Privacy Policy

Last reviewed: {{PLACEHOLDER: Date}}

1. Who we are

CareCottage Support Ltd (“we”, “us”, “our”) is registered in England and Wales under company number {{PLACEHOLDER: Company number}}, with its registered office at {{PLACEHOLDER: Registered address, Town, County, Postcode}}.

We are the data controller of personal data collected through this website and in connection with our care and support services.

We are registered with the Information Commissioner's Office (ICO) under registration reference {{PLACEHOLDER: ICO registration number}}.

If you have any questions about this policy or how we handle your personal data, please contact our Data Protection contact:

2. What personal data we collect

2.1 Information you provide to us

When you use our contact form, we collect:

• Your name
• Your email address
• Your telephone number (where provided)
• The nature of your enquiry
• Any information you include in your message

If you submit a job application or careers enquiry, we may additionally collect:

• Employment history and qualifications
• References
• Right to work documentation
• DBS disclosure information (Enhanced, including Adults' Barred List, where required)

2.2 Information we collect automatically

When you visit our website, we may collect certain technical information automatically, including:

• IP address and browser type
• Pages visited and time spent on pages
• Cookie data (see our Cookie Policy)

Analytics data is only collected where you have given your consent via our cookie banner.

3. Lawful basis for processing

We process your personal data under the following lawful bases under Article 6 of the UK GDPR:

Where we process special category data (such as health information relating to care recipients), we rely on Article 9(2)(h) of the UK GDPR (processing for the purposes of preventive or occupational medicine, medical diagnosis, or the provision of health or social care).

{{PLACEHOLDER: Your solicitor should confirm the lawful bases applicable to your specific processing activities, particularly for health and social care data.}}

4. How we use your data

We use the personal data we collect to:

• Respond to your enquiry or care referral
• Arrange and deliver care and support services
• Process job applications and conduct pre-employment checks
• Comply with our legal and regulatory obligations (including CQC registration requirements and safeguarding duties)
• Improve our website and services

We do not sell your personal data to third parties.

5. Who we share your data with

We may share your personal data with:

• Regulatory bodies: the Care Quality Commission (CQC), Local Safeguarding Adults Boards, or other statutory bodies where required by law or to protect a service user's safety
• IT and service providers: companies that host our website or provide communication tools, bound by appropriate data processing agreements (DPAs)
• DBS checking services: for employment vetting purposes
• Professional advisers: solicitors, accountants, or insurers where required

We require all third parties to respect the security of your data and to treat it in accordance with the law.

6. International transfers

We do not routinely transfer personal data outside the United Kingdom. If this changes, we will ensure that appropriate safeguards are in place in accordance with UK GDPR Chapter V.

7. Data retention

{{PLACEHOLDER: Retention periods for health and social care records are subject to specific regulatory and legal requirements. Please confirm with your solicitor.}}

8. Your rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access (Article 15): You can request a copy of the personal data we hold about you (a Subject Access Request).
• Right to rectification (Article 16): You can ask us to correct inaccurate or incomplete data.
• Right to erasure (Article 17): You can request that we delete your personal data in certain circumstances (“the right to be forgotten”).
• Right to restriction (Article 18): You can ask us to restrict how we process your data in certain circumstances.
• Right to data portability (Article 20): You can request your data in a structured, machine-readable format where processing is based on consent or contract.
• Right to object (Article 21): You can object to processing based on legitimate interests.
• Right to withdraw consent: Where we rely on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at {{PLACEHOLDER: privacy@carecottagesupport.co.uk}}. We will respond within one calendar month.

9. How to complain

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Telephone: 0303 123 1113
• Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

We would appreciate the opportunity to address your concerns before you contact the ICO, so please contact us in the first instance.

10. Cookies

For full details of the cookies we use, please see our Cookie Policy.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the “Last reviewed” date at the top of this page. We encourage you to review this policy periodically.