Privacy Policy

1. Information We Collect

We may collect and process the following types of personal data:

1.1 Information You Provide Directly

• Contact Information: Name, email address, phone number, postal address
• Enquiry Information: Details you provide when making an enquiry through our contact form or by phone
• Care Assessment Information: Health conditions, care needs, medical history, and other relevant information for care planning
• Employment Information: If you apply to work with us, we collect CV details, qualifications, references, and employment history
• Payment Information: Billing details and payment card information (processed securely through third-party payment processors)

1.2 Information Collected Automatically

• Website Usage Data: IP address, browser type, device information, pages visited, time spent on pages
• Cookies and Tracking: Data collected through cookies and similar technologies (see our Cookie Policy)
• Analytics Data: Anonymous usage statistics collected via Google Analytics (only with your consent)

1.3 Sensitive Personal Data

For the provision of care services, we may process special categories of personal data including:

• Health and medical information
• Information about disabilities
• Dietary requirements (which may reveal religious beliefs)
• Racial or ethnic origin (for culturally appropriate care)

We only process this sensitive data where necessary for care provision and with your explicit consent or where required by law.

3. Legal Basis for Processing Your Data

We process your personal data based on the following legal grounds:

• Consent: You have given clear consent for us to process your data for specific purposes (e.g., marketing communications, cookies)
• Contract: Processing is necessary to fulfill a contract with you or take steps before entering into a contract
• Legal Obligation: We must process your data to comply with legal requirements (e.g., CQC regulations, safeguarding duties)
• Vital Interests: Processing is necessary to protect someone's life or prevent serious harm
• Legitimate Interests: Processing is in our legitimate business interests (e.g., fraud prevention, website security) and does not override your rights

6. How We Protect Your Data

We take data security seriously and implement appropriate technical and organizational measures to protect your information:

• Secure encrypted connections (HTTPS/SSL) for all website communications
• Password-protected systems with role-based access controls
• Regular staff training on data protection and confidentiality
• Secure cloud storage with encryption and access controls
• Regular backups and disaster recovery procedures
• Physical security measures for paper records (locked cabinets, restricted access)
• Data processing agreements with all third-party suppliers

While we take every precaution, no internet transmission is 100% secure. We cannot guarantee absolute security but continually review and improve our safeguards.

9. Third-Party Websites

Our website may contain links to external websites (e.g., Calendly for booking appointments). We are not responsible for the privacy practices of third-party sites. Please review their privacy policies before providing personal information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. The "Last updated" date at the top of this page indicates when changes were last made.

Significant changes will be communicated via email (for service users) or a prominent notice on our website.