Legal basis for gathering and processing data
What are the lawful basis for Chrysalis Care processing data?
Chrysalis Care will process personal data in line with one of three lawful reasons. This will either be under ‘contract’ for employees and Local Authorities, ‘legal obligation’ for employees and ‘public task’ for Looked After Children and Local Authorities.
When will we collect personal data?
For foster carers and their household members:
At initial enquiry stage
Fostering application process
During and throughout your registration as a foster carer
Website online application form and Chrysalis Care social media sites
Job application process
Contract of employment
Duration of employment
What sort of personal data do we collect?
We may collect the following information:
name, age, job title
Contact information including email address
Demographic information such as postcode preferences and interests
Other information relevant to fostering or job applications applications
Health, education, qualification, registrations
ID for statutory requirement data
Financial information for Foster carers
How and why we use your personal data?
Fostering is a public task that requires a suitability assessment. Chrysalis Care are obligated to provide personal data and information at the request of local authorities and other stakeholders, such as OFSTED local safeguarding boards etc.
The data subject will always be made aware beforehand of any information that is shared with a third party.
Chrysalis Care will ensure personal data is shared electronically via secure e-mail and passwords.
As an employer Chrysalis Care are required under legal obligation to provide HMRC with financial information.
The data processing is used to enable Chrysalis Care to make an informed decision about the suitability of the employee to undertake a public task related to the safeguarding of looked after children.
How we protect your personal data:
SecurityChrysalis care or committed to ensuring that your information is kept secure.
In order to prevent un-authorised access or disclosure we have put in place suitable physical, electronic and managerial procedures to safeguard security information.How long do we hold your information?
Type of Data
Suggested Retention Period
Staff Personnel files including training records and notes of disciplinary and grievance hearings
6 years from the end of employment
References and potential litigation
Application forms/interview notes
At least 6 months from the date of the interviews
Time limits on litigation
Foster carer and Domiciliary carer records and personal data
from date of resignation or deregistration
Fostering Regulations 2011
Income tax and NI returns, including correspondence with tax office *
At least 3 years after the end of the financial year to which the records relate
Income Tax (Employment) Regulations 1993
Children and Young People records and data
10 years from date of discharge
Wages and Salary records *
Taxes Management Act 1970
For foster carers:
Consent to share information with a third party
For the purposes of statutory bodies to undertake checks
Relevant lawful statutory agencies and advisory bodies
Local authorities for Contract monitoring purposes
What are your rights over your personal data?
You have the right to request:
*access to your personal data
*the correction of your personal data when incorrect out of date or incomplete.If you have any questions or queries then please contact Chrysalis DPO Data Protection Officer:
7 Princes Street
Jo.firstname.lastname@example.org 0208 2982800
If for any reason you feel that your data has not been handled incorrectly or you are unhappy with the response to any requests you have made regarding the use of your personal data you have the right to lodge a complaint with the information Commissioners office.Contacting the regulator:
You can contact them by calling 03031231113
Or go online to www.ico.org.uk/concerns