Privacy Policy

---

CARIAD CARE LTD (“we”, “us”, “our”) is committed to protecting the privacy and security of the personal information we collect from the individuals we support, their families, our staff, and anyone who interacts with our services. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and all relevant care‑sector regulations.

1. Who We Are

CARIAD CARE LTD
Hub 2 Hartlepool Innovation Centre, Venture Court, Queens Meadow Business Park, Hartlepool, TS25 5TG. 

E: hello@cariad-care.co.uk

T:  0333 880 1505 

We are a care provider offering support services to individuals in the community. As a data controller, we determine how and why your personal information is processed.

2. What Personal Data We Collect

We may collect and process the following categories of personal data:

Service Users

• Name, date of birth, contact details
• Medical history, care plans, medication information
• Next‑of‑kin and emergency contact details
• GP and healthcare professional information
• Risk assessments and safeguarding information
• Notes relating to care delivery and wellbeing
• Financial information where relevant (e.g., invoicing)

Staff and Job Applicants

• Identification documents
• Employment history, qualifications, training records
• DBS checks
• Payroll and bank details
• Emergency contacts
• Performance and supervision records

Website or General Enquiries

• Contact form submissions
• Email correspondence
• IP address and basic technical data (if applicable)

3. How We Use Your Personal Data

We process personal data for the following purposes:

• Delivering safe, effective, and personalised care
• Meeting legal and regulatory obligations (CQC, safeguarding, employment law)
• Communicating with service users, families, and professionals
• Managing staff employment and training
• Maintaining accurate care records
• Handling complaints, incidents, and quality assurance
• Invoicing and financial administration
• Improving our services and ensuring compliance

We only collect information that is necessary for the provision of our services or required by law.

4. Lawful Basis for Processing

We rely on the following lawful bases under UK GDPR:

• Consent – when you give clear permission for specific processing 
• Contract – to deliver services you have requested
• Legal obligation – compliance with care regulations, safeguarding, employment law
• Vital interests – to protect someone’s life
• Public task – where applicable to care‑sector duties
• Legitimate interests – for operational and administrative purposes
• Special category data (e.g., health information) is processed under Article 9 UK GDPR, including health and social care provision and safeguarding requirements.
   

5. Sharing Your Information

We only share personal data when necessary and appropriate, including with:

• Healthcare professionals (GPs, nurses, hospitals)
• Local authorities and social services
• Regulatory bodies (e.g., CQC)
• Emergency services
• Payroll and HR service providers
• IT and software providers supporting our systems
• Law enforcement when required by law

We never sell your personal data.

6. How We Store and Protect Your Data

We take data security seriously. Measures include:

• Secure electronic care‑management systems
• Password protection and access controls
• Staff training in data protection and confidentiality
• Encrypted devices and secure storage
• Regular audits and compliance checks

We retain personal data only for as long as necessary to fulfil our legal and operational obligations.

7. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Request correction of inaccurate information
• Request deletion (where applicable)
• Restrict or object to processing
• Request data portability
• Withdraw consent at any time (where consent is the lawful basis)
• Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise your rights, contact us at: hello@cariad-care.co.uk

8. Cookies and Website Data (If Applicable)

If our website uses cookies or analytics tools, we may collect limited technical data to improve user experience. You can manage cookie preferences through your browser settings.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on our website or provided directly where appropriate.

10. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact:

CARIAD CARE LTD

Hub 2 Hartlepool Innovation Centre, Venture Court, Queens Meadow Business Park, Hartlepool, TS25 5TG. 

E: hello@cariad-care.co.uk

T:  0333 880 1505