• Care profile data is collected via email, post and in person. Once transferred to the main database any written notes are shredded and emails are deleted.

• Guest personal expenditure & Medication Administration records are created throughout a holiday. Paper copies are scanned to computer at the end of the holiday then shredded. E-copies are deleted after two years, unless early deletion is requested.

DATA IS HELD SECURELY

• On a password protected database, and password protected company computers.

• One Care Profile paper copy is printed and stored in a locked cupboard between holidays.

• Staff are made aware that breaches of confidentiality amount to gross misconduct and may lead to disciplinary procedures and possible dismissal.

• All customers and staff have a right to request copies of any data we are holding relevant to them and we will aim to provide them with this within 72 hours of the request being made.

WHY THE DATA IS NEEDED AND WHAT IT WILL BE USED FOR

• Fields of customer data collected: Contact, medical, abilities, support needs, interests.

• Data is collected for the purpose of publicising our holiday programme, relaying necessary information and providing safe & enjoyable holidays.

• Information will be kept up to date through regular reviews.

• If no contact has been made within 6 years, data will automatically be deleted.