Organization What we share Why
Wanstor (Third party IT provider)

We may inadvertently share information about you with our third party provider when your information is hosted on our IT systems.

Information about you that you may request in a Subject Access Request.

Wanstor support and manage our IT systems. Equipment that forms our IT systems and infrastructure will be owned by Wanstor and as such your information may be stored on Wanstor equipment on behalf of Hestia.

 

Wanstor provides Hestia with security consultancy and data protection services. Wanstor consultants may have access to information you request in a SAR in order to carry out our obligations under UK GDPR
The Government and Regulators Where we have a contract with the government, we will share information specifically required by the contract. This will often be anonymized data.

To support the requirements of the contract.

To provide statistics on the services we are providing.
Local Authorities Information relevant to the contract. Hestia have various contracts with local authorities that require us to share certain information with them.
NHS Information about you that is relevant to the services we are providing you.

Hestia may have a contract with the NHS where we are providing services on their behalf, we may share information regarding you as required by this contract.

 

We may also share information about you with the NHS to help provide you with support as part of a referral where we have a legal basis or your consent for doing so.
Hestia partners / other care or support providers Information about your needs or circumstances Hestia work closely with it’s partners and other organizations that provide similar services to Hestia. We may share your information with them to help provide you with services and support your needs. We only do this where we have a legal basis or your consent for doing so.
Legal Supplier

Information relevant to you exercising your data subject rights under UK GDPR.

 

Information relating to your complaints
We may share your information with our legal suppliers where Hestia require legal support to make decisions about you.
Charities Information about your needs or circumstances To help refer you to suitable charities that can assist you where we have a legal basis or your consent for doing so.
Other Suppliers Information about you relevant to the services the supplier is providing for Hestia We may need to share specific information about you with our suppliers who support us in providing a service to you.
Payment Providers

We will share transaction data with our payment services providers for the purposes of processing your payments, refunding and dealing with complaints and queries relating to payments and refunds.

 

You can find information about the payment services providers' privacy policies and practices at:

- Stripe https://stripe.com/gb/privacy

- GoCardless  https://gocardless.com/legal/privacy/

- Paypal https://www.paypal.com/ie/webapps/mpp/ua/privacy-full

To complete your payment.

To comply with legal requirements.
Auditors

Information about the services Hestia provide you

Where Hestia contracts require us to be audited or where we are required by a regulator, we may share information specific to the audit.

Emergency services / safeguarding teams

Information specifically relating to the incident or that is relevant in order to address a risk to you or others.

If we believe you or another person is at risk we may share your information with another organization or third party to help keep you or others safe.