Data Protection Statement – Resilience Healthcare Ltd

At Resilience Healthcare Ltd, we respect your right to protection of your personal data. We take the protection of your personal data very seriously. Below you will find our current data protection statement and some helpful guides on the terms used within it. It outlines how we collect, use, and protect your data when providing our services, as well as your rights and how you can exercise them.

How might we collect your information?

We may collect personal data in the following ways:

• If you use our services: If you are using Resilience Healthcare Ltd services, you or someone acting on your behalf will have provided personal information, including but not limited to your name, address, and contact details, during the enquiry and onboarding process. During the course of receiving our services, we may collect additional information, including health-related data, in line with providing you with the best possible care.
• Prospective Customers: When you make an enquiry about our services, we will collect information about you to process your application and provide relevant services.
• Contact Person: If you are listed as a contact person for someone applying for or receiving services from Resilience Healthcare Ltd, your contact details may have been provided with your consent for communication purposes.
• Website Visitors: If you fill out a form on our website, we collect personal information provided by you, which is shared with the relevant team within our business. Additionally, as a user of our website, we may capture information about how you use our site. The management of this data will align with the cookie settings you have chosen.
• Suppliers: If you are a supplier to Resilience Healthcare Ltd, we may have collected business and contact details, as well as financial information Resilience Healthcare Ltd may receive your information via phone, email and/or physical documents.

What do we do with your data?

We use your data to ensure that we can provide the best possible care and services, tailored to your needs. Specifically:

• In the Delivery of our Services: Your personal data, including health-related information, helps us deliver our healthcare and social care services effectively.
• Measuring how we Perform as a Business: We use data to measure how we perform at providing our services, or to see how you are engaging with Resilience Healthcare Ltd and gain insights to continually learn and improve the services we provide.
• Suppliers: We collect and process your data to fulfil our contractual or commercial obligations. This information may also be used to manage our relationship with you.

The types of personal data we may hold include your name, date of birth, address, contact details, and in certain cases, health or care-related data, as well as financial information where necessary.

Who might we share your data with?

At Resilience Healthcare Ltd, we take great care in how we share your personal data. In certain cases, we may share your data with trusted third parties, including but not limited to:

• Healthcare Professionals: We may share your personal data with healthcare professionals, such as doctors, nurses, or carers, as part of delivering our services.
• Service Providers: We may share your data with service providers, such as IT support, payment processors, or consultants, who assist us in providing services to you. These third parties are only allowed to process your data under our instructions and must comply with data protection laws.
• Legal and Regulatory Authorities: We may share your information with regulatory bodies or law enforcement where required by law, such as in cases of compliance with healthcare regulations or other statutory obligations.
• Within our Business group: We may share your personal data within our group of companies. This is to ensure that we can provide a seamless and coordinated service across all areas of our business where necessary. We remain committed to ensuring that your data is handled securely and in compliance with data protection regulations.
• Others with Your Consent: If you have provided explicit consent, we may share your data with other third parties as necessary.

We only share your data when it is necessary to provide our services, comply with the law, or with your explicit consent.

Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent: Where you have provided your consent for the use of your personal data, especially in cases where it is not necessary for fulfilling our services but helpful for enhancing your experience.
• Contractual Obligation: In cases where we need your personal data to fulfil the terms of a contract (e.g., to provide you with healthcare services or as part of a supplier agreement).
• Legal Obligation: We may need to process your data to comply with a legal obligation, such as those related to healthcare regulations, taxation, or data protection law.
• Legitimate Interests: In some cases, we process your personal data because it is in our legitimate business interests to do so. This is particularly relevant when we use data to monitor and improve our services or for administrative purposes.

Your Rights

You have the following rights concerning your personal data:

• Access: You can request a copy of the personal data we hold about you and how it is processed.
• Rectification: If the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it.
• Erasure: You may request that we delete your personal data, subject to certain conditions (e.g., if the information is no longer necessary for the purpose for which it was collected).
• Restriction: You can request that we limit the processing of your personal data in certain circumstances.
• Objection: You have the right to object to the processing of your data where it is processed under legitimate interests.
• Data Portability: You can request that we transfer your data to another service provider in a commonly used, machine-readable format.
• Supervisory Authority: If you remain dissatisfied with our actions, you have the right to lodge a complaint with the Data Protection Commission.

To exercise any of these rights or to raise any concerns about how we handle your personal data, you can contact our Data Protection Officer (DPO) at DPO@Resilience.ie

Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including to satisfy any legal, accounting, or reporting requirements. Specific retention periods are based on statutory requirements and the needs of our services.

Changes to this Statement

We may update this data protection statement from time to time. Any changes will be posted on this page, and where appropriate, notified to you by email or other means.