obligation** – to meet safeguarding and regulatory requirements.
* **Legitimate interests** – to ensure safe and effective service delivery.
* **Consent** – where required for specific purposes.
5. Sharing Personal Data
We may share information with:
* Local authorities, social workers, and other professionals involved in a child’s care.
* Regulatory bodies as required by law.
* Service providers who support our operations (e.g., IT, security), under strict confidentiality agreements.
We never sell personal data to third parties.
6. How Long We Keep Data
We keep personal data only for as long as necessary to fulfil our legal, regulatory, and contractual obligations. When it is no longer needed, it is securely deleted or destroyed.
7. Your Rights
Under UK GDPR, individuals have the right to:
* Access their personal data.
* Request correction of inaccurate data.
* Request deletion of data where appropriate.
* Restrict or object to certain types of processing.
* Data portability (in limited circumstances).
To exercise these rights, please contact us.
8. Security of Data
We take appropriate technical and organisational measures to protect all personal information from loss, misuse, or unauthorised access.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Any significant changes will be communicated on our website.
10. Complaints
If you are unhappy with how we use your data, please contact us in the first instance. You also have the right to lodge a complaint with the **Information Commissioner’s Office (ICO)**:
[https://ico.org.uk](https://ico.org.uk)