Confidentiality Policy
Purpose & Scope
This policy describes how Respire Homes handles sensitive or confidential information, both digital and physical, relating to clients, staff, and operations.
Definition of Confidential Information
“Confidential information” includes personal data, medical or sensitive client records, internal strategies, financial info, and proprietary materials.
Obligations and use
- Only authorised personnel may access confidential information as needed.
- You must not share, copy, or disclose it without permission.
- Use strong passwords, secure storage, and encrypted transmission.
Breach & Reporting
If a breach or unauthorized disclosure occurs, the person discovering it must report to the Data Protection Officer (or designated person) immediately. An investigation will follow, and affected parties notified if required.
Retention & Disposal
When confidential documents are no longer needed, they should be securely destroyed (shredded, secure deletion). Digital files should be securely wiped.
Responsibility & Review
The leadership (or board) assigns oversight of this policy. The policy is reviewed annually (or more often if needed).
